Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File:                     79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier:          OFX5MTWAStO8iEy791jbdZb0mpj4W4fC/yf0QXtV18c=
Subject key identifier:   B8:09:69:8C:F8:79:03:93:AF:90:4D:B9:A9:AE:EF:8A:9D:65:44:7C
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer:       /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number:          06C7
Signing time:             Sat 18 Oct 2025 23:31:15 +0000
Manifest this update:     Sat 18 Oct 2025 23:31:14 +0000
Manifest next update:     Sat 25 Oct 2025 23:31:14 +0000
Files and hashes:         1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: yxdw3IXTGL9iTDXd1uDlahz9aX8BuyOs/XhdPL0sr+Y=)
                          2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: gf+XHv/B7y9fMOtlEsCMLfQ4eU62pqLRv/z7H7sAxg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
                          rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
        Validity
            Not Before: Oct 18 23:31:14 2025 GMT
            Not After : Oct 25 23:31:14 2025 GMT
        Subject: CN=68f42342-f550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:69:c4:0f:89:f0:69:87:c6:91:45:f5:cf:21:
                    8b:29:bc:38:c4:6f:65:d3:1a:d6:a1:08:69:d1:65:
                    2e:20:19:1e:ce:fe:48:89:a1:21:02:59:9f:39:e9:
                    62:b8:aa:20:1a:12:42:41:09:01:ff:3e:e3:8c:6a:
                    80:7f:5f:8f:55:d9:a9:e0:98:12:ef:3a:b3:8d:25:
                    80:9f:e2:ba:4d:ce:82:e0:1e:09:b7:a6:54:29:b7:
                    3b:e0:c2:4d:d2:46:cd:ac:b4:85:f3:ef:e0:eb:42:
                    57:56:40:7f:f3:d2:1c:91:c0:33:22:e7:85:bf:79:
                    25:41:d3:67:2b:49:12:99:20:66:44:0b:5c:2a:a6:
                    bd:e4:db:7c:1a:e1:84:18:8d:7a:10:7e:73:b4:c0:
                    57:88:b2:5a:e9:d7:7a:ff:4a:b8:42:0e:34:e7:f1:
                    92:b4:96:3d:01:d6:8f:85:e1:9b:11:4c:26:15:d0:
                    bd:c8:cf:59:2f:84:74:45:32:99:4c:4f:5d:be:3e:
                    c1:ef:dc:1f:62:d4:b3:d4:80:97:10:f3:6a:f1:05:
                    a3:ce:50:33:e0:c8:c3:ea:9b:8f:dd:19:4e:2a:54:
                    51:f1:85:76:27:56:33:65:87:54:32:66:28:f4:5d:
                    3c:e8:19:32:e9:25:db:46:40:e1:f1:96:b4:bd:98:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:09:69:8C:F8:79:03:93:AF:90:4D:B9:A9:AE:EF:8A:9D:65:44:7C
            X509v3 Authority Key Identifier:
                keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:e5:7a:e1:e0:03:c3:61:46:50:8f:87:4d:5e:72:51:2f:
         05:34:6f:9c:5f:93:8e:30:97:31:fc:d0:af:3c:ed:1b:74:8b:
         7a:c3:ea:3b:3f:b9:cf:d9:e8:d6:47:4f:bf:f1:a7:e3:9a:df:
         90:20:93:25:97:3c:cc:e6:ab:a4:47:97:1c:cc:29:c1:1b:72:
         4e:6d:1b:e4:4d:53:af:32:87:1a:ba:5a:3b:6d:1d:b1:9c:05:
         a9:fe:41:53:d8:18:b5:2a:6d:c3:a8:33:76:dd:6e:fc:85:51:
         f3:87:4a:5e:7b:f2:1b:71:41:91:8e:7a:cf:d2:eb:dc:61:91:
         a0:fb:cc:a5:15:7e:b1:51:78:27:41:56:27:40:cc:45:f8:43:
         ee:ee:fe:ef:3b:77:b9:2f:b9:14:16:7a:b5:54:23:82:3b:2b:
         5d:f5:ee:c5:16:65:b0:28:0b:e6:38:ee:ef:55:bc:41:49:f5:
         29:bf:58:6b:3a:a6:d1:f7:22:d3:15:05:72:fd:aa:c1:93:e9:
         a1:59:bc:6f:bd:02:24:9c:a9:f1:33:3f:df:a8:79:8b:f7:57:
         ea:5a:cd:48:23:76:2f:ce:b3:1d:5d:61:ad:d6:a6:64:b1:0a:
         56:6d:7b:65:03:c7:23:81:72:89:84:9d:63:82:95:7f:b0:24:
         f5:8c:67:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:43:47 2025 by rpki-client