Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
File:                     n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json)
Hash identifier:          pidZ+gUMAKIOPGWdJSjDasAfzCaBoQP59GDP7eO6Jvk=
Subject key identifier:   85:68:0E:82:19:F5:07:5B:B7:B8:16:77:11:80:AF:BB:8A:B1:D1:1C
Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C
Certificate issuer:       /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
Manifest number:          0137
Signing time:             Sun 19 Oct 2025 07:22:55 +0000
Manifest this update:     Sun 19 Oct 2025 07:22:54 +0000
Manifest next update:     Sun 26 Oct 2025 07:22:54 +0000
Files and hashes:         1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: Ir/TMlzeQ668dQB2YlsVL8jQ6j24jiT31vhYRsHP/k0=)
                          2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: yaqGJ55mUP3MHEApA47X+44ZI9rv9+pSI8dIE6Q7v10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl
                          rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C
        Validity
            Not Before: Oct 19 07:22:54 2025 GMT
            Not After : Oct 26 07:22:54 2025 GMT
        Subject: CN=68f491cf-aa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:a5:af:2b:76:bd:b0:25:74:f6:a6:1e:ee:
                    6d:a2:a2:35:32:63:dc:11:21:d1:30:a4:fc:05:dd:
                    09:84:fa:c8:79:ca:b6:3a:a1:e9:68:ca:c3:71:ae:
                    6e:56:d7:e8:5d:0d:2e:d2:80:e4:00:f1:2c:b7:b7:
                    bb:dc:07:e8:ad:6e:47:dc:fc:44:01:08:ed:ff:0d:
                    a0:23:61:e5:68:fd:4a:57:29:2c:0f:64:f5:a6:cf:
                    f3:49:76:c6:b1:33:f0:4e:0c:df:f7:99:c3:c2:b3:
                    8a:99:2e:2d:ca:dc:90:66:1d:63:7a:4b:32:8f:90:
                    cc:be:d1:79:cd:02:e7:c2:95:a2:8e:1f:67:d7:20:
                    34:ec:cf:f5:53:67:d8:1f:0f:a1:20:74:ba:b7:41:
                    4f:b2:b6:c7:a5:6e:21:49:ea:16:f2:a3:7e:a8:dd:
                    20:96:39:77:0f:72:bf:1b:46:5e:80:b3:1c:6e:48:
                    a9:16:87:19:ec:e3:10:44:9c:af:0c:68:c8:3b:f7:
                    21:d7:f8:80:42:e2:73:25:1f:f6:81:a5:4e:cd:41:
                    e2:34:cd:b6:31:a3:e8:5f:91:c8:99:59:49:4e:e9:
                    01:85:57:50:4b:ee:d1:a0:f1:67:30:84:4c:18:32:
                    96:dd:39:7e:83:db:7e:70:42:0e:ab:47:11:03:48:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:68:0E:82:19:F5:07:5B:B7:B8:16:77:11:80:AF:BB:8A:B1:D1:1C
            X509v3 Authority Key Identifier:
                keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:02:c4:08:f3:44:0d:b6:8e:ce:4d:29:8a:3e:ad:3a:3c:
         ff:71:18:16:4b:8e:6d:a1:56:8e:91:e1:a5:32:43:a0:ee:c2:
         94:df:c2:da:97:39:91:19:ae:ab:a0:72:09:7c:0a:e7:73:46:
         9a:8d:ce:b6:69:31:24:0b:1a:f5:b2:55:3b:04:8f:a7:03:77:
         fb:2d:e9:2f:30:52:6e:4f:3a:6e:ec:0d:37:96:ee:ea:30:c6:
         a1:df:ad:76:5a:d8:17:35:8b:f8:49:82:35:0a:62:97:64:09:
         dc:41:47:ed:0a:67:1b:0f:bf:b9:6f:94:48:c1:e1:87:51:94:
         e4:fe:78:09:0e:8e:44:32:47:30:f1:d4:05:d2:b2:17:31:0d:
         7d:1d:7a:f6:13:f1:52:6a:d5:2d:0a:54:97:93:e6:9a:fb:32:
         b7:73:fe:67:69:56:84:d2:1d:d7:d0:c5:6c:fa:c1:86:8c:79:
         77:0c:a8:10:f2:58:c0:e6:2f:fc:f3:3c:46:aa:e5:09:88:1d:
         07:2b:b1:27:d6:41:cd:c6:48:8b:8a:28:fe:26:17:4e:b1:30:
         b6:27:91:ee:9c:9e:70:40:ae:ff:42:29:aa:cf:2d:10:36:b3:
         94:52:c1:5a:7f:18:ec:ee:2d:d3:db:ee:11:d0:8a:68:f8:11:
         49:d7:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:47 2025 by rpki-client