Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
File:                     FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json)
Hash identifier:          rm2FEVSL/WqpyAm/W2VeXGlLngt9vanQy7f8n64TDzk=
Subject key identifier:   6D:9E:4A:7C:4A:53:6A:CD:BA:9F:6C:40:0C:DC:98:21:F2:AB:FA:4C
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Certificate issuer:       /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
Manifest number:          06AF
Signing time:             Sat 18 Oct 2025 23:56:26 +0000
Manifest this update:     Sat 18 Oct 2025 23:56:25 +0000
Manifest next update:     Sat 25 Oct 2025 23:56:25 +0000
Files and hashes:         1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: B64N+WiDPMSf+iwJgQuS+cdaGXvd1GuNp80HqiTW5zo=)
                          2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: jm6qF0iG7lzG09wOX/EbjjAF73STR64Y7EPlh/2TSZY=)
                          3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: QybDkxZsIA9LhScKa+XNkLDfh3ltBF5Yhpro/oGoLB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
                          rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
        Validity
            Not Before: Oct 18 23:56:25 2025 GMT
            Not After : Oct 25 23:56:25 2025 GMT
        Subject: CN=68f4292a-7e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:5a:4c:ee:31:72:fb:0b:aa:26:eb:a5:ed:
                    13:0b:3e:1f:5f:64:25:fa:ac:fc:09:30:60:b7:bc:
                    99:5d:48:2e:3e:c6:2f:bb:3f:81:c4:ba:9b:a4:2e:
                    ab:15:4f:f4:fc:0f:3f:86:9e:c5:71:3f:06:36:36:
                    3a:42:47:58:02:f9:4d:51:b0:6a:65:71:65:b5:bf:
                    3c:58:11:00:f0:0d:87:43:d4:c9:2b:1f:fc:2c:ed:
                    a3:f0:ee:1e:1e:4a:a2:72:02:bc:ec:82:f8:2b:6e:
                    29:e2:b8:1b:2e:09:00:0d:19:b6:0c:69:ef:cc:d6:
                    3f:ac:2a:56:2e:5d:06:71:98:24:5c:7b:27:db:4a:
                    6a:6b:a8:51:bc:31:73:bb:ad:36:ed:22:fc:2c:c1:
                    43:93:af:34:75:f4:c0:54:68:dc:60:60:c9:bc:d6:
                    e6:71:30:56:b8:ad:c1:03:1e:72:dd:82:4c:0c:33:
                    6c:ce:29:f2:4a:b2:60:33:05:fc:2d:d1:5f:cd:8a:
                    67:c9:16:37:0e:cc:bf:60:66:85:2f:0d:7e:a8:dc:
                    8b:1b:9d:b4:24:d7:d9:d0:8b:e1:cf:e8:67:df:da:
                    dc:3c:e4:16:3e:67:87:15:26:cf:b4:3f:bd:aa:3e:
                    c8:24:fd:c4:c7:83:d4:4a:ff:0e:42:15:38:53:f2:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9E:4A:7C:4A:53:6A:CD:BA:9F:6C:40:0C:DC:98:21:F2:AB:FA:4C
            X509v3 Authority Key Identifier:
                keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:1f:05:de:9a:06:38:7f:03:8d:3b:30:70:4d:f6:5e:31:
         43:c3:ba:03:dd:51:6e:fc:a0:d0:52:a9:a6:b8:24:53:7c:11:
         0d:d7:27:96:d6:66:a8:88:6c:e7:e2:30:3a:54:2a:c2:74:35:
         d4:c4:33:8b:9e:e5:be:80:92:e5:ef:75:9c:71:89:91:16:7c:
         d6:e7:cf:49:bf:4a:14:47:24:58:6a:61:51:25:37:bf:f9:3f:
         aa:8b:9b:20:53:f4:4a:f8:a1:d1:49:46:66:97:85:21:c0:45:
         09:23:8c:c2:fd:6f:a2:49:7a:1c:ee:94:f4:c0:d9:ce:0b:4e:
         3e:eb:b0:6a:f6:e2:ba:8b:2c:83:b4:59:18:4d:75:b9:85:85:
         a8:56:b2:4c:4d:07:ee:75:cd:e5:f1:06:81:58:52:9a:da:8c:
         34:29:19:f4:8c:d5:1c:c0:12:54:68:15:7b:72:7e:0b:7a:ef:
         0a:73:30:40:08:84:f1:05:ad:72:ad:6d:f4:d7:ef:db:76:38:
         dd:88:a7:c5:c3:3d:ff:ea:ce:24:61:92:85:5c:d7:b7:77:f2:
         a6:ee:05:74:95:c1:26:2b:fb:7f:54:05:b3:38:74:f3:0c:a8:
         c4:3e:aa:5a:46:61:f0:d5:88:9e:bc:43:4c:f1:a1:0a:66:89:
         0b:ed:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:54 2025 by rpki-client