Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
File:                     C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json)
Hash identifier:          /+fspX3Ldfs4czMEk3WiRON9jfBK9WkxVNM40kiZuyc=
Subject key identifier:   D1:AF:0B:96:50:F6:D1:50:01:C2:07:6D:80:BD:C8:4E:C8:6E:27:FE
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       1AFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
Manifest number:          1AE6
Signing time:             Sat 18 Oct 2025 16:38:53 +0000
Manifest this update:     Sat 18 Oct 2025 16:38:52 +0000
Manifest next update:     Sat 25 Oct 2025 16:38:52 +0000
Files and hashes:         1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: u+ebr3iCTf0ur/HOH9TeNn1nY6AvFiFJTomVBirEY8s=)
                          2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=)
                          3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=)
                          4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6911 (0x1aff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: Oct 18 16:38:52 2025 GMT
            Not After : Oct 25 16:38:52 2025 GMT
        Subject: CN=68f3c29c-c61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:b0:50:54:81:f8:89:5d:2b:ef:81:c1:26:
                    6a:52:79:5d:c2:f9:b4:71:9b:75:5e:35:3f:94:47:
                    69:56:71:76:42:68:fe:a9:ed:93:c6:11:75:9e:54:
                    f4:f4:f3:e6:ab:ad:62:17:0d:3c:ae:81:3f:5f:87:
                    e9:24:e4:15:cd:e7:b3:a5:be:0d:b3:1d:96:ca:e6:
                    83:48:90:f1:58:89:c8:0f:ca:44:ea:e8:8e:fb:e2:
                    b1:32:c5:f4:ed:13:ca:cb:8b:47:7a:be:dd:af:fb:
                    8f:c1:a2:eb:19:8d:ad:26:c7:04:c5:99:47:93:ab:
                    76:ed:0b:50:de:41:0e:f9:6e:05:0f:b6:11:38:7c:
                    91:63:08:e4:ec:a0:26:98:3f:2e:3a:ba:32:cd:e3:
                    72:52:93:14:b9:27:23:88:87:ba:f9:58:e7:98:aa:
                    b1:ec:a8:d5:e1:f7:a0:b0:a7:f9:c4:b5:24:94:a1:
                    75:20:f8:0a:c8:47:31:1f:ce:22:4b:b1:0d:42:b9:
                    dc:9e:39:b4:7e:9a:e2:18:57:54:8f:29:74:f0:0f:
                    78:58:23:ab:39:36:ac:34:46:8d:47:d7:0a:c9:df:
                    8d:d5:4a:0a:a6:ee:cd:a1:89:9c:71:c7:a1:22:32:
                    0f:38:39:3c:ce:90:5c:97:5a:e6:ee:53:fe:6d:88:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AF:0B:96:50:F6:D1:50:01:C2:07:6D:80:BD:C8:4E:C8:6E:27:FE
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:af:1f:86:b1:f1:3d:ca:c2:0f:96:d7:79:21:62:fe:fa:45:
         dd:55:81:d4:65:24:35:b1:3b:31:19:bf:71:12:75:29:45:93:
         c2:14:db:78:83:63:2e:00:9a:3a:7f:17:cf:ca:73:9b:1a:88:
         7e:e9:8e:36:a9:d9:5e:4e:4d:0d:92:9d:ea:34:4b:1b:47:30:
         1c:06:11:08:01:38:a0:40:08:b8:8d:e3:d2:bf:fc:36:f8:8d:
         39:15:19:2d:21:1d:50:d8:bb:2f:19:93:56:f5:10:db:7a:0a:
         5c:10:c1:0c:98:87:6f:09:7a:6c:1c:f8:a7:76:6d:b5:e4:02:
         64:e7:ba:a8:3b:93:9c:21:b5:e9:94:84:13:cd:4d:dc:fa:1c:
         fe:97:9a:93:53:dc:1f:df:86:32:81:96:61:a8:36:02:2d:c1:
         41:39:f3:f3:e6:8d:55:dd:d4:6b:32:00:ad:05:e3:00:ee:83:
         fb:1c:59:a8:c4:b6:39:84:8f:ba:9c:70:99:d5:56:bf:8b:0c:
         c1:f4:48:ce:63:85:ce:08:a7:57:c8:0f:5f:12:f5:0f:29:f2:
         70:b8:97:4b:08:31:7e:b9:64:e1:34:8a:ff:fe:ba:b6:35:dc:
         c4:e9:40:e7:02:e4:61:7e:61:28:b6:4c:e9:ec:0f:04:87:b0:
         89:5e:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:33 2025 by rpki-client