Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          ZlQ85DCZQHUJuv6KSHm0Fh0v3uYXgos3lZzB8ebw60I=
Subject key identifier:   92:3E:0C:A2:0F:03:50:E5:B4:A6:22:68:F1:06:3D:3E:0C:E5:66:9B
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          0221
Signing time:             Sun 19 Oct 2025 04:17:55 +0000
Manifest this update:     Sun 19 Oct 2025 04:17:54 +0000
Manifest next update:     Sun 26 Oct 2025 04:17:54 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: rq0H1hNnnsZqXQ1/8VFYSNtVWQ6XKMgDWyGM6nnDT6U=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Oct 19 04:17:54 2025 GMT
            Not After : Oct 26 04:17:54 2025 GMT
        Subject: CN=68f46673-ed31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:4f:1d:21:02:24:8e:4d:1d:52:31:e9:2e:
                    5e:63:bb:92:64:96:c8:89:df:55:9d:35:90:71:2e:
                    55:b7:a7:e9:a7:8c:02:12:3d:79:50:0e:81:ed:a3:
                    c1:54:e7:d6:bf:88:a5:d6:61:6f:57:e2:bb:88:7b:
                    cb:de:68:6e:89:9e:94:0f:02:b6:ea:54:25:76:66:
                    7b:04:ad:b1:18:91:8a:68:d4:d3:42:2c:38:8b:af:
                    66:19:b8:d7:77:e8:c9:80:8c:0b:44:18:fd:3c:39:
                    d6:69:43:07:59:45:20:89:02:89:33:46:3c:9b:b8:
                    05:ef:d3:99:43:e8:55:d8:70:d1:1c:5e:55:c8:0f:
                    bd:6d:4d:2c:99:e4:86:de:24:6b:f7:c5:ca:57:18:
                    f8:e6:50:bc:cb:85:79:fa:04:ac:a0:6a:e9:0c:5c:
                    bc:a8:b1:da:d8:bb:1a:65:e8:ea:3c:0c:d7:75:1f:
                    ce:71:2a:cd:6e:33:02:67:a0:5c:7f:b3:51:f2:c6:
                    90:4a:1a:4e:18:f3:85:d0:5a:8f:5f:01:dd:ab:25:
                    54:b7:f2:34:7e:2d:32:48:69:95:a2:da:be:88:68:
                    4f:6f:f9:01:1c:43:30:15:56:cc:19:b9:e8:b9:e8:
                    7b:82:9d:88:8c:cd:b6:44:62:14:6f:3f:74:04:69:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:0C:A2:0F:03:50:E5:B4:A6:22:68:F1:06:3D:3E:0C:E5:66:9B
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:67:c6:7c:66:e0:90:34:66:96:e8:a3:70:24:dd:33:4e:62:
         ca:e9:76:cc:18:79:da:82:88:cc:96:0e:c7:2b:0a:36:c8:ff:
         0e:a5:2a:81:5e:36:e3:f9:cf:dc:44:85:30:43:54:28:71:bb:
         24:95:cb:af:f3:44:c7:48:7e:f3:6c:e7:27:87:e8:ef:03:f5:
         1c:1e:d1:4a:61:94:57:2f:60:d3:e8:ca:11:92:09:d8:1f:21:
         ae:3d:08:9c:1c:60:0d:09:df:65:64:bb:6b:f1:e6:2f:ac:04:
         79:bf:85:08:7e:8e:b7:2d:de:06:33:e4:d2:71:db:86:b5:2d:
         b0:db:10:1f:d4:ee:31:0d:ad:0b:ad:df:4d:05:04:96:29:ba:
         4a:b5:a4:da:e8:db:64:e6:bd:e2:6a:a8:7c:45:fd:f4:e8:34:
         77:11:ec:c2:d8:eb:66:c5:a2:8b:26:a9:bf:73:7d:6d:bd:0e:
         ba:ee:4c:d7:a9:72:87:a4:fa:f2:df:b5:b4:7f:de:9f:60:f8:
         48:a7:d9:8b:a1:43:b8:b7:93:94:b7:65:bd:0e:40:8c:bd:51:
         b8:96:e9:5b:cf:b5:6c:4a:eb:03:0e:8b:60:24:d7:ca:d6:a9:
         62:33:4b:54:c5:a3:d4:b8:dd:bc:40:34:fa:32:3a:4e:c6:1f:
         3d:9f:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:07 2025 by rpki-client