Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File:                     _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier:          RNm+hmtu3POFqtgJ4UAJs9TxG3SgJtNpQRDNMP1USk8=
Subject key identifier:   74:B1:66:3D:CC:4D:FB:50:04:62:33:7C:AC:5B:51:98:99:30:E3:8A
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer:       /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number:          06CC
Signing time:             Sat 18 Oct 2025 23:38:58 +0000
Manifest this update:     Sat 18 Oct 2025 23:38:58 +0000
Manifest next update:     Sat 25 Oct 2025 23:38:58 +0000
Files and hashes:         1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: dselgPtt3qlyPfnHP39jG02q0Rku1eGeZ/Z5/ePoZmE=)
                          2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=)
                          3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=)
                          4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=)
                          5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
        Validity
            Not Before: Oct 18 23:38:58 2025 GMT
            Not After : Oct 25 23:38:58 2025 GMT
        Subject: CN=68f42512-2b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:4e:a5:21:df:26:0f:8b:00:6b:57:60:14:
                    dd:50:62:49:7c:4f:34:21:be:f3:10:23:f8:86:b2:
                    bd:67:25:08:14:52:38:a5:3e:69:e1:61:45:20:e9:
                    04:a1:a3:79:02:0a:60:c5:c8:5a:90:72:7d:e2:ef:
                    fa:3f:bc:5a:78:34:33:57:84:c5:59:50:ff:6d:92:
                    dd:41:28:09:15:1e:b5:c8:ad:f1:8d:5f:34:d6:44:
                    d5:fa:c1:5e:89:19:9e:93:e7:0e:4d:de:58:04:4e:
                    3f:23:3f:4e:24:5b:65:11:d2:28:1b:af:0f:d9:99:
                    8d:b5:5b:97:12:2a:ba:d0:23:c4:cd:a9:7a:e8:04:
                    7f:1c:54:63:d6:62:be:4d:98:77:70:38:67:86:65:
                    a5:d9:72:68:cd:bd:22:ca:4c:a1:b5:db:1b:ea:99:
                    7a:5c:60:6c:ad:94:a2:2e:8f:fe:5d:4d:bd:7f:b3:
                    8f:a1:ad:62:45:86:5a:3f:42:12:37:0d:3a:f4:0e:
                    29:e9:6d:93:29:a3:da:25:bf:6b:c6:98:57:9d:d0:
                    84:c8:48:92:b1:e4:b8:d0:93:d6:00:c0:4d:67:a8:
                    26:82:50:6d:70:37:4c:f0:b8:54:b6:02:32:af:96:
                    e0:0d:93:44:55:54:e3:74:a2:1d:19:3d:a6:ed:99:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B1:66:3D:CC:4D:FB:50:04:62:33:7C:AC:5B:51:98:99:30:E3:8A
            X509v3 Authority Key Identifier:
                keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:46:3e:2d:c3:13:4e:f7:88:ba:56:6c:7a:94:83:9b:7c:
         a7:35:91:15:ff:70:15:2c:67:8d:f6:d4:ff:47:17:f7:4f:82:
         b0:50:c0:af:49:f0:47:40:98:19:d5:82:c6:ac:f2:96:71:b3:
         fc:e0:60:d0:79:1c:b7:7e:5d:03:d7:39:90:63:34:27:10:9d:
         19:61:4f:95:85:fd:74:f3:78:9e:85:06:be:c8:68:64:e0:0d:
         91:38:ec:06:13:76:58:e0:85:2d:79:e4:10:9f:d3:a5:30:43:
         2f:00:2a:b8:94:e4:8c:6f:0e:ed:66:83:fd:b3:6f:0f:bc:72:
         00:84:c4:a2:3a:84:ce:45:6b:ff:d2:85:77:b9:32:ed:0a:75:
         af:4f:1e:f8:1e:45:42:b7:ff:2a:f7:b2:8a:bf:2f:09:4a:02:
         04:f8:65:72:6d:79:4d:d9:87:ba:c0:39:89:00:05:fc:0e:48:
         b0:b5:d3:6f:35:8c:9e:35:ce:8b:8b:4d:fc:15:7f:79:e1:65:
         89:c8:83:e2:ff:a4:67:cc:68:07:04:92:a7:38:1e:60:22:c7:
         77:36:99:31:3a:2f:31:d8:6c:01:aa:ac:c9:8d:9b:93:c2:ae:
         09:43:e0:c7:5d:f5:f5:08:92:68:64:00:4d:1f:33:0e:f4:62:
         f5:72:d0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:34:04 2025 by rpki-client