Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
File:                     Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json)
Hash identifier:          m0A3TL2IeHezmeobE52bSbEi6nIxLG/mzkE7zJuDUnc=
Subject key identifier:   D6:5D:A3:49:90:44:63:7D:55:0D:AD:00:59:9E:F9:DB:16:C5:F0:0E
Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
Certificate issuer:       /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
Manifest number:          EA
Signing time:             Sun 19 Oct 2025 08:21:23 +0000
Manifest this update:     Sun 19 Oct 2025 08:21:23 +0000
Manifest next update:     Sun 26 Oct 2025 08:21:23 +0000
Files and hashes:         1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: RvO7e507TGJjsuYKCZ7lk84A0KTW0Y37uJ2fkuq76Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
        Validity
            Not Before: Oct 19 08:21:23 2025 GMT
            Not After : Oct 26 08:21:23 2025 GMT
        Subject: CN=68f49f83-3183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:a3:40:bc:fe:cf:ef:f4:1a:29:9e:75:dc:
                    d6:51:c7:6e:cf:be:e7:dc:c4:b3:2b:0b:5e:36:f2:
                    71:04:d5:f4:99:0f:6f:4a:93:ea:a1:48:df:66:a4:
                    f0:4d:52:e0:cc:1f:43:51:7c:23:ac:d6:95:89:05:
                    1d:2e:39:54:f3:3f:b5:15:c3:ca:96:27:e8:9d:7f:
                    a4:f0:ad:49:b1:80:8e:ca:e7:c2:f0:77:95:e8:40:
                    5e:fc:fa:ee:b7:58:3e:18:d5:3d:80:62:fd:c4:3c:
                    0a:9c:4d:5a:e6:46:8a:7c:c3:91:bd:68:0b:4a:04:
                    f1:00:96:5b:67:73:5a:bc:13:ab:99:03:8d:07:50:
                    c6:21:11:36:8c:1a:ff:aa:04:bb:67:d9:31:c2:23:
                    8a:48:52:d0:5c:6d:61:b0:2b:12:6d:71:5b:24:2c:
                    22:e0:68:4f:d8:04:27:c7:25:18:3f:0c:d0:0d:9d:
                    e4:01:03:a1:c6:c5:2f:98:3b:69:b6:fd:95:df:99:
                    1b:a5:75:e0:e8:30:a9:f6:72:68:59:43:51:ee:5c:
                    cd:df:a5:e2:8f:fc:73:64:06:57:2e:87:b6:36:68:
                    57:63:b2:4b:7f:cf:51:1f:04:7d:dc:93:a0:65:3f:
                    78:58:67:fc:85:55:22:ff:32:6e:86:94:ac:18:1d:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5D:A3:49:90:44:63:7D:55:0D:AD:00:59:9E:F9:DB:16:C5:F0:0E
            X509v3 Authority Key Identifier:
                keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:5f:e7:d6:46:ac:c4:43:bd:7a:9b:19:7b:ba:2a:67:60:95:
         3f:cc:18:af:76:4c:ca:e4:41:c3:d9:4d:02:0d:f7:81:19:41:
         13:0d:55:af:a4:cd:a6:65:bc:99:a7:18:50:91:65:79:c0:ff:
         fc:99:c6:8a:b0:84:96:14:8e:8b:65:64:70:03:a4:2b:0b:c3:
         44:36:69:7e:95:86:3d:45:2f:1e:fe:c6:13:55:17:8f:ff:d6:
         aa:cd:3a:04:7c:54:ee:97:4b:42:9f:d8:78:34:34:13:f9:b2:
         b4:fb:61:7b:24:23:c1:bc:a7:0a:7d:e0:23:09:3a:af:1d:4d:
         77:53:aa:a7:1b:98:f5:02:d5:28:08:ba:7e:12:85:b7:66:31:
         31:1c:b6:25:34:fb:ef:c0:d5:d3:02:38:c0:4b:57:aa:85:aa:
         d3:26:fc:10:ae:b6:71:b9:a0:0a:b4:57:05:52:82:0d:f0:4c:
         9f:1a:4f:82:7a:67:ed:45:d8:10:b8:f6:38:55:21:0e:ab:53:
         c3:2a:e4:71:39:17:f2:30:c6:b2:30:d5:89:40:dc:f2:05:ef:
         1e:07:1e:a6:f3:51:52:f8:91:e7:ae:9f:a4:6c:a9:69:17:89:
         03:a9:a0:ff:28:4b:c7:8a:81:08:2e:3d:ee:d7:c8:e1:c3:19:
         ea:42:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:25 2025 by rpki-client