Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          XXF12bq304ZlQwyzqbDiPMOpsRb8NzVLu79kEEpHm3Y=
Subject key identifier:   E7:02:98:CC:DA:FC:BC:B7:28:57:1E:91:21:1A:45:00:0C:37:C6:4D
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       0776
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          11AD
Signing time:             Thu 18 Sep 2025 19:56:36 +0000
Manifest this update:     Thu 18 Sep 2025 19:56:35 +0000
Manifest next update:     Thu 25 Sep 2025 19:56:35 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: FTMKRfAW4ic9DrL8PoTrmBgs3EVbtL2hNC02HoeQ5HA=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: vIPNbcJqWxUBjpuSb4YOfnKRdWitZHJvmk+kQLzHWh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Sep 18 19:56:35 2025 GMT
            Not After : Sep 25 19:56:35 2025 GMT
        Subject: CN=68cc63f3-c6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:03:90:84:07:1a:5f:27:b5:91:0d:ed:97:
                    e7:42:0d:d0:cb:a1:fb:8f:6e:c7:e1:17:5c:53:21:
                    33:a1:f4:0f:66:b2:90:3e:ab:9b:fe:e6:e9:64:46:
                    98:93:7b:18:ae:86:0c:69:dc:f0:3e:4f:13:f5:03:
                    e3:fb:e2:f3:af:b5:b2:11:1a:ec:48:2b:36:ac:a5:
                    83:c8:3a:dd:00:11:f7:c3:25:80:d2:2d:55:16:ff:
                    da:54:e7:98:55:2a:3b:24:0a:34:b3:df:63:75:0f:
                    55:27:14:fd:e3:34:47:59:0a:77:6a:4a:e6:b9:af:
                    00:ef:e7:4c:2b:bc:f9:6c:6d:c5:c7:29:c8:c0:5d:
                    4b:f8:6c:42:fe:85:e2:7a:ed:f7:cb:d0:a1:df:59:
                    1b:6e:0e:4c:fe:bd:c4:66:08:0f:48:bd:00:f4:13:
                    1c:18:9f:bf:9d:e3:ff:21:fd:49:56:24:48:58:ec:
                    68:f0:b2:07:7a:ed:c1:c2:a1:2a:a2:69:d9:c4:1a:
                    a8:aa:84:4f:4b:a8:26:6c:f9:34:44:4a:1d:36:b1:
                    81:74:c2:bc:75:c3:16:ab:73:78:0e:d2:5b:38:25:
                    36:cc:e3:16:84:5d:f4:3d:3b:10:32:6f:38:64:42:
                    84:1e:9d:26:20:4c:cc:65:af:f8:67:f6:5f:bc:b3:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:98:CC:DA:FC:BC:B7:28:57:1E:91:21:1A:45:00:0C:37:C6:4D
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:4c:dd:4a:35:10:85:eb:8f:f1:e0:e1:8b:3b:fb:c3:ca:
         52:4e:39:26:0a:a7:75:c6:e7:84:51:27:31:58:8d:9e:61:86:
         1c:7f:2b:dc:40:f0:ee:ff:3e:55:9d:65:43:51:29:d9:0b:5d:
         bc:66:c2:33:51:e9:d8:36:2b:03:b6:da:df:43:5d:76:a3:28:
         8e:1c:3f:ad:02:21:39:fd:4c:e4:40:05:a8:7f:77:91:32:35:
         b4:94:30:f8:ec:08:e4:cf:d5:74:71:5d:e5:77:d1:30:63:e3:
         fe:f9:7a:ff:7b:34:8f:87:20:91:4f:c8:09:c7:d3:85:04:e8:
         35:59:d7:92:79:9b:b6:00:57:c6:f3:f8:ef:b6:fe:45:b5:5b:
         1e:4e:08:6c:69:1b:d8:78:75:0f:7f:d5:2b:00:3e:6f:69:fc:
         ca:e5:ca:6f:d5:54:80:14:e3:d5:60:99:62:ab:9b:a5:98:3e:
         79:d3:21:18:9a:5f:a6:04:67:c0:b2:0e:73:f7:cc:a7:cb:cd:
         8e:ca:41:cb:a3:bf:d7:36:a8:e0:49:91:0c:54:c5:d8:88:54:
         84:03:1f:0b:68:ab:bb:fb:77:7e:ca:a0:e1:11:92:d4:c9:03:
         8f:69:f1:ea:60:d2:35:16:d5:31:1a:5d:a1:93:43:5d:7b:d2:
         99:69:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:46:38 2025 by rpki-client