Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
File:                     T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft (raw, json)
Hash identifier:          a1Fhg/Z1Z5gcc1JGt7x6nx95R4IlKxz+TzNwLCd9A0Q=
Subject key identifier:   33:EC:FF:CF:76:93:02:39:DA:E3:AF:CD:9C:9E:FD:14:74:8E:05:37
Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
Certificate issuer:       /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
Manifest number:          020F
Signing time:             Wed 05 Nov 2025 02:27:52 +0000
Manifest this update:     Wed 05 Nov 2025 02:27:51 +0000
Manifest next update:     Wed 12 Nov 2025 02:27:51 +0000
Files and hashes:         1: T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl (hash: 4bo0qQNKiN91NaBmpmpSvrA7hSJL1eG7erMyZ0Wbj4g=)
                          2: 0BD8AF96D41A11EF804F7049C4F9AE02.roa (hash: CbsMaT+1o+zoMcHzdBRqNGnxnAlCq5uF3XIGjN5ZkQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl
                          rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916548C, serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
        Validity
            Not Before: Nov  5 02:27:51 2025 GMT
            Not After : Nov 12 02:27:51 2025 GMT
        Subject: CN=690ab628-9374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:15:37:c3:54:d6:89:8a:c7:05:e5:76:0f:
                    d3:41:64:6f:34:4e:0c:2b:92:46:d3:72:0f:9a:9e:
                    0b:16:4f:f3:12:dd:e0:ad:04:cb:90:34:34:d5:dd:
                    3f:1d:60:5d:f3:ee:4e:13:7c:81:29:0e:2f:78:b8:
                    dd:85:71:9e:a0:29:e2:60:4c:3f:26:c1:c6:ac:0b:
                    fe:32:68:80:0c:60:31:5a:02:4e:19:07:21:a7:10:
                    9f:63:dd:31:ae:04:ca:4e:e2:85:7a:f3:3d:8d:6d:
                    96:99:cb:3e:53:fd:03:6b:b4:6f:c9:18:04:7e:b2:
                    84:97:0f:29:14:4f:e1:2e:c5:8e:45:89:e4:6a:76:
                    07:db:07:4d:52:ca:cd:a4:bd:12:55:0e:a8:0c:ce:
                    8f:30:a3:cd:a5:b5:00:c2:e9:2b:b9:3d:26:5c:4c:
                    88:30:42:05:68:ba:2a:2c:cd:45:ba:bb:09:7f:ce:
                    96:ec:39:63:2e:48:b5:a1:0a:ff:b3:83:b1:14:d3:
                    98:e3:be:61:ea:33:3e:3c:78:94:76:8d:c6:56:f0:
                    96:10:2d:20:f3:94:b3:8b:37:81:46:62:69:1e:3b:
                    0b:c5:81:f8:fb:17:ee:b2:79:bb:ce:ba:a7:ac:5d:
                    df:fb:0b:52:2c:7c:40:79:5b:bd:28:99:0b:f3:79:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EC:FF:CF:76:93:02:39:DA:E3:AF:CD:9C:9E:FD:14:74:8E:05:37
            X509v3 Authority Key Identifier:
                keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:22:9a:3b:dd:af:b4:06:c1:34:e5:16:de:1f:27:04:b3:
         66:0c:ae:ad:7c:fa:29:a4:da:87:99:bb:16:42:53:a0:36:9e:
         60:5d:1a:3d:bf:70:2d:85:17:96:7e:a6:4a:31:c3:44:89:60:
         1f:68:99:0b:d0:58:35:f3:8d:e1:6e:db:e8:62:85:8e:e0:87:
         b8:c0:06:d3:25:41:80:d0:f0:0e:19:28:a7:36:36:32:6d:fc:
         c2:df:55:ef:35:8b:e2:c9:fd:6d:0e:2a:bf:c0:d6:82:77:d9:
         49:4e:ce:7c:66:ae:8b:ff:84:e1:d3:f9:9e:0a:34:e9:67:49:
         fe:00:8b:df:52:5a:c1:4c:da:3f:c4:ab:97:09:4c:13:02:b8:
         b5:97:ee:2f:25:bd:16:2c:4c:5d:72:00:b8:8f:f0:5c:f0:02:
         96:08:56:45:bc:a7:b4:0f:aa:cf:36:3e:0e:e1:5b:b1:95:47:
         bc:81:fc:37:a8:3f:fb:8f:6c:32:ad:1a:91:be:68:7c:ba:75:
         68:dc:2e:bc:95:09:94:bd:f7:54:f0:1e:c6:6b:01:c3:57:14:
         79:51:99:04:04:b5:16:80:82:12:00:84:47:3b:c0:b5:f9:06:
         f7:08:e5:c4:0f:96:6b:78:42:4c:af:d4:ae:a4:64:90:6b:05:
         c5:58:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:47 2025 by rpki-client