Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
File:                     AWWp3MArwOh2h-4GcFwObJkt6TI.mft (raw, json)
Hash identifier:          cRLGVXlsdD0/rCrl91ylSZPd3Y2jmYFBwzoNxmWO+Ic=
Subject key identifier:   CE:82:BC:55:3C:5B:B1:2F:04:3B:21:52:95:34:79:15:C8:7F:A0:20
Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
Certificate issuer:       /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
Certificate serial:       06D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
Manifest number:          06CA
Signing time:             Sat 18 Oct 2025 23:30:47 +0000
Manifest this update:     Sat 18 Oct 2025 23:30:47 +0000
Manifest next update:     Sat 25 Oct 2025 23:30:47 +0000
Files and hashes:         1: AWWp3MArwOh2h-4GcFwObJkt6TI.crl (hash: VOMYlsHIgJdfjfm5JdtnQVDgiOBdwmTNYGb6z9RZy4c=)
                          2: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (hash: zqG4bc06KvBhxn6QFTh7x4mtk1td0qh6Ee0/kRUb20s=)
                          3: FC1594CE340F11F0B7C1091CC4F9AE02.roa (hash: c3OMadnDiyEPhIKJxMyXVrI66nq2d9T1QFct5alIulU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl
                          rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD544, serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
        Validity
            Not Before: Oct 18 23:30:47 2025 GMT
            Not After : Oct 25 23:30:47 2025 GMT
        Subject: CN=68f42327-752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:4c:5f:8c:74:a0:8f:54:a5:54:cd:6f:48:
                    08:9e:e0:c8:fb:07:56:91:e9:b0:29:4e:d7:14:52:
                    9e:ee:c2:71:a5:75:f6:c2:aa:7c:f1:73:3f:e3:f1:
                    4e:53:ba:8e:79:15:ae:7a:53:76:b0:d1:f1:77:5e:
                    d8:66:eb:55:96:b7:26:b3:e9:e8:48:e9:14:4a:0b:
                    82:41:cf:57:bc:5c:b3:f5:6e:f1:b3:bd:49:85:16:
                    f1:b6:ef:74:9a:e7:a3:23:cf:2d:65:76:9e:d3:cc:
                    45:76:f1:e0:4b:79:b0:6b:23:9b:2b:bb:02:8e:56:
                    a0:74:78:4c:ec:97:ad:96:a5:63:f9:8d:96:49:fb:
                    7e:bb:71:4f:39:cb:98:1b:ad:94:ff:f7:1d:db:ab:
                    20:e1:79:aa:de:c1:96:54:df:8d:a2:1c:80:30:db:
                    ff:0a:a0:03:88:1b:ea:21:b3:a7:97:51:f4:62:b8:
                    9c:82:2e:63:15:a4:36:14:1e:1b:cf:61:b2:13:7a:
                    3e:64:76:12:0a:41:71:3d:cf:4d:fc:fe:8c:72:ad:
                    1e:1d:79:b5:19:8d:7c:f6:78:95:1f:46:9c:f2:f2:
                    3c:65:0c:71:a1:1d:f1:99:fe:c5:23:35:23:ca:ee:
                    d5:af:28:c6:a1:96:ac:27:8c:37:a5:6b:0a:f2:7d:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:BC:55:3C:5B:B1:2F:04:3B:21:52:95:34:79:15:C8:7F:A0:20
            X509v3 Authority Key Identifier:
                keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:5a:86:af:c9:6c:31:4e:47:5b:07:c5:63:6b:6e:f4:17:
         fe:5c:53:14:24:df:b6:41:91:8f:fc:ef:c1:e4:a3:d3:f5:43:
         fe:ee:c7:92:e9:1f:b6:c0:cd:ce:1c:71:4d:5f:ba:ab:7b:45:
         f5:4d:42:45:47:66:33:17:5c:4c:5b:61:af:2f:31:57:67:fe:
         4d:77:96:7d:92:3d:cf:48:a1:40:e8:71:5e:7e:92:18:f9:8e:
         1e:a9:a0:bf:4e:26:0b:d1:37:01:42:b6:78:27:3b:bb:43:8f:
         96:0f:2d:4f:c3:07:fa:a8:82:f6:38:fd:e8:47:65:96:11:76:
         03:1f:53:f8:e4:c9:d9:09:b9:3d:a8:b4:72:38:c7:b9:7d:f5:
         5b:1e:bf:4c:5b:66:7a:cd:c2:b7:94:98:e8:69:e3:59:a9:3f:
         88:88:2a:4f:6d:90:14:16:bb:c4:28:bf:30:90:47:40:9e:cd:
         97:84:a2:d3:1f:dd:67:05:c9:ee:8a:a1:c2:e7:74:bd:09:f7:
         d2:83:17:f2:19:9c:11:cb:80:7b:bf:aa:f0:cf:de:f5:14:ea:
         63:54:90:d6:c2:e0:cd:7a:8e:3c:c1:f6:f8:ae:e0:3f:42:11:
         53:f6:b6:47:a5:01:98:31:8b:37:f1:3d:8e:fc:97:d4:2d:5c:
         7f:23:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:33 2025 by rpki-client