Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File:                     6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier:          BA5111AbLbS8AEIZRskkPTpDRsFmY94MZ5VDxJ2ILX8=
Subject key identifier:   62:B1:B8:29:F2:03:38:70:99:29:5D:DE:92:4C:B4:DC:E8:17:A7:48
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer:       /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number:          0109
Signing time:             Sun 19 Oct 2025 07:55:00 +0000
Manifest this update:     Sun 19 Oct 2025 07:54:59 +0000
Manifest next update:     Sun 26 Oct 2025 07:54:59 +0000
Files and hashes:         1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: lvVPnMaQXik82aS9OQDt6lqXl0XS6lK1TU0ng33BbvU=)
                          2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=)
                          3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
                          rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
        Validity
            Not Before: Oct 19 07:54:59 2025 GMT
            Not After : Oct 26 07:54:59 2025 GMT
        Subject: CN=68f49953-ac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:f5:e5:bf:c1:1b:28:e4:b0:e6:f2:16:2b:
                    63:36:6e:5e:cd:bf:bb:12:5f:f0:dd:dc:7d:78:ee:
                    03:c4:aa:d8:ee:f9:12:89:cc:e4:2b:e7:15:7c:11:
                    5f:b8:e7:a0:c9:a1:7e:95:40:be:18:8f:6a:1c:fb:
                    fd:e6:c4:3a:19:7c:40:79:1a:03:92:9b:23:cd:34:
                    f4:e9:f9:e8:2d:be:eb:d2:9d:1e:09:7c:5f:a3:7f:
                    63:8a:93:64:ac:84:7f:a2:aa:9c:d6:15:23:93:c8:
                    7c:28:cb:cf:a8:10:e2:1c:7e:63:4e:9e:dd:06:59:
                    76:36:3b:aa:d5:18:06:a8:4b:5d:63:1c:46:7e:ed:
                    29:a0:89:35:68:c7:13:ec:20:42:47:b5:ff:e7:0d:
                    49:32:7e:d1:81:5c:23:41:54:88:be:fd:20:be:5f:
                    57:27:01:51:c5:f9:ad:3e:d1:a0:be:ad:2d:6f:80:
                    c8:78:de:4a:cd:64:7a:17:56:99:ce:6c:46:9b:00:
                    5b:a5:2f:6e:0e:cf:8e:89:a3:da:18:4b:77:0c:43:
                    e3:dd:3b:e0:41:f1:5f:9d:f4:88:f9:4f:ea:bb:91:
                    7b:d0:0f:17:c7:12:d8:e0:ab:db:71:04:3a:2a:9f:
                    9e:4c:46:05:cc:76:0f:41:7f:b1:67:6a:33:73:86:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B1:B8:29:F2:03:38:70:99:29:5D:DE:92:4C:B4:DC:E8:17:A7:48
            X509v3 Authority Key Identifier:
                keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:fa:89:2f:0e:c3:6b:c3:aa:68:eb:78:a5:28:92:0d:67:
         60:06:f3:49:3a:70:53:45:a6:10:34:91:36:a8:47:37:b7:f1:
         85:cd:02:f5:15:54:48:eb:d4:aa:92:92:7c:5b:1f:6b:59:6b:
         da:7d:58:3e:b7:d1:6f:80:e8:91:bc:ab:d0:9d:c2:b2:aa:15:
         45:e6:88:1b:53:4a:38:2d:b7:ef:b4:bd:b3:9d:72:df:6b:21:
         6a:85:19:61:c0:86:7b:7f:1e:ba:31:0f:4b:3c:1f:90:15:d1:
         00:a7:75:78:07:76:76:26:fa:d7:1b:73:d8:7d:40:14:2c:7b:
         c2:6f:55:a2:cc:79:26:de:d9:e5:76:5b:1a:01:d9:86:9e:62:
         06:c3:29:a9:a8:90:85:31:24:70:b9:e3:4f:b6:40:0d:ef:f5:
         bf:8a:29:78:36:ca:f6:73:4b:05:90:d0:c1:38:be:a4:f2:92:
         53:ed:85:88:1f:00:4e:48:0e:38:f5:83:e9:bc:70:ad:0d:66:
         23:c3:86:fa:96:3a:3a:2b:e9:58:14:05:f8:f9:2f:7a:cb:5b:
         2a:32:a3:4b:8d:97:2c:fc:7c:b7:d4:43:12:7b:f2:f6:d1:52:
         82:6a:7b:95:53:23:31:56:64:22:b9:bd:25:b2:7a:f6:54:da:
         fa:05:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:44:03 2025 by rpki-client