Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
File:                     FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json)
Hash identifier:          T8iyFnFEw4ot8BcicBqgemoKpHTVZXfEk+K21dp4Q4k=
Subject key identifier:   81:3C:F0:E8:BF:D9:52:BD:11:A3:17:9A:14:85:A5:35:4A:28:55:BD
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Certificate issuer:       /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial:       06D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
Manifest number:          06B1
Signing time:             Fri 24 Oct 2025 23:55:31 +0000
Manifest this update:     Fri 24 Oct 2025 23:55:31 +0000
Manifest next update:     Fri 31 Oct 2025 23:55:31 +0000
Files and hashes:         1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: Mr99apgfYKVLUk407mgC42w2Yx2WpIwpDCWyr+3zoEs=)
                          2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: jm6qF0iG7lzG09wOX/EbjjAF73STR64Y7EPlh/2TSZY=)
                          3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: QybDkxZsIA9LhScKa+XNkLDfh3ltBF5Yhpro/oGoLB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
                          rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Oct 2025 23:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
        Validity
            Not Before: Oct 24 23:55:31 2025 GMT
            Not After : Oct 31 23:55:31 2025 GMT
        Subject: CN=68fc11f3-38c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:6a:21:92:c9:a6:ff:0f:f2:a0:59:23:15:
                    7f:df:ff:08:a3:19:7e:92:a0:9e:47:a3:14:61:be:
                    79:19:f4:93:40:af:57:61:97:e5:09:b4:fb:1e:93:
                    e5:e5:6a:c7:27:0b:19:9e:cd:7a:79:27:7f:01:55:
                    25:4c:5c:00:07:f9:4f:ef:46:b4:ac:25:2e:63:e0:
                    6b:49:a3:b1:f4:83:f3:bd:db:f0:fd:b4:cd:0e:02:
                    ab:3e:6b:d6:90:8f:b8:6c:10:d3:1d:50:dd:16:13:
                    2c:6d:9e:a4:56:e2:05:09:8d:f1:0d:17:d9:c2:5c:
                    36:fc:f7:c3:09:6c:da:61:2d:1b:85:4c:5d:00:ee:
                    a7:bb:07:f7:87:3c:56:15:1e:4f:19:22:ca:4e:86:
                    2c:88:c7:fc:78:73:57:81:44:d1:b5:13:b1:20:15:
                    52:bf:82:1e:38:25:cb:6d:37:44:b9:19:d4:71:29:
                    04:d2:85:8c:a3:53:b9:9a:fa:57:c5:a5:b2:d7:0c:
                    89:3f:43:5a:b7:cf:bc:61:43:d7:61:81:2f:2f:b7:
                    34:da:5a:0e:44:09:c9:f2:aa:20:c5:20:91:a4:95:
                    8d:8d:04:d8:68:3e:e5:53:f4:36:9f:c4:f8:d4:f5:
                    5d:e0:90:67:08:bc:70:63:69:00:f2:71:ca:d9:4b:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:F0:E8:BF:D9:52:BD:11:A3:17:9A:14:85:A5:35:4A:28:55:BD
            X509v3 Authority Key Identifier:
                keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:21:f1:35:a6:ee:2a:12:ea:8d:39:d3:6c:10:ab:cb:c6:5e:
         31:42:4b:e7:5c:c8:c9:eb:12:fb:90:dd:62:b2:d6:5e:a1:16:
         71:6a:f4:72:74:61:bd:5a:76:7d:d3:34:c3:72:81:b7:3e:62:
         b9:e3:7f:84:db:ec:dd:9d:7b:c0:d9:3e:d0:6b:bb:86:af:e3:
         bc:b0:c5:01:e9:1c:d3:ed:cd:22:7c:0b:fa:10:99:89:9a:2b:
         e0:66:40:bd:69:5a:c8:ae:88:31:71:34:8f:bf:d7:1e:99:18:
         ae:54:64:5d:61:12:cb:38:61:b5:b7:cf:69:74:b7:79:7c:90:
         15:23:30:31:79:63:dd:74:0f:d5:bc:98:41:14:35:33:51:19:
         aa:42:05:21:a9:9c:24:aa:ef:76:f9:4c:13:ae:ed:82:2d:d5:
         cc:3f:6c:ec:f0:ac:38:29:1c:d5:5d:5d:9c:26:c2:26:13:98:
         59:3f:e4:cd:a1:c1:b8:ca:48:4a:6f:35:83:4f:e0:ce:dc:9f:
         21:67:f3:07:a6:8f:57:3f:ca:98:4d:cf:aa:00:26:b0:8e:16:
         34:6d:e7:09:ca:f1:ae:5f:6d:b4:1d:a9:84:34:3c:8a:49:bd:
         ea:cf:73:4f:b9:71:ad:ff:44:3a:e7:d8:9a:7b:54:f8:bb:ac:
         d7:f6:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:27:17 2025 by rpki-client