Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
File:                     -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json)
Hash identifier:          4LD6z4zUKsYhIHdj49xiIfg1hIEiqvFL98Nr7JkfLzA=
Subject key identifier:   CF:F5:69:B2:5D:D3:02:CD:23:C7:5F:42:DF:7E:6A:1E:5A:F7:3A:FA
Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Certificate issuer:       /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Certificate serial:       0581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
Manifest number:          057C
Signing time:             Sun 19 Oct 2025 00:57:33 +0000
Manifest this update:     Sun 19 Oct 2025 00:57:32 +0000
Manifest next update:     Sun 26 Oct 2025 00:57:32 +0000
Files and hashes:         1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: VMd0M7LsBKEMROeIioOub+raEOkgrgfel6wi7+aKYkA=)
                          2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
        Validity
            Not Before: Oct 19 00:57:32 2025 GMT
            Not After : Oct 26 00:57:32 2025 GMT
        Subject: CN=68f4377d-1906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:7e:9f:98:76:b6:73:f8:19:a4:53:c3:7b:
                    21:06:54:73:43:d2:8e:b3:cd:e7:84:8a:38:a8:36:
                    17:92:45:cb:4b:1f:a0:a0:6d:49:e1:08:fb:48:6a:
                    40:c4:8c:b8:b2:33:7f:2b:dc:a6:d4:34:a4:60:e0:
                    18:93:57:ea:fd:ef:94:71:6e:33:bd:ab:e0:37:28:
                    c5:96:c7:f2:c5:e4:0d:02:b6:25:e4:e8:44:3c:0f:
                    61:f5:d4:06:05:9b:b3:5a:38:ab:06:e4:96:20:ff:
                    51:e5:d2:d0:41:76:5d:a5:9b:ef:5a:2b:37:e5:5f:
                    60:5b:19:ec:47:f8:30:4d:43:25:14:bb:9c:4d:04:
                    c1:85:d2:fe:83:86:fe:49:d2:bf:a8:a9:a8:92:b5:
                    2b:3d:48:e5:41:10:26:12:52:7d:19:f2:ad:76:f9:
                    59:f7:7a:f2:ec:7f:09:32:03:2a:b2:3a:c0:99:72:
                    71:52:97:2a:6b:28:fb:d7:b5:b2:d1:77:3e:b8:5d:
                    2c:6d:4b:2d:1f:13:07:80:72:49:4c:40:4b:c4:6e:
                    fd:5b:79:a0:1a:be:6a:d1:68:89:1f:4f:2b:f6:42:
                    86:8f:af:72:2c:40:4d:ad:59:df:31:b6:9f:09:c2:
                    3f:47:6f:9b:53:18:17:28:ae:82:6d:fb:7b:08:19:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F5:69:B2:5D:D3:02:CD:23:C7:5F:42:DF:7E:6A:1E:5A:F7:3A:FA
            X509v3 Authority Key Identifier:
                keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:79:74:d7:33:31:28:0a:9e:80:05:7f:0d:ef:15:4a:22:13:
         01:83:ee:32:a7:83:8b:42:61:b4:fe:dc:f2:03:a9:98:a7:15:
         f0:b0:bb:84:59:c7:c8:8c:d5:ab:c9:bd:6d:d0:bb:75:ce:ca:
         8a:65:28:4a:9e:be:34:bc:eb:bd:b5:6f:4c:98:4b:fc:9d:2e:
         dd:73:d3:57:80:8f:e0:8e:be:72:9e:74:89:de:4a:d8:43:26:
         2a:90:27:c2:56:5c:d7:6b:80:96:c3:36:61:a2:f1:a6:c5:c3:
         50:20:0b:82:a8:77:f2:81:32:45:78:6c:11:d9:40:56:22:58:
         10:8b:28:a9:44:23:be:b3:7a:c7:8d:e1:74:9c:3b:a9:46:b6:
         8b:fb:8a:8b:01:23:a7:0c:e8:da:cb:b8:11:a1:49:54:41:c5:
         de:a7:e0:82:73:ff:f4:14:07:6a:e2:b1:e6:d3:fc:d4:2c:dc:
         91:d3:f8:37:a6:bc:16:99:3f:a4:7c:c1:2e:00:b9:54:e8:5b:
         13:dc:00:0a:ae:6e:d2:d6:04:19:0a:a6:ef:1a:ea:cd:92:70:
         9b:7f:55:8e:a4:59:fd:3b:cd:f0:46:ad:8a:15:0d:f2:4a:0c:
         e3:b2:de:ee:9e:df:9a:0a:20:5f:e3:4f:0e:9d:86:bd:d8:e4:
         57:32:fc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:31 2025 by rpki-client