Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
File:                     i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json)
Hash identifier:          5giQ/BFE+4xK57utOChI68AoqnnzCFqxUHWECN74dzg=
Subject key identifier:   4B:A5:16:A4:0A:C3:E8:56:95:43:B5:00:D6:6C:A6:21:D3:22:7B:90
Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90
Certificate issuer:       /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
Certificate serial:       0C58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
Manifest number:          1526
Signing time:             Sat 18 Oct 2025 19:20:03 +0000
Manifest this update:     Sat 18 Oct 2025 19:20:02 +0000
Manifest next update:     Sat 25 Oct 2025 19:20:02 +0000
Files and hashes:         1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: 9BxXbhTr+iKzOqNrU9TW5ZfV5aPuHnC1/H8n/ObSO+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
        Validity
            Not Before: Oct 18 19:20:02 2025 GMT
            Not After : Oct 25 19:20:02 2025 GMT
        Subject: CN=68f3e863-28bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3b:ed:87:a6:5b:70:88:1c:fd:4d:7a:e8:d6:
                    ca:93:a6:91:1c:78:a6:07:bc:ca:91:e7:a5:b5:b4:
                    50:15:e2:70:da:73:41:b4:f0:16:97:e5:d7:ad:ba:
                    b1:35:bb:f3:3f:a0:98:64:38:90:3e:fd:26:38:9a:
                    d9:9f:22:7e:95:c4:18:87:81:90:aa:33:e3:97:0d:
                    a9:fc:53:74:62:bd:ae:8f:04:d0:e7:3c:34:8c:e3:
                    f1:c6:d1:11:c3:39:2e:ed:7f:1c:47:41:e6:22:19:
                    8a:b8:a1:90:44:1e:eb:34:ee:6a:c4:56:4a:df:28:
                    ce:87:2c:cd:51:54:d1:47:a0:a5:17:af:28:1c:e1:
                    e2:e4:26:70:43:44:9d:8c:f1:dd:d7:14:bd:68:bf:
                    3a:95:5b:fd:ff:56:a2:e8:81:3e:37:5f:9e:07:aa:
                    83:c4:62:cf:43:7c:0a:29:ad:ca:3b:55:ce:33:ae:
                    50:5d:80:e7:50:04:86:cb:55:e0:4d:bc:a8:d2:d2:
                    a0:0c:b4:cb:43:5e:3e:d1:16:ae:8e:f9:a1:84:12:
                    3b:4c:02:f5:74:87:53:29:94:30:62:5b:33:91:c5:
                    0a:78:fe:aa:0e:fc:73:bb:be:a1:94:c2:8c:50:93:
                    86:0d:87:54:3f:3d:fb:9c:b9:34:8d:97:d3:38:3c:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A5:16:A4:0A:C3:E8:56:95:43:B5:00:D6:6C:A6:21:D3:22:7B:90
            X509v3 Authority Key Identifier:
                keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:78:9b:d3:2a:2b:66:6f:cb:e5:a5:d0:27:ed:c3:b3:cc:
         06:10:27:77:e0:5f:26:ed:17:68:a9:b2:9f:0a:64:28:15:63:
         a5:12:ed:85:a2:41:44:da:31:df:e6:de:a2:87:c6:b8:f9:01:
         db:3e:0c:5a:27:0d:53:5d:58:10:29:b3:78:03:99:99:44:64:
         85:81:75:65:c1:6d:5c:6f:3e:ca:56:c5:50:db:a5:f7:7b:c5:
         a5:af:35:83:1c:83:1d:23:57:b2:c3:da:3e:15:95:8b:d5:48:
         62:43:28:38:a9:06:0f:17:93:9b:95:3d:46:29:e5:e6:ed:04:
         0b:07:7f:6e:ac:90:4c:8f:47:01:4e:88:05:d4:fd:7c:04:79:
         55:6a:e0:c4:b2:77:c7:d4:d5:fb:7c:3a:b3:56:4f:25:45:31:
         2e:0f:47:31:4c:e2:43:7b:2a:87:9e:7e:77:59:e4:0c:35:32:
         8b:67:47:51:17:95:62:53:a8:a7:ba:41:54:12:e8:32:ce:e2:
         5b:30:68:c5:5d:03:88:e3:21:cc:fe:bc:08:59:7f:90:ba:d7:
         fa:43:f4:ea:40:b8:81:45:d6:34:4b:27:f0:23:5d:b4:12:2b:
         63:48:78:be:a3:0b:0f:67:59:0a:57:98:f3:fa:8a:96:2d:a8:
         1b:61:3b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:01 2025 by rpki-client