Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
File:                     6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json)
Hash identifier:          rqMpFCIjsOARqL1QkrCLfZpXmDWfD3C/RD+oHe/haO8=
Subject key identifier:   69:0F:94:82:9E:CE:E0:39:2A:C3:5C:26:28:31:C0:FD:8A:5E:DF:84
Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Certificate issuer:       /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Certificate serial:       1181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
Manifest number:          1173
Signing time:             Sat 18 Oct 2025 17:46:18 +0000
Manifest this update:     Sat 18 Oct 2025 17:46:17 +0000
Manifest next update:     Sat 25 Oct 2025 17:46:17 +0000
Files and hashes:         1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: QeXWnVu5zHE7TpZdK4nUi0RO8Wf6hPodUJESb4nQb+s=)
                          2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: VAzSuvDMIX7CvCig+o9VQChq5efkdgttCnjgseDhgh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl
                          rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4481 (0x1181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
        Validity
            Not Before: Oct 18 17:46:17 2025 GMT
            Not After : Oct 25 17:46:17 2025 GMT
        Subject: CN=68f3d269-8b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:e8:34:85:85:2c:ec:06:de:06:56:98:a2:
                    c2:3a:04:8d:b7:d5:a4:73:c3:b3:bd:f7:af:d5:e4:
                    ae:a3:46:be:90:b3:8b:ce:79:9f:3b:35:9f:d2:95:
                    44:42:e1:14:02:fa:68:4a:48:cf:22:7d:5b:f9:81:
                    08:9c:33:b0:73:80:39:be:a3:3d:e9:95:b0:eb:2f:
                    8d:b3:af:46:ec:88:0c:d2:1d:f9:97:fe:63:37:00:
                    b3:25:32:d8:b5:e9:f6:07:8a:6c:c4:c8:8f:c3:68:
                    d5:76:9d:ca:2b:4c:e4:8c:6f:23:8b:18:8b:ca:86:
                    0f:3b:7a:73:1a:29:51:6e:00:01:53:bd:20:56:20:
                    6f:1e:e7:5f:ae:32:dc:19:78:7f:94:0c:00:14:e0:
                    cd:3c:8b:f7:14:a7:60:aa:bd:9d:c4:d4:21:17:e9:
                    2b:0b:af:d0:5e:ca:ae:5f:c1:16:4a:14:68:a6:93:
                    4d:78:47:ba:ea:c3:c5:66:5f:4e:5a:f2:39:bb:40:
                    ab:aa:82:c8:a9:67:15:46:9d:d9:74:c1:58:22:5e:
                    ac:24:00:0c:96:53:70:48:ee:fb:c8:e2:bf:48:76:
                    7e:03:4b:d4:d2:df:88:12:93:c1:e4:3e:41:c1:6c:
                    0c:63:db:6d:ef:ed:46:b8:82:b2:d2:59:e2:2c:ca:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:94:82:9E:CE:E0:39:2A:C3:5C:26:28:31:C0:FD:8A:5E:DF:84
            X509v3 Authority Key Identifier:
                keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:53:8c:13:02:b1:b9:48:53:09:f9:fd:1e:65:1f:95:59:
         63:3e:58:97:49:e4:7a:e4:26:87:20:cb:bc:fb:62:d9:6e:48:
         09:61:77:fd:2e:b9:94:e4:7c:c2:8a:e7:27:ed:41:89:f2:6c:
         35:75:01:ab:2e:68:15:f3:38:f2:bb:b4:f4:97:a4:dd:ca:58:
         c8:eb:2d:20:e5:7e:93:24:a7:ac:7d:3c:1e:04:42:75:f1:81:
         bd:f5:9c:95:3e:2f:de:c1:61:41:68:c2:d7:2e:40:aa:28:e4:
         7c:e7:35:42:5b:d4:df:e5:54:67:97:f2:84:b2:91:94:46:81:
         8d:21:e4:6f:be:26:3c:a1:29:ae:8f:2e:e0:9c:5a:e1:1d:1b:
         7c:5f:62:e3:eb:5d:65:69:c2:a9:29:54:84:c0:10:b3:09:6d:
         fa:56:4a:76:64:96:c3:ce:97:12:35:90:23:2b:1a:f6:b8:ce:
         b6:41:ca:3a:4d:68:04:38:02:f1:cb:bc:bf:ca:86:c6:ae:e7:
         e3:1f:2d:b3:5e:c4:6c:df:9f:54:bb:fb:cc:7e:3f:51:c3:59:
         61:b5:57:72:ed:bb:30:8b:3e:bb:23:66:c5:f0:d3:8b:de:85:
         6a:78:d4:79:53:a0:dc:cc:0a:5d:aa:f0:c8:59:5a:29:03:f2:
         3e:e6:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:09:01 2025 by rpki-client