Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
File:                     6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft (raw, json)
Hash identifier:          JX7boyk/w+I97esmyY6F9RTakxfamVSSJXCns0X97LI=
Subject key identifier:   D1:2E:29:68:35:02:5F:DA:AD:C3:61:AE:19:D2:2F:50:86:8C:A9:C0
Authority key identifier: E9:39:24:98:25:2A:F4:5F:6B:19:05:61:7C:03:6B:03:39:54:A9:E4
Certificate issuer:       /CN=A916CD9F/serialNumber=E9392498252AF45F6B1905617C036B033954A9E4
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
Manifest number:          0D
Signing time:             Sun 19 Oct 2025 11:36:42 +0000
Manifest this update:     Sun 19 Oct 2025 11:36:42 +0000
Manifest next update:     Sun 26 Oct 2025 11:36:42 +0000
Files and hashes:         1: 6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl (hash: 55RjZnlDYgC4yShFXF2Utaew7QR/7F0e3thoUW8ULPI=)
                          2: F7652FA49EA211F0B30F584FC4F9AE02.roa (hash: 8Yk3epwSEcExakweH0s8VVBiEpLZ7vDCqHolSt+/SI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl
                          rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CD9F, serialNumber=E9392498252AF45F6B1905617C036B033954A9E4
        Validity
            Not Before: Oct 19 11:36:42 2025 GMT
            Not After : Oct 26 11:36:42 2025 GMT
        Subject: CN=68f4cd4a-6003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:d2:cc:be:17:43:88:d9:59:d7:35:c3:32:
                    e3:35:6a:dd:c3:54:f1:ba:7a:df:58:6e:e4:b9:9c:
                    78:f6:e6:ec:45:ce:b0:be:d0:f8:e5:e2:ad:69:20:
                    d4:7d:d6:26:6a:bc:a3:18:a9:b6:dc:46:2f:a0:fb:
                    43:ef:0a:b9:71:c1:20:91:56:5c:02:56:bc:ad:a7:
                    26:f8:83:90:45:de:a5:7e:05:22:be:d2:03:36:1d:
                    9f:c2:4a:de:a4:0f:4d:f4:b9:74:ff:91:3f:6c:20:
                    02:3a:e8:70:63:90:f6:13:14:9e:e3:51:59:fa:fc:
                    c4:c9:a0:34:78:d6:7e:59:17:84:be:fe:96:9f:0a:
                    c4:f0:9f:78:0f:29:f6:2e:66:14:52:6b:33:fa:20:
                    16:ed:be:ab:62:4f:6f:71:bd:38:d8:15:5a:e6:4d:
                    78:d5:9f:26:22:ed:f4:fd:c2:ca:06:c9:5e:66:2c:
                    cc:62:9d:98:04:b7:8b:c6:a4:0f:37:6e:ef:67:e1:
                    51:b1:83:89:8d:41:13:e8:39:cb:bf:5b:06:09:89:
                    6c:26:54:38:79:dc:95:e6:7b:df:94:c4:8a:7e:10:
                    a3:3f:20:4e:41:c7:48:a7:5f:af:f8:ef:50:40:f4:
                    10:48:f5:19:82:bf:5a:02:67:e1:c9:95:89:e9:03:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:29:68:35:02:5F:DA:AD:C3:61:AE:19:D2:2F:50:86:8C:A9:C0
            X509v3 Authority Key Identifier:
                keyid:E9:39:24:98:25:2A:F4:5F:6B:19:05:61:7C:03:6B:03:39:54:A9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:89:b0:43:ac:fa:3f:cb:50:51:37:ef:c9:91:2f:7e:c6:
         62:91:6c:b5:9d:11:62:5b:a7:4d:d7:14:33:aa:44:5b:8f:a0:
         5e:9e:fd:01:e1:18:a7:5a:6c:d6:2a:54:c3:bb:32:a8:1d:d1:
         99:f8:3f:8f:e3:86:24:40:1e:ee:e4:bd:53:3b:92:b2:aa:12:
         c0:84:01:b5:10:fa:8a:24:be:4f:0b:36:df:c6:d7:77:91:cb:
         f4:b3:67:9f:fe:36:2b:48:d5:45:8c:f3:f6:74:d4:7f:87:b8:
         8b:ba:7a:57:c1:9f:31:7d:9d:90:49:57:04:c3:7b:3d:82:d0:
         76:98:82:0e:8e:e2:53:56:e7:4b:93:eb:e2:fe:ab:af:12:71:
         14:9a:34:29:96:e5:22:00:4a:e7:04:f7:ed:e6:8c:86:d7:77:
         62:37:e1:61:0e:9e:61:4a:3e:8d:fd:8c:0c:ab:e4:a9:a6:35:
         99:3d:3c:27:db:99:e4:95:8a:02:8d:b6:21:65:58:a2:bb:5b:
         5b:5e:31:bc:0d:64:4f:84:6b:de:f5:66:ed:f1:44:08:f4:da:
         ec:e7:c1:9c:ec:f2:ee:48:dd:18:d3:ba:de:08:dd:fb:ef:e9:
         91:4f:2f:cc:5d:7a:2c:ba:a0:4c:6e:33:9d:7a:49:52:64:6d:
         9e:31:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:04 2025 by rpki-client