Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
File:                     6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json)
Hash identifier:          NpWBr1oIEzIV6rrcefWRQ1h3iO87bZ3FiTq1abBNMPM=
Subject key identifier:   AC:39:04:87:21:DE:EA:09:9C:25:CA:66:BA:88:24:71:A6:04:3A:C4
Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Certificate issuer:       /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
Manifest number:          01B8
Signing time:             Sun 19 Oct 2025 05:32:10 +0000
Manifest this update:     Sun 19 Oct 2025 05:32:09 +0000
Manifest next update:     Sun 26 Oct 2025 05:32:09 +0000
Files and hashes:         1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: PqdPOegn1rb49yErBv38BmsJqy60CfEaTu5zujt9FdM=)
                          2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: MXFdujZ+nAPECH8UBuQy5IelDh540oVpA1herCcQ+54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
        Validity
            Not Before: Oct 19 05:32:09 2025 GMT
            Not After : Oct 26 05:32:09 2025 GMT
        Subject: CN=68f477d9-5058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:78:f5:58:7d:f6:fe:92:c2:53:76:01:54:35:
                    82:d9:fd:20:cd:0b:e4:5e:54:f7:32:8b:63:b0:f2:
                    ae:47:cd:21:e3:ee:bd:aa:0c:fb:6a:4c:0d:f5:8e:
                    a8:fb:f7:b0:9e:9a:e7:bd:87:67:c0:37:78:c6:61:
                    de:9a:36:c1:a2:e8:c2:dd:48:75:2a:71:83:d1:b4:
                    37:9b:e5:a6:d9:e8:bf:23:5e:10:86:49:bf:d5:48:
                    72:81:58:11:44:17:60:30:a6:98:9f:e2:69:b1:c7:
                    3c:5b:65:fb:a7:63:5f:3c:c4:ad:15:8b:12:3b:bf:
                    9a:ea:4c:91:28:6c:26:9c:ed:83:82:0a:7d:e1:c5:
                    df:82:98:6e:6d:3b:f5:bf:ef:5b:e1:0f:c4:48:e3:
                    64:49:a0:fd:7b:b8:75:28:2b:01:a4:ef:d3:6d:7c:
                    df:83:d3:a3:ee:ee:22:31:a3:29:83:b5:89:51:27:
                    ff:f8:e2:2b:d8:74:28:28:79:10:cb:ee:1c:3f:9f:
                    53:94:21:d4:86:b9:38:37:eb:3a:91:5f:3b:82:f2:
                    18:ac:2b:9d:23:76:e5:94:0d:c0:95:2b:9a:6e:07:
                    9a:4a:c2:7b:0e:ed:13:32:40:15:ca:0a:4c:da:fe:
                    1f:5f:a4:7e:20:e6:5e:fd:06:c2:e9:1f:9b:23:f8:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:04:87:21:DE:EA:09:9C:25:CA:66:BA:88:24:71:A6:04:3A:C4
            X509v3 Authority Key Identifier:
                keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:5f:ad:3c:98:a3:95:a8:31:f5:96:db:74:8b:4e:19:de:
         22:b9:c1:09:32:10:fd:2f:7b:cf:94:36:98:30:b4:55:2c:f0:
         ee:8e:e5:36:a3:c8:76:ca:57:4a:2e:a5:0e:af:bf:82:51:5b:
         bc:0a:b6:cc:9e:00:23:1d:df:1d:cf:a6:e0:67:8f:18:a0:86:
         5c:73:25:a6:0d:57:fc:09:be:5e:fc:7e:a0:34:a0:3a:f3:99:
         ea:f8:39:2f:3b:19:75:87:be:f2:bf:0d:b0:00:fb:f8:ec:ad:
         c0:23:21:80:00:55:b4:a7:e9:de:45:9d:08:67:b6:41:7c:c6:
         1c:8c:02:d0:3f:23:c7:76:37:c8:08:fc:09:8c:e5:2a:bb:22:
         9c:29:67:9d:0e:73:1b:78:e6:02:e4:ea:34:0f:20:ac:e3:6f:
         1f:fc:01:3d:57:bb:04:ca:f3:2c:7f:95:b2:ad:c0:d6:a1:2c:
         c0:75:78:53:0d:00:52:dc:0a:b5:10:7a:e3:15:8a:7e:d2:b6:
         64:5c:0e:f5:fc:f9:d7:7a:1a:e7:17:9e:e0:1c:10:d9:69:e8:
         75:cc:9d:dc:78:1e:25:05:60:df:11:69:15:c7:0f:43:7f:e5:
         ac:3f:84:23:dd:90:b2:e5:14:96:4f:98:b9:29:3a:d6:d6:b1:
         a3:a9:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:42 2025 by rpki-client