Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File:                     6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier:          sPVCFgPPVR5W3bWsPpsoOe1h7Sm5gRT80usStrMqHhE=
Subject key identifier:   B5:53:77:E3:CD:6D:22:10:08:0B:BD:58:48:6C:5F:AC:D8:FF:70:E2
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer:       /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial:       03DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number:          03D2
Signing time:             Mon 03 Nov 2025 00:35:12 +0000
Manifest this update:     Mon 03 Nov 2025 00:35:12 +0000
Manifest next update:     Mon 10 Nov 2025 00:35:12 +0000
Files and hashes:         1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: 2eMslNWhP/o+vKlft16pkbI4R54GX0NuUu9WXJxRCRo=)
                          2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: JJotf7VpmSYaDPVQqH2CXAbFgfSH9/zhk44G7WVeO/k=)
                          3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: AFgH6rBWprP5TXP7VnSd6WVIQBawbyHn9rZtCd/WfjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
                          rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
        Validity
            Not Before: Nov  3 00:35:12 2025 GMT
            Not After : Nov 10 00:35:12 2025 GMT
        Subject: CN=6907f8c0-a517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:ca:32:63:58:99:87:24:53:c3:0e:2a:c3:
                    c7:dc:d5:f3:79:0d:4d:d9:59:f2:d2:70:1f:5d:ea:
                    ad:a1:09:40:78:e6:47:dc:0c:2a:f3:a1:77:75:36:
                    15:3d:b6:3b:48:ce:18:f7:0a:65:6b:82:0f:9f:99:
                    0c:db:67:99:f3:6e:06:6f:07:5b:8d:80:b0:47:b2:
                    c8:d4:d3:c6:37:fe:08:57:1d:4a:af:ba:56:b8:21:
                    5d:23:80:df:b8:ce:1d:e1:33:df:b4:6a:92:64:9f:
                    96:97:97:2f:dd:36:ef:0f:5d:e5:b6:4d:aa:7f:39:
                    0d:95:c7:8a:0a:cb:cd:10:f2:6b:4b:5a:b4:c1:a5:
                    68:8e:74:1f:ae:2e:66:b9:c2:e3:25:66:58:a7:cd:
                    c2:a4:c7:17:22:61:c5:04:2e:ce:50:b3:ea:6b:32:
                    a9:aa:a2:fc:e2:35:6b:a5:3c:21:be:b3:c5:02:22:
                    07:dc:ff:d8:47:a3:89:61:4f:7f:d6:b5:f1:f4:40:
                    0e:6d:01:87:9e:63:b0:bb:9b:d1:ef:d2:ba:ce:dd:
                    48:a4:a3:51:71:68:6b:de:d6:e6:99:a9:ae:a5:45:
                    33:a8:6b:07:61:bd:99:bb:7d:7f:57:d1:81:b1:13:
                    b5:d4:5c:a9:bf:f2:c7:c6:71:3e:10:5f:02:64:1b:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:53:77:E3:CD:6D:22:10:08:0B:BD:58:48:6C:5F:AC:D8:FF:70:E2
            X509v3 Authority Key Identifier:
                keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:74:38:c0:87:6e:30:ac:1e:42:e3:6a:fc:77:94:cd:f0:
         43:4f:03:bb:36:d3:80:9d:5b:37:5b:15:df:57:e6:4a:01:2d:
         a9:2f:f9:35:59:4f:3c:cb:87:7f:83:63:f9:aa:11:0d:94:96:
         8a:c4:f3:13:f4:66:a2:54:83:40:ed:c0:be:20:8a:bb:a6:5e:
         66:ff:3e:61:71:b5:bf:31:5c:68:83:6d:d7:73:23:34:ca:7e:
         fd:3e:55:75:83:0a:a5:e1:59:6d:b5:19:70:66:bb:63:e1:54:
         26:70:ef:b8:9e:61:ca:8f:83:31:e3:a6:26:14:30:01:c2:e3:
         ae:56:5b:af:e4:11:11:fa:f9:0e:43:f1:98:ae:97:e4:52:b7:
         d7:0d:49:33:7d:68:c6:e9:a4:2c:20:12:69:41:75:e7:ab:ac:
         ea:3f:38:a5:5e:42:1e:64:28:e4:3b:6a:b8:bb:bd:a2:b0:62:
         a3:3f:69:71:78:49:cc:00:d7:41:65:d5:22:91:61:7e:c1:ef:
         e1:d9:4f:0c:76:37:23:48:29:07:fc:e1:e0:22:b9:5e:de:85:
         21:bc:2e:ab:85:5b:ef:8c:28:88:c8:93:b5:e9:ad:b9:b4:83:
         09:52:76:90:5e:9f:b7:d9:67:ef:1b:5b:c2:9d:97:5e:da:30:
         a2:be:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:34 2025 by rpki-client