Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
File:                     60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json)
Hash identifier:          QAwCGlgj6fdSt7X8uzXhumMX28LsLoEKqnYE/voR7wE=
Subject key identifier:   77:B9:89:6D:1F:34:97:01:03:0A:22:DB:90:AC:3F:CB:4B:9E:B5:0A
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Certificate issuer:       /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
Manifest number:          02B2
Signing time:             Sun 19 Oct 2025 03:40:25 +0000
Manifest this update:     Sun 19 Oct 2025 03:40:24 +0000
Manifest next update:     Sun 26 Oct 2025 03:40:24 +0000
Files and hashes:         1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: YF2uyT/Je9+3hrZp8BAKl/65biaDf8Fl8RqiKANS5EI=)
                          2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: xFXNX7ojWtYsPecQfS60CBpkcLKXmlqCPRZZdxkSgiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
                          rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
        Validity
            Not Before: Oct 19 03:40:24 2025 GMT
            Not After : Oct 26 03:40:24 2025 GMT
        Subject: CN=68f45da9-4313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:e8:8c:53:18:45:cc:d5:33:0c:48:70:dd:
                    97:1a:8d:84:ef:a5:5c:2b:0e:6f:5e:3c:90:5d:6b:
                    64:2d:22:8a:55:50:89:e2:4a:45:6a:11:7b:0a:87:
                    b3:f6:7c:16:c7:2c:08:af:c1:bc:bb:4d:57:b2:68:
                    37:57:eb:b7:cf:5b:a9:00:1c:33:6c:de:61:f7:00:
                    ac:d5:b4:ca:71:3d:b9:1e:af:9f:7f:b4:2a:25:d6:
                    a6:cd:31:30:4f:47:71:84:e1:25:70:8c:f2:a5:b6:
                    cd:cf:0f:7c:a9:41:f8:62:41:fc:9f:09:8c:f5:ee:
                    23:b6:99:3c:c6:f6:b3:25:9f:26:37:d6:57:c5:39:
                    06:04:13:ca:d1:96:18:a8:5b:ef:59:c2:ed:78:f6:
                    3c:7f:36:93:2f:b9:ab:c5:41:42:9a:ca:00:be:d8:
                    68:ab:ff:88:d9:d1:77:4d:c6:6a:f9:ca:d5:e9:05:
                    44:f0:a4:95:c0:f8:50:ac:ec:65:3f:0c:f8:de:50:
                    3e:1c:23:15:16:8c:37:7f:7e:48:5b:d3:c5:55:07:
                    d9:e9:2e:99:08:90:d8:eb:e6:de:0b:a5:31:39:9e:
                    20:0b:39:46:a0:24:89:d7:85:17:2d:7a:be:5e:ca:
                    0d:de:69:13:95:4f:40:fb:25:e2:cb:7d:02:20:6b:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:89:6D:1F:34:97:01:03:0A:22:DB:90:AC:3F:CB:4B:9E:B5:0A
            X509v3 Authority Key Identifier:
                keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:3f:60:b0:f9:f2:db:3b:88:e6:11:79:c1:11:45:3c:b9:
         3f:ee:69:c4:fa:43:3c:3f:e3:c1:04:72:93:f2:bc:98:73:4c:
         79:35:54:d4:f3:ec:8f:80:60:ad:fd:68:dc:92:92:35:7b:ef:
         d6:98:d1:ca:d6:7b:1a:ec:a2:7c:83:2d:87:fd:40:e9:3c:c7:
         0b:a4:68:e9:b2:e6:73:d6:bd:8d:ad:42:68:8d:d7:9c:d3:53:
         cb:13:c5:84:5b:96:4e:6a:ae:e4:e0:18:30:8b:c9:6a:7c:7d:
         2e:bf:8f:a0:74:1a:45:ed:5e:9f:60:7d:c3:36:0c:d4:c7:da:
         8b:17:82:0d:0f:3c:11:9d:80:06:e2:6e:1f:cd:af:67:ba:53:
         1a:dd:b1:4e:d1:84:7c:ae:fc:c7:7e:64:7a:f8:9f:17:40:11:
         75:fb:fe:00:3e:01:ea:7e:bf:9b:75:cf:e5:4f:d9:63:5c:fe:
         62:de:aa:10:0d:fe:b4:22:33:e4:58:8c:0b:f1:30:8e:5f:60:
         5a:6a:bb:33:fd:82:50:d7:32:83:d3:7b:72:04:6a:b8:59:cb:
         c7:8d:83:6d:06:5f:29:77:87:fd:39:2c:40:6f:d5:fb:e7:ef:
         30:92:6b:cd:6f:6c:e7:01:c2:79:54:5a:1b:e5:bd:77:03:91:
         c3:e4:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:22 2025 by rpki-client