Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          7q0jwqNT27kJQtt3m678VM+myBzm6+BhGaZR2rq9Z4E=
Subject key identifier:   43:B2:38:5F:E2:38:AD:6A:01:FB:69:CA:E3:A0:B7:C8:46:E0:3A:B4
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       18F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          4750
Signing time:             Sat 18 Oct 2025 16:01:53 +0000
Manifest this update:     Sat 18 Oct 2025 16:01:52 +0000
Manifest next update:     Sat 25 Oct 2025 16:01:52 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: +2lwbZy8Al+wlejwn/ADChroCObmwSe4y6UWD0jizFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6391 (0x18f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
        Validity
            Not Before: Oct 18 16:01:52 2025 GMT
            Not After : Oct 25 16:01:52 2025 GMT
        Subject: CN=68f3b9f0-3dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:70:9c:73:fc:b8:5c:6e:9f:a0:d4:6e:9d:
                    e5:8e:a2:72:7b:18:37:9a:2b:f4:31:5c:b5:22:87:
                    98:b0:d3:58:b3:af:06:9b:5e:46:ad:b4:f1:60:2d:
                    58:62:70:90:01:fa:f8:21:25:13:ee:63:88:f7:58:
                    79:c9:f2:e3:37:81:ba:c7:e9:aa:ee:6e:38:94:c8:
                    42:81:c1:db:df:eb:a2:63:2f:28:e4:26:00:fa:b2:
                    2b:f0:67:02:26:1e:5b:7a:a4:87:ca:48:26:75:55:
                    94:6c:4f:6d:8d:35:da:40:6b:f5:a9:47:14:4b:a8:
                    77:2e:05:9c:56:5f:0a:b7:f6:41:af:ab:be:c9:b7:
                    9b:c8:a9:77:9c:9e:79:bf:e6:13:ff:eb:93:4c:bd:
                    7a:1a:f4:f0:30:0e:58:1f:08:d9:fb:e3:8f:69:fa:
                    46:3c:0d:c3:e8:46:ec:b7:11:66:d3:be:7b:ed:bd:
                    65:b4:f8:a3:b8:55:df:1d:1d:26:8f:10:f8:2a:41:
                    cf:d3:6b:eb:39:3f:25:12:e9:4e:66:a2:a4:fb:9e:
                    92:cc:7b:8b:a0:3f:7f:40:ac:74:37:8f:d2:40:5e:
                    fd:cd:00:89:75:e2:fb:24:b2:c8:bd:f3:8e:bb:9b:
                    70:a0:a0:48:c6:ed:e7:e3:6c:24:20:a3:ac:a9:54:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:38:5F:E2:38:AD:6A:01:FB:69:CA:E3:A0:B7:C8:46:E0:3A:B4
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:30:43:79:83:14:57:03:12:90:1e:b5:9d:d0:19:73:36:
         c3:57:88:86:1f:7a:67:16:68:86:1e:8c:b2:55:a9:63:f3:c8:
         f8:71:d8:13:3e:2f:4b:4f:8c:5d:73:55:e5:13:fb:a9:96:28:
         38:d6:4a:23:61:4e:de:f4:a3:2e:49:70:d2:d6:d7:95:eb:05:
         c2:6a:ab:ba:33:32:98:65:4e:ca:e5:bb:da:6b:e8:5e:1e:c5:
         13:72:dd:ad:78:9d:3e:28:f3:58:2d:62:c3:e9:d0:18:ff:2b:
         cc:38:4f:b1:54:0d:ce:78:25:33:4f:6d:fd:a6:57:ba:4c:72:
         d1:dd:d3:e2:08:1a:8a:14:fa:ad:4b:12:67:32:f7:80:5e:ae:
         4f:ae:5f:2c:a8:75:b3:c1:94:ee:00:4c:52:82:f3:8c:52:1f:
         27:2b:0a:69:18:e9:19:56:98:a9:c4:84:ee:85:55:a7:54:c4:
         2f:6b:60:81:bd:40:ee:50:2c:64:c5:05:a9:2e:72:cb:b5:4b:
         03:dd:60:42:95:65:76:1d:c2:33:6b:79:d1:b0:94:99:df:42:
         11:2b:56:16:b7:3d:02:f5:83:d5:f3:47:7a:25:aa:56:3f:6d:
         06:33:1d:60:97:5c:ef:f8:dc:aa:d7:99:a7:24:d8:d6:6a:d4:
         0d:bd:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:05 2025 by rpki-client