Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File:                     6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier:          5WKl4diYkGm4yhaEBvurbk8arNthWUqNEKhRlYoFt/M=
Subject key identifier:   58:5B:5A:5D:84:30:8C:6D:E4:9F:CA:9D:16:13:71:4D:75:B2:41:D3
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       0785
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number:          0771
Signing time:             Sat 18 Oct 2025 22:59:51 +0000
Manifest this update:     Sat 18 Oct 2025 22:59:50 +0000
Manifest next update:     Sat 25 Oct 2025 22:59:50 +0000
Files and hashes:         1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: JabE8z4KFB8XpXKQzCQOGLeHfJ1pRw4N7p6tkcxa7G8=)
                          2: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: KByBfekrOF7xvSI1YrE4YztTsj8rnTQtS9LcKWosd+s=)
                          3: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: LUGyntZpTx3cLjPnI4/ZvHcb5zJvApgdxyoFFAHshWk=)
                          4: BB684734816B11EFA4D23930C4F9AE02.roa (hash: xJiu9qVP/6Seb9/2FkWcOgMWYz4XHtqKonzLZCE61To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
                          rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
        Validity
            Not Before: Oct 18 22:59:50 2025 GMT
            Not After : Oct 25 22:59:50 2025 GMT
        Subject: CN=68f41be7-5e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:e5:9a:39:38:cb:69:89:a3:e9:16:36:d6:
                    95:89:60:5b:44:ff:c6:88:41:07:e8:f2:7a:cb:36:
                    e3:f7:a9:10:4a:71:83:bc:1d:6d:5d:71:6a:ef:cb:
                    be:3b:39:25:b1:48:c1:64:6e:70:f4:96:ee:f8:9f:
                    e5:80:e4:26:59:20:fd:5b:c0:76:9d:11:8c:fb:7f:
                    c3:14:85:30:8b:d2:06:66:c8:3e:dd:ed:49:1b:64:
                    3c:72:2d:49:df:ff:7c:4c:66:45:66:b3:c2:80:d7:
                    3b:64:c6:75:6b:b3:09:07:29:21:07:74:61:d6:bd:
                    65:af:79:da:97:57:45:ef:6d:23:fc:eb:82:09:2b:
                    70:d9:39:a8:44:92:73:27:4a:26:ea:71:c9:e9:46:
                    4c:8e:f9:23:8c:a8:1d:13:81:47:0b:b0:6e:ce:ad:
                    e7:e3:f2:e2:57:98:3f:e0:a4:74:62:de:e0:32:75:
                    78:62:10:6e:16:0c:ee:fa:70:9f:a7:da:cf:55:57:
                    54:b8:6d:d2:24:13:0b:8b:51:b6:80:6a:93:6b:4c:
                    95:25:37:a6:9c:64:b8:3e:54:3b:c4:c7:c7:ca:c9:
                    ed:56:ef:1d:1c:2d:46:58:db:23:2e:85:24:aa:c4:
                    6f:c9:99:28:bb:8d:66:71:da:d4:e2:cf:3b:61:80:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5B:5A:5D:84:30:8C:6D:E4:9F:CA:9D:16:13:71:4D:75:B2:41:D3
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:3d:dc:1e:f5:d8:2f:0e:7a:e1:10:4f:e2:f6:20:df:b4:
         46:9d:a8:50:9b:bd:c5:f9:24:4a:df:f6:2a:f4:18:b9:90:eb:
         94:d1:ca:f1:25:18:92:14:51:1b:42:6c:30:a3:ca:69:c4:84:
         d1:25:bb:5e:54:cd:4b:eb:9c:6e:7e:58:f5:0d:44:ea:fe:a1:
         49:1b:36:71:3e:aa:91:3d:ce:eb:e2:f2:a5:47:6c:d6:9a:24:
         1f:64:24:3e:6b:cd:af:21:e3:fb:e7:04:51:14:db:22:54:11:
         7b:16:48:7b:a6:e3:95:af:5e:cb:f8:3b:e8:e4:80:7f:88:3b:
         c6:c7:ab:3a:bb:7d:33:d3:29:c1:32:37:a5:56:f3:6f:23:5a:
         df:be:50:24:95:44:79:00:12:5c:79:4f:e8:2f:50:41:23:c9:
         30:37:bc:63:7e:5d:98:b6:66:2b:4c:11:02:14:5f:09:c5:df:
         7b:c4:69:2b:b1:59:ad:8d:02:60:47:67:9f:c8:78:65:e5:79:
         83:76:6a:42:e9:95:e2:76:2c:55:2f:a2:43:72:6e:cb:3d:ea:
         35:fc:9d:96:42:b7:a1:d2:73:20:72:ef:cc:e4:4d:c8:9a:28:
         20:24:0e:2f:bf:f0:6b:d8:65:28:96:d4:5f:93:a2:7c:46:1e:
         ef:92:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:38 2025 by rpki-client