Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
File:                     5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json)
Hash identifier:          qxpy4JgpkfFW4RmLcxghpsNS8+4H6+UmaRDGAVvdh8Q=
Subject key identifier:   ED:0C:D3:E7:5E:84:AC:FA:57:50:DF:7C:68:13:57:C7:21:4D:D5:90
Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA
Certificate issuer:       /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
Manifest number:          EB
Signing time:             Sun 19 Oct 2025 08:18:33 +0000
Manifest this update:     Sun 19 Oct 2025 08:18:32 +0000
Manifest next update:     Sun 26 Oct 2025 08:18:32 +0000
Files and hashes:         1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: QhzIdY98pDCc71w681KURIji4wNXVaty+kl76bNPAFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
        Validity
            Not Before: Oct 19 08:18:32 2025 GMT
            Not After : Oct 26 08:18:32 2025 GMT
        Subject: CN=68f49ed9-263a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:64:f6:7f:08:e2:4c:f1:ae:61:4c:c4:fb:0c:
                    44:00:1c:e4:0a:b7:b3:60:e5:a2:94:53:c7:9d:8d:
                    3a:0f:61:bc:14:65:ef:d0:ec:63:43:0f:2a:a0:47:
                    6b:47:fd:9f:96:79:7b:85:5b:2b:b7:b2:62:5d:45:
                    1b:66:6f:ae:c0:fd:e9:48:86:c6:86:32:ce:d8:25:
                    77:77:3e:0b:a8:47:ea:b9:82:30:aa:60:54:04:f0:
                    ba:26:33:6c:7b:cf:bb:4f:c9:7c:f5:3b:f6:99:83:
                    5e:3f:d4:dd:24:c8:79:e0:a2:04:3a:f0:32:7e:6d:
                    f0:26:a5:42:b0:09:0d:32:ad:96:0b:d0:0a:7e:0a:
                    0b:03:2e:79:ee:a7:0c:2e:87:05:c0:96:db:29:b3:
                    81:1b:74:cd:17:fb:d2:5a:7b:4d:5d:47:c7:59:64:
                    5e:85:67:e5:9b:cb:fb:ae:49:ed:d4:42:85:ab:ef:
                    cf:e3:f5:a2:ec:01:9b:4b:6e:01:6a:ec:ff:cc:8d:
                    ba:06:1c:4b:32:16:5e:cc:be:00:2a:6e:05:88:0a:
                    91:84:d3:74:f5:d0:0d:46:6b:d9:fe:db:48:67:72:
                    db:51:57:90:94:73:4c:95:73:cc:2a:c7:b6:35:db:
                    b2:97:88:c6:76:65:d3:c6:f6:dd:20:eb:98:1d:95:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:D3:E7:5E:84:AC:FA:57:50:DF:7C:68:13:57:C7:21:4D:D5:90
            X509v3 Authority Key Identifier:
                keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:4a:c0:33:e9:c9:53:17:b2:21:f1:c9:a7:3d:7e:fe:60:
         d0:11:11:58:1d:a2:15:cb:b4:d4:5c:4a:64:d7:be:eb:1d:d3:
         98:a5:4f:7f:38:a8:7d:bb:b9:23:61:91:88:00:f8:31:eb:08:
         67:e6:bf:46:21:51:2f:d9:24:1a:da:bf:f2:24:40:3a:2b:28:
         f2:ae:a5:e9:54:22:56:da:df:4e:e3:f9:4e:2c:96:1e:ef:0b:
         43:25:19:09:11:8d:cc:15:64:0d:0e:9f:9b:48:b4:ed:94:65:
         6a:8c:ed:aa:76:d4:09:24:d0:8e:03:49:8d:78:85:c3:16:76:
         e3:37:63:60:4b:14:15:9d:f9:b9:65:55:1d:2d:4a:68:13:fd:
         91:86:2a:63:66:11:f0:ff:ec:cd:2c:b1:34:a2:41:5d:bc:ea:
         d4:ea:09:5f:5b:91:59:25:61:85:41:34:d9:6d:7d:04:d9:a5:
         2d:02:27:5f:14:6c:b1:10:14:31:d4:30:4f:6b:71:ec:ff:ff:
         c6:b5:1e:83:d1:5f:16:15:49:a8:72:e4:14:06:2b:b2:cd:9b:
         76:68:ae:b3:94:60:a9:55:10:17:3f:38:8e:e9:f8:f9:d7:cb:
         c5:96:3e:e9:68:02:a0:80:f3:55:35:1b:ab:f8:fc:eb:d4:5d:
         1a:80:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:12 2025 by rpki-client