Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
File:                     aR7cVncnIjOjjzNRkaropa4q97k.mft (raw, json)
Hash identifier:          sKUhku0pRHAkXLkH7Eg+1lDcn4g/ZOUq3WCHNxViuxQ=
Subject key identifier:   74:D6:C1:B5:87:10:B8:AD:CE:95:C8:12:A1:8A:A9:ED:34:B0:A9:B4
Authority key identifier: 69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9
Certificate issuer:       /CN=A9155725/serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
Manifest number:          6C
Signing time:             Sun 19 Oct 2025 10:18:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:18:13 +0000
Manifest next update:     Sun 26 Oct 2025 10:18:13 +0000
Files and hashes:         1: aR7cVncnIjOjjzNRkaropa4q97k.crl (hash: Qdy0g4fPd8wYx9/RUR3HzkXUgSrg01qz9DL6RyM99wI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
        Validity
            Not Before: Oct 19 10:18:13 2025 GMT
            Not After : Oct 26 10:18:13 2025 GMT
        Subject: CN=68f4bae6-0953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b8:4a:e3:c0:c7:93:aa:38:eb:b1:a4:09:3d:
                    56:db:21:5b:83:22:5c:78:42:86:6e:ab:09:56:cb:
                    e4:c1:c2:f4:e7:ac:f0:b9:dd:83:bd:09:58:f2:b9:
                    51:47:57:ee:5d:86:98:6f:4c:83:40:3f:9b:f4:b1:
                    3b:d4:60:9d:f0:1e:20:ce:9f:4f:f3:48:e4:c9:e8:
                    63:f4:18:af:22:97:75:be:28:1a:d0:da:85:44:1e:
                    d9:ae:0a:8c:fb:2c:38:d3:5c:7a:3f:68:2f:a8:74:
                    5c:ca:cb:3b:5d:ca:06:88:f5:f6:f8:37:86:86:af:
                    8e:ee:f9:5c:b8:cd:4f:e7:4f:f6:57:cb:82:7f:17:
                    d6:4b:dd:0b:7d:6f:a1:79:e8:47:82:6d:58:b4:eb:
                    03:2d:a3:22:4f:86:76:f8:ff:44:c2:f4:5b:97:0f:
                    94:1f:f6:57:8f:20:ad:c8:67:06:e9:72:24:a3:ef:
                    46:09:ca:c2:f1:7b:da:ca:05:15:85:0e:00:86:8b:
                    0b:6a:82:4d:be:42:21:a9:26:2e:52:f4:58:99:b5:
                    2a:36:6e:1b:ec:db:0b:c4:58:8c:b6:5b:2a:b2:c8:
                    6d:a3:ca:16:41:b1:f7:15:05:f4:fd:25:d7:c0:6b:
                    fc:02:eb:60:9a:2d:a4:85:db:6a:39:a1:f6:b3:13:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D6:C1:B5:87:10:B8:AD:CE:95:C8:12:A1:8A:A9:ED:34:B0:A9:B4
            X509v3 Authority Key Identifier:
                keyid:69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:90:e4:8a:a1:0b:72:d8:89:2b:a0:9f:4a:c5:7e:55:b5:
         15:66:42:f3:77:4a:05:16:4b:cd:f5:f5:8b:2f:d2:82:7d:ac:
         cc:55:df:6e:6b:53:68:7d:27:17:ba:df:2e:5d:39:29:ac:22:
         f2:9a:64:9b:a5:b8:61:e5:03:94:7a:fd:10:4f:c0:1b:44:45:
         36:66:c9:d3:e2:4d:59:be:58:82:eb:f6:ad:c9:8c:b5:d4:1b:
         1d:9e:8f:2d:82:3e:a2:78:e3:ab:71:f3:ee:ee:b4:66:67:2a:
         a0:12:43:0d:2d:d1:ea:7a:08:b8:23:db:d8:ad:f2:d8:3c:ae:
         13:42:75:fd:56:af:a6:b4:e7:a9:65:b8:68:89:26:8e:be:3b:
         b2:45:6c:03:6e:77:0f:fc:16:66:0b:8e:c7:83:c5:04:f6:5c:
         b8:0d:f6:6b:52:8c:1e:50:4e:13:03:42:70:41:6c:17:ff:4d:
         42:1a:85:40:a7:cb:86:ab:08:c4:e0:20:99:31:75:78:93:b0:
         eb:d1:8a:da:35:f0:94:f3:46:70:00:e1:aa:00:81:c7:2b:57:
         df:02:7a:bb:eb:3f:40:92:f0:2b:b3:88:b0:5e:3e:03:3b:45:
         b2:dd:5e:8d:86:ec:fb:d9:c0:a8:75:94:c9:ad:29:b3:85:63:
         fa:59:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:33 2025 by rpki-client