Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
File:                     Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json)
Hash identifier:          iWKEzNFLPyArzSDk16a/wEBMzPYpDHIpIEPOdkZ2iJA=
Subject key identifier:   CE:2C:1C:6D:F9:9E:2F:DA:1D:5B:92:53:5E:B9:B0:D8:16:8B:30:4D
Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78
Certificate issuer:       /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
Manifest number:          0193
Signing time:             Sun 19 Oct 2025 05:59:53 +0000
Manifest this update:     Sun 19 Oct 2025 05:59:53 +0000
Manifest next update:     Sun 26 Oct 2025 05:59:53 +0000
Files and hashes:         1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: dyWfK4DOgLDW/yxSsQ2SNHeSiMbxs5xnH/JEtC8mESU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl
                          rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
        Validity
            Not Before: Oct 19 05:59:53 2025 GMT
            Not After : Oct 26 05:59:53 2025 GMT
        Subject: CN=68f47e59-a696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:3d:ca:1c:c7:fd:49:73:d1:d4:73:49:ae:
                    b6:6e:4a:c8:66:ab:b9:80:8f:2d:81:4e:80:4f:2d:
                    cd:e8:25:a5:50:66:de:1b:59:10:c3:5f:b0:67:e2:
                    d9:57:64:bf:1f:60:50:d7:d2:91:0f:13:53:b9:2c:
                    29:bb:81:7a:6f:9e:b6:8d:e0:cc:23:79:c0:3f:d1:
                    e3:05:2e:2a:c1:21:72:42:00:18:48:c8:ab:47:30:
                    df:e9:2e:39:29:3c:f8:4c:fa:74:24:12:2a:13:b9:
                    66:73:e5:07:a7:08:2a:14:07:2a:8d:fd:27:0e:fa:
                    88:4a:da:f7:f6:01:e0:71:18:16:b6:dc:2c:46:c7:
                    63:78:78:fd:5a:dd:c1:07:ec:e2:8c:9c:d0:b6:9b:
                    2f:99:69:de:eb:05:07:4e:09:cb:2f:96:01:42:fc:
                    7b:bc:9b:40:4c:c0:0c:d1:dd:12:bb:d6:e9:b2:28:
                    c0:27:ef:25:d2:c1:b6:15:01:88:0e:99:d8:96:a3:
                    94:13:66:3b:81:93:a4:e3:d1:f2:98:ca:14:67:46:
                    56:85:02:3c:90:39:37:49:9a:f6:a2:a3:24:33:15:
                    61:58:da:df:34:12:a1:8d:b1:c8:e0:4e:dd:9c:8e:
                    97:b6:42:2b:93:61:f0:05:89:d9:af:05:c1:bb:78:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:1C:6D:F9:9E:2F:DA:1D:5B:92:53:5E:B9:B0:D8:16:8B:30:4D
            X509v3 Authority Key Identifier:
                keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:28:bc:e4:48:93:38:39:d5:63:08:55:a7:fc:ee:38:f2:
         a5:47:17:13:f4:3b:f6:00:f5:af:9f:49:17:62:bf:02:68:8c:
         2b:02:4b:4d:dc:d6:76:ff:71:4e:d7:ce:0f:46:85:68:3e:ba:
         bb:0f:70:19:91:09:7a:ff:ca:6f:c9:7f:2b:61:20:4d:ab:f3:
         95:2d:88:02:72:70:28:a7:2e:a5:8b:3e:48:e8:a9:d5:f5:80:
         24:1d:d0:2c:92:8c:9f:8c:25:c9:04:c7:8c:c0:a3:04:7f:76:
         25:01:62:c1:3b:06:c8:36:07:aa:f4:cf:be:11:f3:63:7b:42:
         7a:0d:f0:93:45:3e:8e:ad:27:93:2c:c4:ec:2b:6d:2c:86:16:
         88:27:a0:5d:3d:15:7e:e5:bc:73:10:05:73:83:d5:5d:65:b4:
         c0:f3:b9:08:91:28:19:79:dd:4c:14:9b:d9:4e:6e:cd:dd:bc:
         e7:2f:54:7f:cc:89:86:98:24:00:14:72:da:fd:c2:5f:e4:3c:
         1e:74:02:5c:4f:ff:6e:6f:d8:ff:7a:c9:f3:65:20:e6:5c:95:
         af:1e:dd:6d:ea:a3:1f:ae:5e:e0:ff:f5:24:3e:24:a0:9b:c8:
         54:67:d7:19:fd:1b:f0:66:a2:f4:40:9e:3c:0f:a9:31:5a:82:
         aa:7a:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:53:22 2025 by rpki-client