Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
File:                     6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json)
Hash identifier:          De1S/qvFabkBAuTF9N5QgBUJKa2HZv9WCxIaGACRsUs=
Subject key identifier:   A2:21:58:53:10:33:00:0B:46:BF:ED:BD:0B:18:9B:CC:5A:F2:24:88
Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C
Certificate issuer:       /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
Manifest number:          0107
Signing time:             Sun 19 Oct 2025 08:03:40 +0000
Manifest this update:     Sun 19 Oct 2025 08:03:39 +0000
Manifest next update:     Sun 26 Oct 2025 08:03:39 +0000
Files and hashes:         1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: fvUsWFvfeT63pt8pUmECI+jcz5FhtDDCQ6kPQowDzn8=)
                          2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: QH07aDb+fmKlDQWdj0T2NqSMHqeuEIv/QY/EnszX8xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl
                          rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
        Validity
            Not Before: Oct 19 08:03:39 2025 GMT
            Not After : Oct 26 08:03:39 2025 GMT
        Subject: CN=68f49b5c-579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:97:96:2d:f6:da:f8:9e:c7:77:1b:69:47:
                    70:00:ec:90:77:d1:b2:6f:d2:04:a7:c7:a7:ae:cb:
                    ff:20:53:15:70:41:ba:72:30:91:c0:ec:35:f9:22:
                    cb:33:65:01:c2:28:a4:4a:4d:20:21:c9:2a:5c:88:
                    22:88:df:be:41:4c:10:65:5b:d1:fd:0c:65:2f:a3:
                    92:27:da:76:de:e8:59:18:2b:95:60:42:68:3b:c1:
                    3c:cb:79:8a:9e:93:e0:46:2f:ac:34:7e:da:77:bc:
                    01:5b:63:c8:1d:e4:b2:36:ce:a7:f6:e5:2c:47:6d:
                    95:61:66:d4:ed:1e:0e:4e:38:fe:6a:9c:9c:24:55:
                    79:73:49:0a:a2:c5:6c:52:22:0d:8d:9e:e4:56:3f:
                    12:c6:85:35:00:6c:2c:73:08:1a:4a:8b:f3:64:82:
                    ce:64:d6:a9:a2:14:a3:1d:b4:20:21:a8:11:d1:38:
                    e9:30:a0:a9:87:e8:4b:a1:51:b7:ba:a4:61:aa:2a:
                    d2:58:3e:8a:58:d6:ec:44:22:08:6b:69:67:cb:c4:
                    6f:b1:66:de:8b:c6:87:1c:d8:f6:ef:9c:0f:ee:1c:
                    1f:fa:b5:20:96:03:94:30:a9:8b:e6:e2:84:75:8d:
                    5f:49:fa:b6:19:33:1d:8f:0e:b9:b8:01:a6:16:c7:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:21:58:53:10:33:00:0B:46:BF:ED:BD:0B:18:9B:CC:5A:F2:24:88
            X509v3 Authority Key Identifier:
                keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:e9:24:6d:90:6c:6b:4d:7c:c8:1f:f2:12:d1:d7:bb:18:
         f6:42:80:25:c6:68:3f:1b:6e:40:55:c5:47:29:53:28:d5:d8:
         4c:0d:1a:48:94:3f:ee:67:41:0b:40:76:60:72:34:2b:8d:fd:
         2e:a0:b2:4d:57:33:6c:cc:d2:ab:f1:92:09:d7:af:2b:89:da:
         ea:ff:95:44:da:0c:c9:77:b6:66:00:09:8f:32:38:5d:43:9c:
         55:8c:30:58:90:8c:7a:3f:fd:be:36:43:30:78:13:a0:39:b5:
         fd:f1:b8:fb:21:f3:6a:4a:d3:53:94:78:53:d2:c1:4d:62:72:
         01:25:9e:9f:9e:4f:ca:2f:81:44:1c:c2:4f:9e:fd:f2:8f:1b:
         b1:b5:33:14:58:5f:e6:a7:ca:eb:1e:c7:ec:4b:f8:77:6c:cb:
         10:18:31:4c:41:ff:77:e4:a1:80:fb:f5:7c:9c:b7:5e:a7:db:
         aa:4a:eb:0c:60:b7:99:1f:32:23:30:36:4a:50:a0:e7:17:08:
         b0:c7:7f:bf:df:78:fe:d6:24:90:05:26:38:9e:1d:d3:0b:4f:
         0b:a8:66:dc:25:4b:de:60:bd:ab:5a:04:00:cf:f3:7b:22:b4:
         ea:39:d4:96:82:0d:83:ad:63:66:9e:72:11:35:d6:28:06:2d:
         9e:68:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:24:48 2025 by rpki-client