Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          5whunBa4KCmu6XikTRglY1Z6s3Lm0JzTnwrfJmdNrak=
Subject key identifier:   BD:BF:8E:A1:26:91:DE:CD:E8:15:52:02:C0:8B:36:5E:06:B6:FE:AE
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0AD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0AB6
Signing time:             Mon 20 Oct 2025 20:16:44 +0000
Manifest this update:     Mon 20 Oct 2025 20:16:43 +0000
Manifest next update:     Mon 27 Oct 2025 20:16:43 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: YLurJ9hLVylhyU1eCQNLZg97v3STc8ptBZ3/WO4Ygz8=)
                          2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=)
                          4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Oct 20 20:16:43 2025 GMT
            Not After : Oct 27 20:16:43 2025 GMT
        Subject: CN=68f698ac-8ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:83:34:39:d5:9e:13:d7:63:08:13:ef:a5:
                    89:04:af:34:af:74:5d:f0:51:58:0d:b6:6e:3e:f1:
                    45:1d:8f:ea:42:52:32:c6:a6:ae:90:07:53:38:e9:
                    80:2d:19:e9:dc:0b:7d:c5:62:e4:f3:48:bb:dc:6e:
                    71:94:8b:57:0c:5f:df:88:f7:36:ac:a7:ad:86:88:
                    4f:84:a4:1b:41:b0:3c:49:c2:80:57:a2:74:79:25:
                    d6:9d:cd:4d:b4:0a:0a:b5:6b:1a:e8:3d:8d:32:b7:
                    26:cb:41:60:41:27:74:47:12:18:3a:88:b3:02:86:
                    df:00:83:59:19:c3:6c:0a:ee:88:54:4a:98:61:2a:
                    09:46:ed:26:07:ef:f9:dc:d8:56:62:64:72:8d:19:
                    c4:2b:70:ed:8c:87:c0:4e:8f:b8:d8:56:9e:62:ab:
                    bd:96:18:92:85:59:47:03:87:ff:35:dc:4a:61:1f:
                    2a:ab:42:27:83:54:b1:24:2a:55:19:a9:a6:12:9e:
                    8e:a1:58:a2:dd:40:97:c2:b3:2c:63:8f:de:54:4b:
                    40:ea:50:be:03:bb:24:47:ce:f3:8f:64:a7:db:08:
                    61:89:5c:78:3f:da:b2:42:02:40:b7:83:e5:e7:e9:
                    a2:bf:db:fd:64:b6:f8:6d:66:3e:13:79:d7:87:78:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:8E:A1:26:91:DE:CD:E8:15:52:02:C0:8B:36:5E:06:B6:FE:AE
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:80:51:c3:31:3e:97:b7:49:5a:cf:18:9b:c3:8f:5d:8c:
         14:e7:de:85:49:3f:02:4e:fe:b5:ff:9f:46:a8:20:99:ad:b0:
         70:7c:d1:84:3e:86:14:06:b2:c3:23:31:d6:c2:91:93:63:9b:
         4f:a1:5d:2f:b3:ef:97:c8:c6:15:a6:db:f3:e8:4a:fc:62:01:
         79:a0:17:ff:b4:35:cc:4a:0c:25:75:e2:b4:3e:0a:88:d6:88:
         9c:9e:8a:b8:19:0d:1a:d5:19:55:21:0e:73:7e:58:24:21:ca:
         54:d2:5b:c0:d6:9c:2f:fa:f0:f2:30:58:63:bc:a3:5c:78:82:
         8a:53:22:79:b2:05:7a:b3:bc:6f:7d:cc:8d:ec:5b:21:fe:85:
         b5:ed:44:f3:cc:4b:50:45:c1:f2:d0:ca:69:de:17:6e:24:d6:
         db:84:17:d2:56:57:27:73:66:23:6d:b5:73:e7:e2:12:8f:77:
         19:29:b5:c7:46:44:31:0b:bc:cd:77:d8:56:03:01:93:88:0b:
         74:68:09:7c:1a:2f:37:25:10:ba:f2:f8:e3:4d:9e:f5:41:1e:
         8b:b0:63:90:eb:88:4d:22:54:0d:3d:7e:79:cf:0c:c7:fa:f8:
         46:66:be:f1:a3:9f:cc:13:e2:63:15:54:79:43:2f:18:40:bf:
         93:95:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:25 2025 by rpki-client