Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File:                     R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier:          okppFLaXEn0/aJxAL7hAX5av9uel1azLpNax/NCxJ20=
Subject key identifier:   F2:93:40:FD:BB:9F:4C:06:9B:63:10:D5:F3:23:AB:3B:95:DC:E5:6C
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1DB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number:          1DA5
Signing time:             Wed 08 Oct 2025 16:09:23 +0000
Manifest this update:     Wed 08 Oct 2025 16:09:22 +0000
Manifest next update:     Wed 15 Oct 2025 16:09:22 +0000
Files and hashes:         1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: B3SF/ijLVpeX0hoZSrqawoSDIyf/MkgPIUI8W4clQ5U=)
                          2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: WHJrUmFRBeAq4NFz6Ka5YRkE6nvBwbgHOetasLuBtuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 16:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7604 (0x1db4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Oct  8 16:09:22 2025 GMT
            Not After : Oct 15 16:09:22 2025 GMT
        Subject: CN=68e68cb2-3650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:b1:58:81:05:7f:0a:a1:59:c8:65:ea:66:
                    31:73:9e:b5:40:80:aa:70:8d:64:a4:4d:0b:26:d9:
                    ee:84:1b:3b:64:33:6b:c6:b2:09:9c:b4:0e:1d:8f:
                    e2:d6:48:39:a1:81:ba:fc:8e:f7:2d:ce:fa:20:b2:
                    e3:ef:1a:37:2c:ef:a3:c1:47:1a:ab:42:e7:a2:4d:
                    cb:84:4b:94:17:58:34:dd:da:9b:78:bf:8d:2b:cb:
                    77:a3:3a:e1:85:a8:85:3d:30:8c:5c:6b:ba:53:bf:
                    b9:98:9e:fc:97:c5:dd:21:8d:f4:3b:b9:23:0e:f6:
                    56:b4:1b:ae:34:bd:6e:c1:9b:0d:84:5c:e8:e7:11:
                    c0:6e:d7:96:33:d9:df:a2:d0:d0:33:71:f5:90:23:
                    76:a0:54:c0:37:95:fe:dd:dd:ba:fb:7b:0e:99:aa:
                    7b:e0:ac:0a:c7:82:cf:40:88:44:da:e3:eb:53:20:
                    e4:c2:e1:d5:8d:49:81:47:39:69:47:a4:d7:d8:48:
                    73:2a:4e:16:01:eb:fd:93:20:a4:83:44:b2:78:86:
                    c8:89:80:ee:ed:3b:e9:63:32:8d:82:0f:24:e1:af:
                    e2:d5:b1:23:65:02:ef:4b:39:aa:fe:f4:e3:71:27:
                    b1:6b:7c:84:1c:b9:cd:fe:54:f7:39:a3:f3:52:e9:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:40:FD:BB:9F:4C:06:9B:63:10:D5:F3:23:AB:3B:95:DC:E5:6C
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:25:19:7e:9d:55:5c:b0:23:bf:f4:cb:f3:b6:9e:0f:cd:
         f6:e4:bf:8f:60:18:a4:ac:f9:c5:05:55:5e:e6:c4:74:4c:6f:
         2e:94:ce:bf:72:05:f6:33:01:cf:27:57:f2:0d:8e:af:5f:aa:
         75:0e:df:66:cb:cc:ec:17:3c:ac:ad:f5:1a:ed:bf:a3:05:b3:
         1a:94:4c:16:87:18:67:92:39:6f:2f:11:72:85:84:e4:9a:10:
         e0:96:b3:23:db:7b:0a:bf:e0:0b:05:88:0c:52:cf:f1:e1:90:
         a7:f0:e4:f5:37:24:f6:fb:2a:1f:12:69:d5:55:3e:86:69:9f:
         00:78:8b:b0:54:82:6a:d7:24:28:13:e3:11:de:97:f0:08:05:
         ef:34:a8:52:8b:00:2a:9e:51:9b:d2:99:b1:b1:60:7c:48:ae:
         7b:d9:fa:5e:df:9f:05:6f:5d:ba:bf:a0:9b:f9:c8:4d:20:a7:
         4c:eb:38:07:28:18:50:d0:35:91:d4:c0:11:31:ec:10:f6:fa:
         24:98:0a:90:6f:31:f3:25:31:28:a1:47:9d:16:24:0b:80:e7:
         8c:dc:3a:bf:2f:d9:28:8d:19:1a:76:0c:16:32:6c:11:80:1c:
         b4:61:df:14:94:7c:e0:4e:f3:27:09:25:72:3a:76:20:6b:42:
         4c:7b:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:09:25 2025 by rpki-client