Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
File:                     hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json)
Hash identifier:          TIoxNIea2D5vSXWfmaMw5dDLISzP3zjMCyBPTypgTfk=
Subject key identifier:   3B:92:48:4B:6B:1D:AA:5A:AF:F4:95:B6:AE:63:D1:18:3F:DE:BD:8A
Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
Certificate issuer:       /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
Manifest number:          93
Signing time:             Sun 19 Oct 2025 09:39:21 +0000
Manifest this update:     Sun 19 Oct 2025 09:39:20 +0000
Manifest next update:     Sun 26 Oct 2025 09:39:20 +0000
Files and hashes:         1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: M1JVNdqfCLZTQjLWT2omWn4HsaYa1mC0u+0nr5tI5DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
        Validity
            Not Before: Oct 19 09:39:20 2025 GMT
            Not After : Oct 26 09:39:20 2025 GMT
        Subject: CN=68f4b1c8-18bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:c5:43:91:fb:87:7c:3e:e4:94:da:55:6c:
                    7b:ad:11:25:4d:d5:29:2f:8b:9a:80:68:44:27:6a:
                    8e:d0:d9:f1:ea:29:db:77:2e:b9:be:0b:5a:e3:1a:
                    38:47:37:50:ba:df:50:22:e9:32:56:74:41:5a:a7:
                    96:fe:a7:f6:cd:88:d2:cd:14:09:4f:31:0f:2f:65:
                    12:39:6f:f1:ee:9a:69:9e:6e:bb:56:f9:f3:a4:f5:
                    fc:57:78:1b:6f:6f:ae:34:15:96:d4:04:6c:60:cd:
                    2d:01:c3:1b:a8:d6:06:cf:21:32:d1:be:41:32:50:
                    f8:3f:79:ba:81:d7:9c:25:98:b2:5a:86:57:27:96:
                    ad:3d:80:9c:f4:49:4e:83:1e:c7:ce:77:39:3f:0f:
                    0a:ce:be:a8:0b:6d:40:64:80:95:db:bf:f1:67:ee:
                    23:02:9e:00:ae:32:8b:1f:53:cd:f1:22:29:5a:9f:
                    eb:8a:ad:3f:cd:e8:97:75:4e:b6:07:4e:ee:d9:85:
                    0f:ee:06:9b:c4:92:7f:5a:86:4f:1b:fc:4c:0a:fe:
                    7c:af:ce:5d:d6:a4:e5:1f:38:b5:08:88:4b:51:16:
                    87:2d:7b:6a:fa:57:1e:d4:83:cf:cd:71:d5:86:bf:
                    74:8c:84:3b:a2:3c:f5:07:78:32:3a:4d:df:6c:79:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:92:48:4B:6B:1D:AA:5A:AF:F4:95:B6:AE:63:D1:18:3F:DE:BD:8A
            X509v3 Authority Key Identifier:
                keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:f8:b1:a2:ce:7f:87:f1:43:c7:31:88:01:23:f8:9e:f2:35:
         01:54:2c:e3:64:ef:a1:26:2e:27:39:4c:7c:a3:51:00:e9:72:
         b0:a9:db:82:eb:77:b5:48:b1:a5:9b:98:b1:5c:7f:56:77:4c:
         36:96:9b:09:e1:0b:2e:45:c0:70:a8:aa:5a:b3:8d:99:32:07:
         f4:c1:73:e4:a4:cf:b0:8e:d0:ec:46:bf:24:0a:ff:ef:97:ba:
         86:77:73:2e:df:8b:8e:ec:a7:56:55:cc:1c:6e:91:90:f5:18:
         30:f4:cb:f6:7b:c5:36:8c:3a:37:0d:0d:0a:dc:18:87:5d:b4:
         5e:ed:00:1e:ea:5f:34:8d:a5:a9:7d:e3:b5:a2:97:20:3e:1a:
         88:42:14:fe:41:0a:39:3c:23:a0:c6:c2:7c:52:14:cc:a0:93:
         20:64:c7:11:7d:3a:68:c1:ff:a8:21:03:b3:3f:31:b4:24:c3:
         0b:05:a8:0a:8b:b9:41:56:f0:f5:35:6b:3d:1b:17:a4:49:53:
         64:6a:a4:f8:b8:dd:f2:78:1a:98:fb:d7:7e:51:64:94:c4:88:
         5c:72:15:c6:7b:45:2c:66:f1:81:6e:1a:32:07:68:75:11:e7:
         58:cd:e9:d4:d4:1a:17:5f:b1:41:7d:ba:9d:18:fd:4b:dd:b1:
         63:fb:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:44 2025 by rpki-client