Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          pQjUVD1TESq0IkBGv3YGw0QJXma/aEXu+oAHH7wRIdI=
Subject key identifier:   0B:53:1E:79:4A:08:77:C6:9C:FE:22:4F:02:93:25:6B:92:76:6D:6E
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          064E
Signing time:             Sun 19 Oct 2025 00:12:41 +0000
Manifest this update:     Sun 19 Oct 2025 00:12:41 +0000
Manifest next update:     Sun 26 Oct 2025 00:12:41 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: 6VIOVMFMuUizwFZazkw9N71K1YReBUJs3ieOp4e6ch8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Oct 19 00:12:41 2025 GMT
            Not After : Oct 26 00:12:41 2025 GMT
        Subject: CN=68f42cf9-0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:14:c7:26:db:01:81:19:38:ff:5e:c6:f6:
                    9b:5f:d0:21:18:86:74:3a:61:82:0c:a8:69:66:6e:
                    d9:e5:01:cc:c3:d7:58:73:e0:3f:8a:ae:f6:57:4d:
                    de:cd:42:d1:06:66:83:6f:1f:f7:0b:3c:21:2e:97:
                    f4:6b:cd:6c:12:c7:9a:e5:10:0f:56:d2:95:6e:d9:
                    ed:65:a1:08:11:6f:6d:29:cb:60:cc:92:a0:bd:26:
                    f5:08:93:ee:fa:69:c6:27:17:7b:98:4d:01:52:55:
                    22:28:c1:1a:98:a5:8a:8e:a2:bb:48:b0:05:06:d1:
                    cb:32:5c:19:a8:df:3c:8a:a8:11:aa:cf:6a:37:fd:
                    50:8a:13:45:e9:37:38:16:b1:92:36:56:f1:3e:3d:
                    5e:8b:97:6e:d9:7e:fa:65:f1:84:3d:4e:b8:67:85:
                    56:ac:c7:64:7a:f5:70:80:1b:c5:75:45:11:d0:79:
                    37:11:1e:cd:9e:31:b1:e0:15:fd:d2:4a:15:98:24:
                    2c:f0:1e:72:75:71:a3:44:0c:4c:e7:72:53:f5:6a:
                    ed:9f:19:ab:d0:66:1e:c4:1d:af:90:52:e5:c6:5d:
                    13:6a:54:33:76:0c:40:c7:65:35:7f:05:68:1e:fa:
                    6f:60:fb:28:0d:51:aa:b9:1f:e0:37:f3:fe:c7:5a:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:1E:79:4A:08:77:C6:9C:FE:22:4F:02:93:25:6B:92:76:6D:6E
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:ac:56:89:60:8e:61:3e:51:74:50:46:88:c1:38:9e:15:
         69:6f:03:20:54:58:ab:74:91:8b:e5:92:a5:15:82:de:f6:90:
         ee:66:db:a5:40:78:00:13:b7:92:eb:fa:22:3a:7c:97:76:06:
         ca:67:84:52:61:bf:8a:37:a0:03:80:06:3f:3f:b7:e4:7c:30:
         be:ce:db:c1:97:41:7d:bb:a9:09:b5:7e:4f:49:3a:bc:2e:b2:
         ee:89:de:25:e7:48:7c:f9:ee:49:57:83:5b:66:fc:f0:37:7d:
         23:f7:dc:37:d2:43:48:a5:df:d1:50:02:20:5b:cb:28:be:fa:
         32:b2:61:f1:e6:32:3d:e5:3b:f2:19:38:70:4e:63:84:4e:e5:
         e8:13:37:19:42:d1:6f:05:49:10:cf:64:11:74:85:f7:09:54:
         66:19:41:55:0b:3f:dc:d2:e3:fa:11:ce:6f:df:b9:f4:1c:37:
         b1:70:4c:23:4e:13:4f:fd:a0:7e:6f:32:23:37:9c:73:e6:a1:
         50:69:b0:14:2e:e7:c7:24:d9:2e:a4:fb:93:4d:67:93:17:70:
         f9:1d:e4:c8:e0:f0:5a:a9:88:77:9b:85:61:a0:35:1a:6f:38:
         18:e0:10:f1:02:e4:9b:6f:17:2b:e3:bb:dc:c9:68:3e:a4:14:
         99:85:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:31 2025 by rpki-client