Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File:                     6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier:          mv76TblTLKcPYHiosuFWHQD4KdL2KCKpWCmvWL8SCuU=
Subject key identifier:   77:B6:58:20:D0:81:2E:75:76:72:38:57:B5:84:BA:06:E5:52:C8:1E
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number:          C1
Signing time:             Sun 19 Oct 2025 08:57:56 +0000
Manifest this update:     Sun 19 Oct 2025 08:57:55 +0000
Manifest next update:     Sun 26 Oct 2025 08:57:55 +0000
Files and hashes:         1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: /gV708VnAlLi7P9wdxSSSYTtfJRCUx67oLz5nZCIbEs=)
                          2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: Oct 19 08:57:55 2025 GMT
            Not After : Oct 26 08:57:55 2025 GMT
        Subject: CN=68f4a813-0606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:1c:9d:c7:47:cf:dc:7c:d1:28:27:3d:58:
                    27:b3:11:79:ed:c9:fd:43:da:f2:7c:86:56:b7:f6:
                    9d:25:16:9b:ec:31:9d:12:4d:7f:57:b3:5a:6c:a1:
                    d7:71:9e:fe:15:a5:27:cc:97:ce:ee:8e:c3:ff:6d:
                    27:a9:d7:b1:80:20:48:63:0e:6a:98:91:7b:d0:c8:
                    07:9f:7f:a9:56:8b:0c:73:ad:98:9a:17:0b:d4:dd:
                    73:19:f0:fd:08:d3:b2:c4:ed:90:11:a4:4a:06:3b:
                    97:71:43:28:d4:25:b8:fa:5f:96:69:a2:de:1e:cc:
                    84:54:1b:a7:54:f8:1c:d3:3a:22:bc:47:e2:68:98:
                    43:17:4c:01:eb:76:c7:48:66:87:34:29:d6:86:08:
                    2a:a4:c9:53:31:32:c5:cd:cb:b9:7a:e4:8e:aa:48:
                    71:41:d6:45:05:05:bc:21:56:20:cf:13:44:a2:d6:
                    bc:60:e9:97:37:1d:d3:ce:07:aa:e9:de:b1:01:f5:
                    e0:0b:f8:5d:1c:d4:28:cf:e3:47:8e:38:5d:a5:8a:
                    43:a1:d5:24:07:0e:f9:54:b2:8b:2b:c2:ec:df:27:
                    0d:3b:95:0b:16:5d:39:df:d8:79:2d:8f:fe:58:59:
                    0c:c9:b0:d8:cc:f3:28:5c:28:72:e1:20:a9:af:99:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B6:58:20:D0:81:2E:75:76:72:38:57:B5:84:BA:06:E5:52:C8:1E
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:db:42:df:54:1e:80:eb:a6:67:7d:61:a2:c6:35:70:f0:
         82:bc:d6:a0:ec:8a:b9:71:54:c2:30:ef:b9:36:2e:83:ab:e0:
         0b:5d:e5:1a:83:93:f5:93:14:54:69:85:ac:41:b9:a9:2c:6b:
         7d:b7:1d:41:31:64:58:13:e2:76:f5:b1:63:58:fd:a9:43:a8:
         96:84:50:88:b1:6f:7d:21:e3:a7:05:dc:ad:63:5e:65:40:6c:
         64:bf:97:97:80:7e:14:91:3e:37:0f:10:d4:10:bc:6d:bc:25:
         d9:16:99:8f:95:df:22:4a:68:bc:59:ed:5f:f4:6c:c8:29:28:
         22:b2:ab:fe:1d:d7:ab:64:e3:b2:bd:e2:3c:68:08:96:48:e1:
         ff:5b:1c:63:53:f5:a3:fc:d7:89:43:43:d0:87:51:f9:a9:be:
         ea:f7:9b:bd:10:1a:31:28:6e:c3:4f:34:df:b0:d9:46:46:76:
         49:ba:eb:28:4c:25:0e:5c:fc:2a:f6:27:73:33:de:8b:3c:46:
         24:91:ac:a9:47:db:ba:d9:3c:1f:44:9b:d4:c8:b8:b4:11:a9:
         53:ad:8f:b9:be:33:c5:da:1d:0d:07:16:0f:da:38:6b:01:7d:
         10:1c:5a:17:20:4e:54:ab:ff:14:f2:29:bf:ec:1c:06:57:ec:
         0a:fb:4f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:00 2025 by rpki-client