Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File:                     a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier:          LcK7r5eX1UuHTD01zDvtTeasQTGtjhYSPAfMhdOEzMk=
Subject key identifier:   AA:16:7E:A8:52:09:79:DD:62:0E:F4:47:A9:86:A8:DA:C1:57:A2:12
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number:          01B6
Signing time:             Sun 19 Oct 2025 05:37:41 +0000
Manifest this update:     Sun 19 Oct 2025 05:37:40 +0000
Manifest next update:     Sun 26 Oct 2025 05:37:40 +0000
Files and hashes:         1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: eSew3dkgB0XMoZ600ACuU+DZCMsFFznJehZw7TinVxA=)
                          2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: uBYO+C6UlAsgzho2C/yzZOLuZD7LLvHBHa19TIwL+RU=)
                          3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: 4bQshwbLuuIizTEi1i8kAXXdNltaobrkapRT1VY6dw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Oct 19 05:37:40 2025 GMT
            Not After : Oct 26 05:37:40 2025 GMT
        Subject: CN=68f47925-b43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:81:be:f1:34:33:47:65:b0:af:ba:77:3e:
                    6a:85:d9:72:2b:9f:65:8d:25:cc:c1:26:7a:43:05:
                    31:ef:7d:7c:bb:8f:f9:9f:9a:bc:a2:53:6a:2d:15:
                    00:9e:8d:09:5c:c6:48:01:0b:66:19:82:1b:cf:5a:
                    47:c6:9e:94:cf:b2:34:dc:af:d1:15:57:d2:30:cd:
                    c7:35:c1:70:97:40:9f:6d:ec:da:ad:a1:f9:76:6a:
                    de:d6:7f:a7:2d:97:e5:66:0d:03:2c:1c:f7:04:89:
                    91:a3:d9:36:05:27:02:90:61:5d:73:81:f7:94:dc:
                    a5:8a:1c:86:1d:1c:34:67:c7:86:7f:09:94:40:dd:
                    c7:36:a9:74:b5:ad:0d:89:78:1f:47:1c:5f:a2:d1:
                    62:68:f3:58:b3:95:1b:56:83:18:6b:be:b9:da:a6:
                    05:5c:b3:1b:b2:de:2b:74:ab:c7:3f:fe:07:c1:a1:
                    59:33:6c:53:bf:95:5d:47:6f:77:13:e2:11:3b:05:
                    f4:2f:63:fe:41:cd:aa:54:a0:1c:0e:b2:f0:3b:61:
                    79:01:94:a3:48:9c:8c:db:53:6f:92:4d:c9:e2:d6:
                    0c:90:ac:78:e7:1c:51:88:e4:b0:5b:21:ea:d5:ac:
                    6d:3b:91:a0:f0:b8:6a:8b:6e:bb:f5:d1:e5:65:d2:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:16:7E:A8:52:09:79:DD:62:0E:F4:47:A9:86:A8:DA:C1:57:A2:12
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:02:18:f7:02:b0:b4:16:df:98:30:37:65:02:56:2b:95:c7:
         7b:1c:37:97:eb:8f:de:2c:ab:49:6e:9b:b4:47:88:2e:3b:a0:
         af:a2:86:66:ef:5a:9b:e2:9e:85:00:03:79:4c:e8:2f:c3:6a:
         55:b2:62:d9:9b:73:4e:c9:82:d8:e0:a1:6e:97:37:98:a6:42:
         19:c6:a4:d5:e4:d8:1b:5e:93:a0:27:5f:65:01:01:54:a7:1e:
         b9:e4:f4:0f:53:07:f9:54:ae:67:9f:a4:ca:a9:bd:84:c3:dc:
         b3:ca:20:e2:d6:0b:40:da:8e:8a:a2:47:20:38:95:d4:76:d0:
         75:0b:c4:4b:ac:e4:d4:dd:a1:8e:0a:bd:7d:60:64:1d:99:17:
         f4:a4:e6:50:9b:25:fc:d0:8c:1e:a4:59:35:e2:06:a0:2f:d9:
         90:1e:19:27:19:ef:f1:e4:30:c0:3b:09:2f:44:c9:8d:2d:d2:
         81:80:69:59:77:3f:a2:5f:bd:4a:47:c8:2a:89:98:15:27:41:
         c2:37:db:42:f0:19:b4:1d:b3:6f:e8:c3:b4:93:a6:e6:f6:f7:
         f3:23:78:75:d2:71:a5:1c:94:2d:69:03:7c:54:2b:83:3b:bf:
         a4:55:45:2d:c9:47:86:60:86:66:d6:51:f4:ca:22:73:fa:55:
         c4:78:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:12 2025 by rpki-client