Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          dEzlHjQDoet69O4ozHT4gKREotr/8YcaipwjGcdNx0E=
Subject key identifier:   EE:BC:C0:E2:A4:6B:00:95:77:69:AB:33:D9:E9:36:84:6C:63:EF:20
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       078F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          11DF
Signing time:             Tue 04 Nov 2025 19:45:22 +0000
Manifest this update:     Tue 04 Nov 2025 19:45:22 +0000
Manifest next update:     Tue 11 Nov 2025 19:45:22 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: KBcsKUD6/LxcT3QXD0FEm6A/TvLaeg+3mRSOBJshqLo=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: vIPNbcJqWxUBjpuSb4YOfnKRdWitZHJvmk+kQLzHWh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Nov  4 19:45:22 2025 GMT
            Not After : Nov 11 19:45:22 2025 GMT
        Subject: CN=690a57d2-f5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:65:2e:22:7b:2f:a1:1c:b8:84:bf:41:79:
                    7a:a4:38:53:62:46:ec:35:e7:17:97:bd:e8:9e:fa:
                    54:26:44:90:3a:4a:35:93:ab:7c:84:51:0e:1c:e8:
                    b0:da:46:63:98:89:b2:59:d4:89:fe:71:55:07:0a:
                    d9:1d:ff:48:36:1a:85:46:45:11:7c:4e:aa:88:20:
                    33:7d:65:42:b2:1c:a8:23:fd:27:05:c9:8b:e1:86:
                    b0:3c:3b:8d:e4:3a:02:4b:ec:ce:1e:e8:59:9f:c4:
                    e3:03:6b:1e:ff:c1:af:71:ae:0a:01:04:c5:d1:50:
                    53:8c:df:74:f2:c0:98:fa:76:ef:44:dc:c0:d4:a4:
                    10:71:08:c9:a4:e9:00:27:62:9f:9e:71:f6:bb:b3:
                    52:41:99:ee:af:16:42:a2:11:35:8e:49:ff:5a:e4:
                    09:b2:44:ad:65:85:61:85:37:2b:b8:ba:dc:6a:3e:
                    f7:00:0f:03:51:ed:dd:ef:89:06:97:69:e6:6d:24:
                    bd:9e:21:4a:5b:40:fe:09:e3:e2:09:0b:ae:63:e7:
                    05:d8:95:89:21:65:36:c2:d6:ff:1c:6b:ee:60:53:
                    8a:94:79:51:2b:a0:28:b6:40:3b:e5:55:c5:3e:ea:
                    33:2c:25:60:0e:09:2f:3a:35:fc:f0:d0:6d:c6:11:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:C0:E2:A4:6B:00:95:77:69:AB:33:D9:E9:36:84:6C:63:EF:20
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:90:06:f4:0f:b0:19:c8:0d:6b:4a:fd:48:b3:8e:30:b2:
         02:27:85:dc:16:88:54:5f:61:7e:2b:78:52:1e:63:67:56:b0:
         6e:29:e1:65:38:7a:2a:d0:e8:8f:d0:a8:e3:96:05:fb:4b:37:
         2d:bb:b6:e5:d0:fb:9b:d9:ac:a1:0b:e5:d7:ad:ff:2c:ec:39:
         ca:8a:ec:f7:fd:b4:26:38:41:fd:9e:04:48:9b:64:da:a0:dd:
         c4:2b:46:4a:7d:9b:0c:4d:00:ad:a8:48:b8:db:bc:6a:5b:88:
         29:27:5b:23:66:39:7e:9c:2c:80:11:53:84:af:77:da:bb:3b:
         18:c1:50:fc:4b:49:25:7f:c6:c3:34:3f:81:a7:d4:8b:f3:75:
         8c:44:5f:96:da:93:d8:3f:48:59:21:46:20:ba:51:2a:27:8a:
         30:7a:f3:95:64:5d:f8:2b:4c:0f:d9:00:cd:ad:ab:f8:83:1d:
         ea:2d:ea:66:64:b9:63:c9:85:de:ec:11:a3:22:a5:3a:e2:e0:
         76:8c:c9:4b:45:d1:d6:93:7a:1f:2a:f9:14:80:08:70:e1:e0:
         42:30:3f:6e:06:57:33:d5:7f:30:8e:77:44:76:9a:2d:38:cb:
         f5:e8:78:06:50:ca:5c:98:7c:ed:42:95:71:37:1e:0f:ae:5c:
         63:ac:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:52:31 2025 by rpki-client