Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
File:                     6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json)
Hash identifier:          2XqNHaoBFwrt+4nPqa8CO7nikHe6V4KocPfsl+Psois=
Subject key identifier:   31:27:40:BC:1A:20:B1:B2:84:4A:51:B9:E8:F6:36:D6:CA:A2:59:06
Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1
Certificate issuer:       /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
Certificate serial:       09CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
Manifest number:          09C3
Signing time:             Sat 18 Oct 2025 21:02:09 +0000
Manifest this update:     Sat 18 Oct 2025 21:02:08 +0000
Manifest next update:     Sat 25 Oct 2025 21:02:08 +0000
Files and hashes:         1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: k4jSqNINaOTWzlKtFTs8s4I9xfy9/mxyZ1QQcFpPFu4=)
                          2: 03643212905F11EA94823C28C4F9AE02.roa (hash: HOv6woKgZ16Bnc6yr+WXy4C1GAOaPia/dFqUxc6c7eU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl
                          rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
        Validity
            Not Before: Oct 18 21:02:08 2025 GMT
            Not After : Oct 25 21:02:08 2025 GMT
        Subject: CN=68f40051-4950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:61:06:b2:a1:42:c7:6a:f9:4f:de:2c:7b:e9:
                    3d:d1:70:5c:74:97:bb:97:8b:6d:1e:c3:eb:08:b5:
                    09:ef:32:bd:f0:85:55:b5:7e:4b:f7:28:98:23:11:
                    39:b1:ec:ff:69:41:8a:24:55:50:a8:2e:f1:c0:cc:
                    f4:05:16:fe:f7:da:00:4d:cd:73:df:28:94:09:ed:
                    01:92:0d:4b:16:2e:fb:dd:8c:ab:33:64:15:2e:27:
                    f5:d8:a2:97:dc:08:fd:07:e3:70:41:36:f7:d0:d6:
                    cd:e4:41:06:5d:44:fe:44:28:2b:ef:57:8a:33:04:
                    7d:2d:a8:db:99:ba:69:4b:03:e0:be:81:b4:4c:8c:
                    4a:74:1a:db:66:5b:af:9b:72:ee:d8:0a:93:1d:97:
                    cb:95:12:b0:f3:7b:9e:88:15:5c:63:d1:95:eb:d5:
                    f1:f4:9b:e2:6b:60:bd:d2:58:f7:5a:52:1a:37:86:
                    b3:82:25:e7:24:1b:8e:37:a7:6c:60:da:1c:90:fa:
                    74:4c:7a:43:b8:e0:7e:59:95:aa:46:12:ee:5c:e8:
                    6e:73:8d:6c:5d:7c:0d:1d:cc:38:09:d7:96:c3:51:
                    23:ab:d9:63:07:c3:0b:1e:97:1e:96:6f:10:62:5b:
                    ec:6f:88:9f:f0:80:d7:fc:57:9d:e3:85:1d:49:c5:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:27:40:BC:1A:20:B1:B2:84:4A:51:B9:E8:F6:36:D6:CA:A2:59:06
            X509v3 Authority Key Identifier:
                keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:66:2d:b3:a5:4b:78:c1:7d:78:ed:bc:5f:98:e8:c3:33:15:
         2e:52:33:5b:6c:3b:e8:c5:f6:5b:64:dc:03:96:e0:d1:8f:95:
         97:8b:c1:ae:a1:14:0e:e7:a2:1c:a7:d2:f6:6e:f4:db:7b:fe:
         e0:ff:8a:ea:5b:0e:43:05:5a:be:5c:e1:48:e4:ea:8f:dc:91:
         f2:5a:72:9f:50:0e:79:30:02:93:cc:74:56:e6:eb:52:f7:87:
         0f:6a:3d:74:5f:bd:04:33:3b:b1:31:51:a0:a3:92:c0:10:f3:
         24:3f:49:49:5f:64:e6:e3:38:8c:fe:f8:05:ae:97:a3:05:6c:
         9a:53:64:e7:26:06:cb:b8:d5:20:5f:08:aa:8b:be:5b:fd:5d:
         39:31:ec:cb:2a:92:8e:f3:58:70:1c:ce:de:8f:a7:40:0b:6f:
         80:65:71:d7:c5:71:0a:f3:b6:4e:47:c4:28:27:21:34:23:03:
         4a:a7:6c:cb:d8:96:72:69:4b:27:75:b5:0f:d7:2d:24:52:68:
         b4:ee:86:a3:1e:47:70:e3:e3:8d:b5:8e:dd:9d:93:af:f2:7f:
         d0:68:80:a2:2a:19:d4:26:c3:df:29:f8:29:91:8c:23:c0:06:
         ec:3a:ba:f0:4b:67:27:02:2f:cf:b0:d2:30:90:f5:42:5f:43:
         ed:e2:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:48 2025 by rpki-client