Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          cM13xhOifxUczOPqejtfDBscfUHT8QYL9ApCck3TDIA=
Subject key identifier:   8F:C4:B6:0C:25:9D:E2:D6:20:8D:16:75:DF:63:94:02:84:F8:81:F3
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1AA2
Signing time:             Sat 18 Oct 2025 16:39:19 +0000
Manifest this update:     Sat 18 Oct 2025 16:39:18 +0000
Manifest next update:     Sat 25 Oct 2025 16:39:18 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: o3TARqqLDNzmFuk6QkNUtyQ4R4VcfL8BBVHvMWBuEAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6818 (0x1aa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Oct 18 16:39:18 2025 GMT
            Not After : Oct 25 16:39:18 2025 GMT
        Subject: CN=68f3c2b7-5637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:da:c7:ef:ef:27:dc:2c:de:61:8a:18:79:
                    0e:00:f5:d5:59:70:73:1f:ec:70:37:d0:97:a7:6c:
                    38:63:92:fd:0f:c1:d4:8f:74:b5:cc:b5:27:eb:7d:
                    17:0f:b9:99:05:4a:53:63:9b:1a:d1:cd:e8:58:03:
                    62:00:d4:a6:76:78:ef:86:4f:19:b0:eb:7e:ad:f3:
                    11:7f:52:05:4b:0c:ef:b2:97:70:3c:eb:6c:c6:21:
                    45:42:cc:c8:2c:9d:2e:ad:1a:55:e6:3d:dd:7b:2a:
                    df:95:fd:f8:78:99:e4:26:10:24:b5:8d:63:ed:76:
                    d6:b4:e7:ea:94:cd:60:42:ad:a6:92:7a:10:56:ce:
                    c2:17:4b:e3:51:68:e6:85:31:32:09:89:51:21:8b:
                    c2:86:aa:6e:bc:ba:12:97:99:99:c4:c3:f1:a8:89:
                    f1:65:a5:7e:9e:f6:e0:b0:9a:c3:bc:b4:06:dd:f1:
                    f9:e2:a3:21:ce:32:7f:56:17:00:14:4d:22:d2:72:
                    2d:01:6c:bf:4d:59:95:8b:73:b2:af:e4:77:cf:49:
                    6d:38:6b:7c:a9:17:87:22:45:52:38:8e:80:e3:df:
                    24:e3:79:d7:6a:65:ef:d2:9a:a3:b8:a6:34:e8:92:
                    9b:b5:0b:8b:c1:8a:0f:e3:ed:40:20:d9:0d:27:ef:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C4:B6:0C:25:9D:E2:D6:20:8D:16:75:DF:63:94:02:84:F8:81:F3
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:8e:ca:27:05:1b:7d:4d:e3:4e:ff:80:42:25:1e:c8:7b:
         ef:e6:38:db:e1:31:f3:0e:e0:23:cb:ee:71:29:38:df:50:de:
         96:34:93:78:e9:46:51:2b:0e:70:b4:be:06:83:d3:6c:f2:89:
         eb:f9:a9:15:07:a6:9e:bc:4c:a6:cc:e6:90:3f:37:e7:92:4e:
         f2:e4:b7:03:61:d4:69:36:5f:e6:cb:49:b1:a1:e3:b0:d5:01:
         5c:81:00:9e:89:ee:57:7d:73:33:2d:4c:a7:c9:33:7f:e0:46:
         02:aa:c9:d0:fa:4c:05:4b:4d:85:2f:1f:73:bb:8a:45:26:09:
         a2:a4:af:fd:6c:5f:90:6b:fc:01:ca:44:b3:cb:ed:a5:ab:a1:
         f6:08:e3:c3:28:19:5d:da:dc:ad:78:e7:1c:5f:4e:b9:b3:fc:
         e0:d4:04:32:ba:7e:4a:e6:5c:8e:7d:23:dc:e7:1f:26:bc:ea:
         64:2b:ab:10:58:15:f6:80:28:8e:27:41:7d:43:8b:36:8e:16:
         46:cc:fa:97:63:bb:20:3a:a3:7d:d4:df:74:4d:7d:4d:69:a2:
         f1:8f:d4:2e:14:7a:21:d7:a0:33:ce:74:91:df:38:84:d7:0d:
         1b:cb:c3:2e:b8:f7:4b:a7:c9:b2:d6:68:73:5b:dd:35:4c:27:
         02:6d:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:33 2025 by rpki-client