Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
File:                     t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json)
Hash identifier:          XjI5Sfsd+VBupCpcudfQ65eoezml6nHUeTR+jnwb0c8=
Subject key identifier:   99:A8:FB:2E:6C:9E:3C:A3:29:EC:9A:BB:DD:27:87:51:94:95:82:F7
Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87
Certificate issuer:       /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
Manifest number:          6C
Signing time:             Sun 19 Oct 2025 10:20:58 +0000
Manifest this update:     Sun 19 Oct 2025 10:20:58 +0000
Manifest next update:     Sun 26 Oct 2025 10:20:58 +0000
Files and hashes:         1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: 5r7sGEi9GjS7dfu8qnkN1WcrVV4ME1I1HWmjaiifqME=)
                          2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: LFQa37q/cBpLbTU9VfVNZw79cN64ozdrBS9Unjdq4XE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl
                          rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787
        Validity
            Not Before: Oct 19 10:20:58 2025 GMT
            Not After : Oct 26 10:20:58 2025 GMT
        Subject: CN=68f4bb8a-2841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:34:1a:e7:77:0c:30:ab:65:9f:7f:72:42:
                    d6:e9:9a:04:aa:75:4d:10:65:e1:0a:f5:7f:e1:08:
                    56:9e:27:32:b1:44:17:09:5b:89:ed:b3:69:b4:45:
                    8e:9f:b4:ad:43:01:f8:ed:25:fb:17:e6:1f:04:22:
                    d2:99:42:30:93:50:5f:b7:4a:35:20:41:74:ff:58:
                    13:cc:1b:21:b8:30:63:a6:98:ad:b7:53:26:f2:f5:
                    68:0b:ed:7b:2c:6a:3b:d4:91:c2:fc:8e:55:f1:c0:
                    2c:a1:c3:9d:73:66:3f:61:d9:66:ee:cd:9b:84:6b:
                    9b:55:9d:38:0b:cb:f6:4b:c4:e4:82:16:ca:06:98:
                    6b:7f:15:a1:aa:d7:13:fb:cc:de:38:84:06:ca:3d:
                    01:5d:d0:22:c8:12:69:38:80:4f:fc:00:b1:be:bd:
                    e3:7f:50:2a:89:0c:ce:d7:61:07:d1:bc:c3:fb:ef:
                    94:ab:c3:d9:20:d8:38:bc:23:09:e3:c1:ff:1f:bf:
                    1d:c7:bd:4a:65:64:68:03:45:bb:9b:bc:36:e6:70:
                    55:54:63:c2:8a:49:8f:c2:fb:e4:fe:14:cc:19:89:
                    89:9d:48:ce:66:0c:96:65:3e:b2:36:b2:f0:1b:ea:
                    65:f1:2d:74:75:a2:ce:cb:c8:ae:2b:0a:ab:51:b8:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:FB:2E:6C:9E:3C:A3:29:EC:9A:BB:DD:27:87:51:94:95:82:F7
            X509v3 Authority Key Identifier:
                keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:c0:78:e4:c3:93:cd:3a:06:7d:e7:03:bd:f2:2e:ae:f3:
         d2:92:67:43:0d:b4:95:b9:8f:3f:1d:16:45:51:88:19:9d:0c:
         64:9e:51:4a:7a:48:b3:60:e1:6a:4d:f3:fd:c3:7a:d3:72:67:
         8a:1f:0e:8f:3f:d5:b7:60:4c:30:8d:bf:5b:1a:33:8c:64:b2:
         06:fe:fa:55:e1:cb:56:d9:c0:e5:06:f9:27:d6:da:20:71:bc:
         9a:9c:b2:64:7c:38:fc:9d:ce:6e:60:fe:d1:39:a2:4d:5d:16:
         1a:f3:ed:7e:65:3a:54:12:4c:7d:f8:8f:37:05:8a:b4:0e:c5:
         bd:2b:e1:44:9c:87:4b:59:53:15:5c:14:7d:5b:77:ba:9b:9d:
         b7:7d:c4:53:68:38:1d:df:01:08:36:12:87:49:d0:eb:3d:78:
         4c:de:f4:98:8e:ac:55:f7:46:1e:b1:f9:4e:9e:ea:b7:fe:92:
         dd:d5:6a:cd:cb:4a:67:7d:57:b9:73:0b:6c:6d:9a:2b:63:7c:
         36:62:3f:37:ec:59:30:d4:2c:bf:cf:c7:b9:e2:08:b8:d1:ee:
         4a:76:7f:af:29:fa:a0:d7:10:bc:5a:74:86:27:0c:d9:1f:f8:
         96:30:ab:92:37:d5:e7:77:5b:c8:2b:c0:e3:90:43:db:10:f5:
         21:81:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:48 2025 by rpki-client