Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          wabUNq4zeASAFlr9YpSL9zQHjcX225qFoqEqErSmljs=
Subject key identifier:   47:29:93:C9:7F:B6:1D:83:73:B0:BC:57:BB:CF:25:3D:68:81:17:0F
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          041F
Signing time:             Sun 19 Oct 2025 02:16:54 +0000
Manifest this update:     Sun 19 Oct 2025 02:16:53 +0000
Manifest next update:     Sun 26 Oct 2025 02:16:53 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: ans+srqWaRUuagvS2et+i7/wgDMtDZmk58wZ8LBFYQw=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: 9bIT9Wti4Q16RNara0yjrmc8CnpGQxIQgk88L2RqepI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: Oct 19 02:16:53 2025 GMT
            Not After : Oct 26 02:16:53 2025 GMT
        Subject: CN=68f44a15-32af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:ea:8c:06:e4:bb:cf:fa:6c:db:80:b0:73:
                    93:1b:be:17:d4:6d:9d:16:5d:9b:43:1b:64:8e:3e:
                    c7:6e:4f:a1:b8:66:9b:36:f8:f5:61:9f:30:66:8c:
                    37:d3:0f:8a:98:c0:b5:72:f6:fc:0f:07:f7:4c:80:
                    14:9a:0f:96:c8:44:56:80:b9:73:95:69:3a:fe:fc:
                    61:59:29:61:05:b2:04:e6:16:13:d2:59:9e:ae:5a:
                    72:1c:87:11:f3:58:64:ee:fa:02:02:a6:c3:65:90:
                    2b:29:7a:a8:4c:56:60:fd:5d:27:73:0c:cd:17:97:
                    72:67:5f:d6:81:73:25:51:eb:c9:d2:e7:7a:bb:e2:
                    3e:48:72:39:6d:8d:2e:fe:54:5d:dd:7c:4c:18:be:
                    ed:0e:60:2c:96:49:ea:4e:06:da:d1:e4:5f:5e:4c:
                    22:b5:ef:1a:e9:f8:e7:b5:c8:ec:ed:15:4a:d2:2e:
                    95:6b:27:b8:ec:62:0a:c2:d8:fc:86:e4:dc:ed:1e:
                    57:5c:87:9a:54:c4:ae:eb:b0:4e:be:56:d1:7b:cd:
                    b1:fb:7c:87:fc:46:41:86:1a:64:b9:b5:a5:c0:2f:
                    7d:53:af:a7:cd:8d:a5:ba:ad:e3:60:42:f9:82:43:
                    e2:97:db:4c:80:a9:bc:75:f6:62:71:ef:5a:5f:5d:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:93:C9:7F:B6:1D:83:73:B0:BC:57:BB:CF:25:3D:68:81:17:0F
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:df:2d:89:d6:74:e5:14:3b:c0:2e:62:c1:33:be:9d:09:98:
         a4:52:d8:8c:29:7d:25:e7:11:d9:90:23:ef:e5:89:77:20:47:
         89:02:d7:34:87:2f:af:53:c6:a2:a5:83:42:65:15:ac:c0:db:
         c6:0e:a1:d1:07:b2:1e:74:13:b3:9f:ae:4c:dd:59:19:fe:ce:
         48:54:be:6b:9f:42:74:b2:04:49:bb:35:70:8e:7a:67:c3:8d:
         79:f8:6d:ec:90:a5:00:23:d9:7b:a9:a6:1f:75:f6:66:66:a9:
         87:21:61:af:b6:e2:90:7b:b8:e8:58:5e:db:6c:20:5c:b0:d0:
         43:69:9a:33:59:e5:b6:30:a1:c8:3e:d5:38:40:b8:56:f1:fa:
         ee:de:ae:e0:4f:bd:17:a7:56:0a:9d:52:f6:ca:97:74:0d:52:
         b4:16:30:49:b9:bd:1f:c2:14:fa:76:1d:08:1a:08:11:90:e0:
         70:cb:72:8d:44:f0:07:63:1c:b0:d8:4d:8a:ba:41:c6:9e:9f:
         27:4e:59:b5:af:8d:18:48:12:25:88:5a:a9:87:a9:19:f1:f0:
         65:39:4d:4b:3a:90:eb:b4:b1:5a:e5:18:ad:f4:54:d6:04:87:
         d5:48:e3:f9:2c:f6:fa:ed:8e:3f:ff:fe:3d:19:e8:28:83:45:
         b5:cc:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:47 2025 by rpki-client