Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File:                     dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier:          fxO2G5D9fD57E1I6YGwyO5N4SHg9+Kz5rd0L8UYF1ow=
Subject key identifier:   F7:C7:4A:A1:86:5D:52:44:38:F2:2D:B2:06:BD:46:29:44:6B:8B:A6
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number:          0143
Signing time:             Mon 03 Nov 2025 04:24:17 +0000
Manifest this update:     Mon 03 Nov 2025 04:24:16 +0000
Manifest next update:     Mon 10 Nov 2025 04:24:16 +0000
Files and hashes:         1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: tVYQWCYdHBFd0e8Kjvm6BHgolmS5jBnWI+Q8SRGW9e0=)
                          2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=)
                          3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Nov  3 04:24:16 2025 GMT
            Not After : Nov 10 04:24:16 2025 GMT
        Subject: CN=69082e70-3c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:c6:30:ad:5c:ae:f8:84:3b:50:ae:2c:6f:
                    67:25:ab:44:d1:3f:85:5b:12:e3:6c:f6:b0:70:90:
                    a7:47:cf:12:de:f2:5a:ba:d6:0c:8b:a6:af:df:15:
                    82:23:0a:d9:57:ab:fa:86:1a:e0:67:ea:ce:45:f2:
                    2e:3f:18:f4:1e:05:1c:00:9d:65:df:14:66:a5:e5:
                    80:f2:06:10:ba:a7:0f:19:91:b0:c2:ea:05:d2:31:
                    a0:75:8c:f8:4a:29:11:79:64:29:2a:cd:42:81:e9:
                    9a:34:78:91:d6:fe:59:d7:5c:64:5b:52:b9:ec:37:
                    ec:55:61:b5:71:3d:ab:4c:f2:05:c1:34:53:9d:1c:
                    52:9a:5f:70:cf:47:54:00:72:3a:f2:c8:a1:b6:be:
                    40:55:e9:b6:25:58:9b:48:72:e2:6f:56:7a:d7:80:
                    da:77:f5:18:7a:e7:3c:3e:e6:e2:0c:bf:19:74:e0:
                    01:79:73:0c:58:9d:d2:7e:e9:7d:b7:9d:2c:38:a6:
                    40:31:16:76:d0:68:ea:64:a8:dc:7d:7d:32:a6:b1:
                    79:0f:d0:4c:8f:52:4e:71:34:c5:29:ee:77:71:a4:
                    02:33:a2:7f:6d:ab:6e:25:08:a0:59:2f:79:13:4e:
                    d8:8a:a6:5e:b6:c7:a9:82:3a:8f:82:60:4a:ca:f3:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C7:4A:A1:86:5D:52:44:38:F2:2D:B2:06:BD:46:29:44:6B:8B:A6
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6b:96:2e:c7:e8:11:91:68:77:24:a1:5b:18:f5:44:96:57:
         22:59:07:fe:d1:70:f5:a6:07:18:9b:52:26:72:8b:fa:e8:cb:
         ee:a5:cc:3d:bc:d1:77:4a:80:64:7f:1b:78:f8:a7:d6:98:fa:
         ce:3b:60:4e:d5:2c:38:c1:c2:a3:e1:8d:d8:48:d8:96:f9:2a:
         51:c3:a9:0c:0d:a6:e3:8c:3c:2a:60:6a:a1:0e:db:89:3d:2a:
         b2:47:0e:8f:b2:c4:85:87:cc:4c:b6:ee:2b:f2:54:a9:b5:6a:
         bc:4b:2d:b3:3a:a8:3b:13:f4:cb:dd:43:a1:f2:d9:aa:16:9c:
         0e:04:4f:b9:c2:e3:47:a0:0b:c3:82:55:41:a4:10:a1:a5:47:
         59:34:45:f6:fd:57:5e:38:7a:02:5f:0c:8b:93:38:69:21:6a:
         33:4e:11:bb:96:83:c8:67:47:7e:52:dc:32:72:45:75:56:09:
         94:bf:ed:55:9d:6a:b3:28:08:89:5b:79:10:3e:34:e0:69:7f:
         07:ea:d6:73:6b:d8:c3:d1:34:fc:87:da:f0:b0:3d:71:03:71:
         cb:1a:c9:a0:8a:02:5f:bb:0e:93:96:ae:16:b8:6f:95:02:cc:
         6a:b6:c7:1a:80:b9:27:8e:e2:79:d9:af:65:ab:84:49:91:30:
         59:39:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:28:11 2025 by rpki-client