Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
File:                     a6pcUguOS_VkxLv0bh8xa9RfoDc.mft (raw, json)
Hash identifier:          tztEf+BcJAjH1Q2X8AmXICl6E5HzycrHvBK4Mb34K7E=
Subject key identifier:   3C:A4:CB:B2:0C:10:25:D8:25:DC:17:50:56:B8:78:1B:BE:B3:99:11
Authority key identifier: 6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37
Certificate issuer:       /CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
Certificate serial:       02D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
Manifest number:          02C7
Signing time:             Thu 06 Nov 2025 21:57:08 +0000
Manifest this update:     Thu 06 Nov 2025 21:57:08 +0000
Manifest next update:     Thu 13 Nov 2025 21:57:08 +0000
Files and hashes:         1: a6pcUguOS_VkxLv0bh8xa9RfoDc.crl (hash: T6Zrs9OUU9Ir+mnKHd//k6L5iK9lqJ6+vaWBCSqWtrI=)
                          2: 5B9A1DA0114211ED957E085DC4F9AE02.roa (hash: 434R2ZI7IqSBRHE33dBHuVGC0axS/evdyQtP96MQ17A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl
                          rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Nov 2025 21:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144463, serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
        Validity
            Not Before: Nov  6 21:57:08 2025 GMT
            Not After : Nov 13 21:57:08 2025 GMT
        Subject: CN=690d19b4-529a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:99:5c:6a:d9:45:38:3e:26:03:f2:d0:ac:
                    ee:1d:4a:22:86:7e:1d:c8:e5:8b:3d:01:1d:3d:b3:
                    7b:ba:ae:fd:12:3b:d7:1e:e5:a2:93:e9:f2:dd:58:
                    76:cd:b5:bf:25:f1:f0:db:bb:ad:bd:2d:0e:de:96:
                    7c:cb:a2:cb:1f:03:e5:67:f5:34:51:f2:40:88:97:
                    03:72:9d:e9:4d:73:fa:c2:7d:91:a4:c6:10:8a:2e:
                    c3:3d:1b:3f:0b:3a:92:2e:c0:18:23:e2:ea:dc:1b:
                    85:ea:47:d9:50:ab:c8:e1:5e:25:ca:8f:3b:3d:2f:
                    39:75:d6:e1:17:38:36:0a:29:47:2a:d4:5a:ca:b5:
                    37:71:3f:76:f6:75:9b:d0:06:39:42:ed:5a:42:70:
                    16:ff:b1:2d:4d:e7:1d:77:70:f0:11:f3:7b:48:76:
                    f1:eb:dd:26:45:38:1c:97:db:0d:c2:12:65:e2:07:
                    ca:aa:f7:34:65:0e:42:17:64:9b:45:b2:af:5f:8b:
                    e4:02:90:71:9a:46:d8:79:ad:f7:83:93:5c:1e:30:
                    2e:96:83:60:7e:0d:eb:ff:aa:5a:56:db:53:ee:1e:
                    63:f8:b1:20:63:f2:5e:56:81:a0:b9:16:a9:6e:1b:
                    34:f2:b1:77:3c:b2:1b:da:0c:81:86:c9:68:14:f1:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:CB:B2:0C:10:25:D8:25:DC:17:50:56:B8:78:1B:BE:B3:99:11
            X509v3 Authority Key Identifier:
                keyid:6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:26:5c:46:c9:02:6e:fa:51:26:94:ca:e3:13:e2:19:7c:
         38:a5:24:7d:52:9d:65:21:5d:42:2f:93:9f:4d:e5:e4:a3:5d:
         57:68:75:f5:0c:b1:5e:a2:ce:61:94:f1:1a:22:05:6e:00:43:
         56:4d:35:72:2f:bd:7d:d5:37:e1:c7:8b:f1:b3:ec:41:12:db:
         b2:0a:b5:7b:8f:8b:9b:e0:97:35:ff:aa:55:35:49:d3:cd:a0:
         fb:0a:c8:e1:57:07:e3:83:ea:7b:6c:5e:a9:bb:09:c6:f1:d5:
         8f:f5:4c:f5:57:9d:1c:65:e4:61:80:aa:8d:d9:40:32:d5:31:
         11:88:6d:09:eb:2f:73:53:dd:d6:fd:c9:73:42:09:01:90:f6:
         83:77:e8:8d:4c:43:59:bc:f7:f4:58:8d:09:46:5d:de:64:cc:
         27:b9:32:76:43:5d:69:4f:d0:13:d9:4b:2e:83:4e:67:75:e4:
         58:86:a0:a1:91:56:71:83:cf:1d:24:63:5c:2d:cf:63:db:a6:
         1d:d6:d4:2f:80:36:13:c1:50:b9:d2:c6:3c:60:92:fc:06:f7:
         06:e3:9a:66:ba:be:7f:1d:22:b9:e3:c6:50:e1:ad:89:23:c0:
         3c:96:5f:41:60:4a:4b:9b:cb:a1:14:bd:20:67:4f:ac:18:df:
         cf:31:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:46:55 2025 by rpki-client