Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
File:                     6EferVwP7UnjOjtiJO_z5OzaQZY.mft (raw, json)
Hash identifier:          OXOA4G27vCJ2NljYOAJnjbUqRUl3RwAGPS4y1vFEDMQ=
Subject key identifier:   DE:E6:F1:0C:21:3C:1C:87:B7:07:F7:AD:75:CD:CE:46:06:05:C2:2B
Authority key identifier: E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96
Certificate issuer:       /CN=A91F2573/serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
Certificate serial:       07CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
Manifest number:          07C8
Signing time:             Sat 18 Oct 2025 22:31:36 +0000
Manifest this update:     Sat 18 Oct 2025 22:31:35 +0000
Manifest next update:     Sat 25 Oct 2025 22:31:35 +0000
Files and hashes:         1: 6EferVwP7UnjOjtiJO_z5OzaQZY.crl (hash: tbdtXQZ33zsVtiXDS2HhlUH+oSRnLgrA6nA4KJwsbic=)
                          2: D35D0A48129B11EB97265731C4F9AE02.roa (hash: YPo4JrjUY8rokDYSsOS/zRUheikbdfmmqRlCH28JQPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2573, serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
        Validity
            Not Before: Oct 18 22:31:35 2025 GMT
            Not After : Oct 25 22:31:35 2025 GMT
        Subject: CN=68f41547-f05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:42:b9:76:a6:45:74:07:5a:65:79:c2:4c:
                    d6:4e:41:c6:e2:bd:aa:11:ab:b8:ff:ab:11:c3:30:
                    b1:63:b4:ed:b3:98:af:92:74:10:0d:c9:5a:18:f8:
                    67:86:32:f4:cc:12:15:50:15:f5:79:43:99:55:8d:
                    6e:2d:bb:c4:81:21:bc:15:d1:a7:c6:42:06:09:30:
                    4f:84:15:36:98:5e:1b:a8:fb:2c:01:23:24:0d:45:
                    20:f3:68:9d:9a:36:f4:fa:41:61:56:19:19:e5:28:
                    4c:52:66:95:6c:70:6a:82:1b:98:c2:c3:7e:02:14:
                    79:24:27:bd:9a:4d:dd:07:73:cb:68:8b:85:66:f9:
                    57:83:dc:07:84:62:3f:63:88:64:4e:1a:2f:60:16:
                    ad:60:a5:0d:c9:f8:96:b6:82:a7:3d:5d:13:b2:44:
                    d9:d0:a2:41:70:45:6f:8e:58:76:ad:ca:8c:0d:29:
                    86:c2:30:91:9e:be:f3:00:32:f6:13:12:7d:3a:3f:
                    7b:78:ce:11:5d:24:53:6c:a0:26:d7:ab:1f:8b:b8:
                    ed:f0:a3:f8:f4:cc:a8:d5:93:49:f5:2f:86:1b:01:
                    bc:cc:70:6a:c4:97:08:3a:49:98:e7:bc:fc:a9:a1:
                    1b:27:4f:5c:ac:5e:46:7f:9b:66:a4:d7:00:cc:0d:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E6:F1:0C:21:3C:1C:87:B7:07:F7:AD:75:CD:CE:46:06:05:C2:2B
            X509v3 Authority Key Identifier:
                keyid:E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:f0:ab:b9:0a:53:b1:ce:86:de:b6:64:a3:90:b0:20:f9:
         b4:25:44:fb:7c:c4:59:b4:6e:e3:76:30:6f:d3:69:8e:d0:5d:
         d0:1d:29:b8:dc:01:d5:a5:2c:e5:95:3c:ac:96:dd:c9:ff:e5:
         6d:8d:67:35:81:3f:18:fe:2f:8c:24:05:52:70:25:1d:df:65:
         4e:00:9f:22:a2:8b:21:60:bd:9e:17:d9:bb:3a:7f:83:8b:72:
         e6:64:cb:82:08:ac:0c:07:ea:00:e2:a1:ce:6d:f0:8b:d5:72:
         f7:7f:75:97:56:fc:f8:a2:2d:aa:81:82:6e:8d:43:20:da:74:
         ac:ed:30:67:ed:93:3e:81:f1:77:67:f9:58:97:e5:5c:70:0e:
         0b:82:dc:1f:9a:46:9c:f8:d5:77:48:d3:dd:74:c5:60:89:d4:
         b0:db:56:ac:8f:ee:d3:8b:95:87:5a:0d:40:a8:00:9a:bb:2c:
         45:c5:8f:f9:19:ec:dd:fa:7b:e7:41:80:1a:10:a1:62:23:9f:
         33:63:be:a4:7c:5a:20:f9:24:41:5a:0b:bf:6b:f3:99:5e:92:
         70:fd:b9:ea:0f:72:2f:70:9c:e4:0d:8f:67:3c:6a:02:45:26:
         85:5e:5d:7f:5b:aa:48:03:e6:59:d7:a3:b2:6b:41:07:45:3a:
         cd:d0:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:24:52 2025 by rpki-client