Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File:                     6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier:          VNRoyme7i8JzKDdL7zUweNpPTfpx75EAf/aaNKvJ4gE=
Subject key identifier:   26:A6:05:1F:59:A7:47:5E:21:CA:EC:77:F5:6B:6D:7C:0E:BE:C4:7C
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer:       /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial:       1261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number:          1256
Signing time:             Sat 18 Oct 2025 17:37:26 +0000
Manifest this update:     Sat 18 Oct 2025 17:37:26 +0000
Manifest next update:     Sat 25 Oct 2025 17:37:26 +0000
Files and hashes:         1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: Q0N9nVPERNgp6kUWEavu53oM33ynmGWGxZRsLwuv0NE=)
                          2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: x0pbE7Ea3sKXTfydYa2BTBmjtzbK1GRSFoSpJkmD3Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4705 (0x1261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
        Validity
            Not Before: Oct 18 17:37:26 2025 GMT
            Not After : Oct 25 17:37:26 2025 GMT
        Subject: CN=68f3d056-d5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:35:6a:73:86:77:69:2d:c6:c2:1c:23:d5:
                    b1:c0:a6:4d:4b:d1:67:8d:e7:64:6b:3a:58:71:29:
                    2f:df:47:24:da:b2:bf:15:35:37:15:26:48:48:72:
                    0c:49:b6:26:9a:90:d5:49:64:f3:08:84:00:c1:18:
                    09:0f:e7:51:29:5f:b7:23:fa:46:2c:b1:84:67:2d:
                    31:0e:92:c7:1b:dd:c7:f0:75:7e:8d:5d:91:95:62:
                    c9:a1:71:28:1c:f5:c9:78:2b:25:6c:ba:22:52:d5:
                    86:8f:ff:d8:64:a5:77:4e:ad:a0:a1:88:bc:a0:3c:
                    b6:39:64:2c:b3:50:27:86:0b:11:78:43:f1:31:23:
                    29:77:40:24:60:bd:34:12:c0:1d:7e:94:52:f8:49:
                    7c:a9:77:0c:6b:24:67:38:5d:72:07:bc:fa:80:4c:
                    7e:af:44:46:72:3d:9c:e3:56:a5:3a:fc:ff:85:80:
                    37:5a:59:ef:fe:ef:65:1a:15:e8:5c:16:0f:91:a9:
                    a6:4b:1c:26:20:92:e5:fc:16:21:91:2d:7c:5c:9f:
                    dd:b7:f1:cd:68:88:9b:a2:96:a7:c1:98:16:8d:0e:
                    cb:d0:4a:bd:50:18:19:e5:f8:18:5c:09:22:81:b9:
                    ca:3b:31:8b:62:4a:57:eb:44:88:bf:99:00:b7:ef:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:05:1F:59:A7:47:5E:21:CA:EC:77:F5:6B:6D:7C:0E:BE:C4:7C
            X509v3 Authority Key Identifier:
                keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:01:22:b6:ca:fc:36:5c:38:ee:9e:e9:03:09:e4:9c:0a:
         c7:e0:e6:ea:02:4f:9a:24:f1:d5:4a:39:c4:ce:72:a6:c3:b6:
         13:e9:94:83:c2:8a:07:67:2f:51:73:17:ec:80:7f:ff:7d:17:
         4e:90:03:e5:3b:38:0e:a9:1a:16:a1:c6:a0:65:bf:32:a2:9a:
         29:89:c8:ad:22:62:5c:f9:dc:b8:5d:c3:66:0c:77:9a:b9:e5:
         ac:5e:03:52:1f:b1:6e:54:5a:9f:63:a6:c9:89:4c:8a:17:36:
         2c:00:54:af:5a:ab:b7:32:8f:84:29:cd:35:e6:b6:59:17:d6:
         3e:81:c3:b4:3e:50:93:93:b5:cc:d5:88:b3:b1:52:7c:f6:53:
         86:0f:ac:51:b6:d7:55:57:f1:6f:6c:6a:42:f2:61:d4:50:0f:
         01:0b:44:d7:e2:6f:57:d4:1c:5f:17:c1:01:82:bc:10:32:8a:
         cc:f4:18:1b:4b:a7:df:fe:27:e7:43:36:bc:40:f7:9c:00:f3:
         df:85:fb:d5:15:50:fd:76:30:e6:5d:c3:1e:0f:e8:1c:50:98:
         57:b8:5e:88:62:e6:bd:26:d9:00:ec:55:a3:79:eb:20:fa:31:
         57:cc:e9:99:15:a3:75:19:79:9b:9f:97:38:80:3d:d4:b4:be:
         c5:69:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:46 2025 by rpki-client