Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
File:                     A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json)
Hash identifier:          BAMi32UjoY5B96tYzjl6Vxkci52zxIkFbCMoVInBVug=
Subject key identifier:   7F:5E:75:C9:0C:D2:24:F5:CF:4E:C4:15:22:FE:87:47:53:0E:A1:52
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Certificate issuer:       /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial:       0B8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
Manifest number:          0B86
Signing time:             Sat 18 Oct 2025 19:53:10 +0000
Manifest this update:     Sat 18 Oct 2025 19:53:09 +0000
Manifest next update:     Sat 25 Oct 2025 19:53:09 +0000
Files and hashes:         1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: S9WEgAhVFmV+BSYmbmY1fMD7WBoWJT+HPcw4M3KHARw=)
                          2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
                          rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2958 (0xb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
        Validity
            Not Before: Oct 18 19:53:09 2025 GMT
            Not After : Oct 25 19:53:09 2025 GMT
        Subject: CN=68f3f026-cd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:48:f2:36:81:f2:2c:2e:23:e5:f0:de:ae:6f:
                    23:7d:aa:0c:fd:af:e8:90:af:39:a8:ad:f6:d6:f4:
                    5c:81:35:02:6f:c5:d8:02:08:a1:5c:ec:d6:f7:56:
                    7a:76:ee:4a:dd:37:08:c7:4b:55:7f:98:4a:02:90:
                    13:8c:ee:b1:33:c4:2a:28:f5:ba:e6:4e:5e:cb:2b:
                    43:3a:a5:36:2e:93:e3:49:3b:bb:ca:3f:25:0f:14:
                    fe:ef:7a:3a:a5:26:7e:95:0f:d2:79:da:38:8f:05:
                    1d:d9:7d:64:22:53:0b:b6:9d:f2:d3:0e:4c:bf:88:
                    3e:14:b2:49:51:cc:1a:ad:32:c5:c5:e9:4a:14:89:
                    c2:5f:4c:71:95:75:b4:fb:db:4c:c1:34:fb:a4:4d:
                    7b:8f:4e:79:53:4c:fd:9e:33:ea:2c:57:43:be:2d:
                    99:5b:e3:4b:e9:94:b5:07:84:78:5f:be:7f:3a:7f:
                    73:2d:87:41:d2:a0:de:ef:54:e3:d5:7f:15:30:37:
                    a2:0a:e8:89:2a:74:b1:d6:46:59:f0:4a:d2:24:e1:
                    19:26:b2:fb:00:c9:33:48:0b:b1:7a:ee:8e:3a:17:
                    f2:a8:8f:37:2e:1d:84:eb:cb:c5:d4:ce:84:48:2a:
                    fb:bc:80:97:5b:ae:9c:7c:cb:1f:a8:c4:7b:90:2f:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:75:C9:0C:D2:24:F5:CF:4E:C4:15:22:FE:87:47:53:0E:A1:52
            X509v3 Authority Key Identifier:
                keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:6d:a7:ac:40:79:bd:66:2f:df:6f:aa:64:29:0f:d1:96:
         c8:06:81:db:7f:47:c3:fa:4a:31:37:e1:34:39:de:94:56:31:
         9b:a9:57:dc:d7:00:11:45:81:63:2b:63:a0:47:a6:f6:8e:cf:
         dd:ab:7b:3f:72:bd:e0:16:9d:4c:52:da:72:4d:3a:1a:f7:5b:
         95:98:5b:96:7d:5a:63:59:6d:1d:f2:d9:7c:3c:11:20:35:5a:
         47:9e:87:26:74:c5:b7:03:77:e3:bb:87:2d:a7:44:e2:8d:43:
         8e:0b:97:ec:30:5c:72:8b:af:d1:13:de:90:2a:5f:da:19:c8:
         2c:4d:5b:b0:21:8f:17:89:3a:79:c8:f2:ca:d7:7d:a8:82:b1:
         9e:73:7a:7e:57:fa:35:28:6e:49:19:bf:1f:d8:42:c7:dd:95:
         2c:86:65:dc:b8:49:b8:6c:08:f5:73:37:6c:5b:2e:1c:31:91:
         19:ce:fe:f5:60:d7:ce:73:20:e1:3f:6b:80:a5:bb:3b:7f:5f:
         94:b0:4c:a5:da:1d:fe:33:33:30:f5:fe:78:df:9d:04:c5:85:
         84:a2:67:8f:54:ad:55:98:1f:ea:2d:0b:c6:0d:44:49:11:e8:
         1c:5c:f8:42:9e:e5:41:97:fe:6c:3b:9c:97:6e:54:30:f7:6c:
         62:24:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:43 2025 by rpki-client