Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          YqLh2ugA4GsEZgJGxo0aMaprr5iCNS5aWpUCN7D/Tos=
Subject key identifier:   C4:63:59:69:D2:9C:58:DB:BC:B0:24:12:B2:3E:47:91:29:A6:CE:4E
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          F1
Signing time:             Sun 19 Oct 2025 08:12:57 +0000
Manifest this update:     Sun 19 Oct 2025 08:12:57 +0000
Manifest next update:     Sun 26 Oct 2025 08:12:57 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: PbAD8BnzkiGlrNS2WijKOgPVw1PLUV5eicHrhNyXbDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: Oct 19 08:12:57 2025 GMT
            Not After : Oct 26 08:12:57 2025 GMT
        Subject: CN=68f49d89-5612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:d6:4b:de:91:ef:41:29:9d:9b:a6:38:6f:
                    bc:2e:df:6d:42:c6:ab:8d:58:2d:10:68:4e:2f:4c:
                    af:9a:db:8c:98:96:6a:de:49:31:81:a6:22:25:bc:
                    73:38:36:88:3a:6a:08:85:bf:6d:39:70:bd:60:e8:
                    4f:17:dd:c9:65:90:d8:dc:f0:d7:97:45:f7:0c:11:
                    f5:41:24:ef:ba:1b:1d:91:3b:d7:87:03:58:74:5a:
                    e4:a2:fc:19:ea:e0:4f:26:84:8e:a1:7e:ed:87:75:
                    19:be:8e:11:f4:74:13:f6:0a:a4:0a:30:a3:8f:9e:
                    f3:45:bf:ab:6a:47:44:bc:42:60:6b:84:c9:30:0f:
                    5f:58:a7:54:1e:ba:65:de:63:5d:a5:d3:8b:f8:cf:
                    35:53:c5:1b:b4:ba:6a:7f:bf:ff:55:6e:1a:44:8a:
                    2f:ea:01:01:8b:8b:d9:e7:3f:37:15:65:ad:e2:fa:
                    80:90:a7:d0:6b:8f:08:a1:4d:4e:61:a9:fb:91:e7:
                    0c:bd:b6:b7:8c:e5:5d:e9:e9:88:2e:76:66:68:50:
                    52:48:7b:58:75:ae:23:72:bc:2b:13:46:7d:c6:1d:
                    0f:5e:aa:0b:22:87:37:3e:98:dd:e4:68:d2:c4:c9:
                    b6:71:73:85:e6:14:97:cb:e3:15:da:5b:e1:29:d8:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:59:69:D2:9C:58:DB:BC:B0:24:12:B2:3E:47:91:29:A6:CE:4E
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ab:2a:45:61:4b:e3:d8:01:4d:d2:6b:4c:6c:8e:6a:2b:ec:
         00:d7:b6:4c:1c:3b:cc:a0:83:6e:ec:46:7e:67:58:a7:24:59:
         6d:61:e0:62:64:a1:6a:e9:f8:08:94:7f:42:17:8a:d0:a3:33:
         f6:f7:d4:43:05:20:c9:07:e1:37:36:4f:79:a2:1a:fc:1a:be:
         08:2b:54:a7:c4:1b:9c:8b:66:9f:a4:c3:d2:b8:42:20:65:42:
         bb:4c:ee:14:e6:44:09:b2:c7:e9:2e:7d:97:82:42:2f:39:e6:
         da:b1:b5:52:cb:fb:79:31:8c:3b:ac:d2:e4:bd:c6:79:52:f0:
         b8:7d:60:b8:55:b9:43:b8:fb:ba:8a:99:3d:a9:89:a3:59:ad:
         4e:05:01:97:4c:09:d2:16:8d:d7:66:ef:c9:ec:61:11:c9:ea:
         0e:d3:bd:58:8c:7f:4b:dc:83:1b:31:8c:66:5d:7f:5d:1b:52:
         a3:09:81:96:a4:d3:f8:0c:d5:2b:56:73:44:68:0a:d1:da:58:
         ee:ae:a9:a2:10:a3:a2:0e:2c:98:4a:a4:c9:c9:9f:8c:aa:69:
         7d:16:af:36:44:31:05:11:b3:9e:34:26:4d:d5:13:28:e5:de:
         2d:a9:7b:20:d8:f0:2b:c2:b0:62:66:10:27:55:47:48:18:03:
         ed:15:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:12 2025 by rpki-client