Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          puG2J58Ch9vya350NUr09yJTEoZ8p2uBwkHIRqyZsb0=
Subject key identifier:   AE:9A:31:E0:A0:2D:45:BE:C7:4A:36:B6:E1:8D:9D:06:09:D6:AC:EF
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          C6
Signing time:             Sat 25 Oct 2025 09:39:23 +0000
Manifest this update:     Sat 25 Oct 2025 09:39:22 +0000
Manifest next update:     Sat 01 Nov 2025 09:39:22 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: y3E8taUKJtpVk0S30Db4xAmNzZ8JyjkrOaLl74x/SuQ=)
                          2: 6F591F00671411F0A568F124C4F9AE02.roa (hash: x0s+a8n0tfUspvoFu90euoP3YJ9IRWh7FQTQNg+CfNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 09:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Oct 25 09:39:22 2025 GMT
            Not After : Nov  1 09:39:22 2025 GMT
        Subject: CN=68fc9aca-848a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:8f:82:40:8d:c6:c9:2b:6f:c5:5b:95:6a:
                    13:96:68:fc:31:d6:bb:5a:ca:b0:cb:70:87:33:73:
                    83:99:36:0a:4c:dd:ab:e7:17:76:dd:7c:5d:ca:bd:
                    56:a1:4a:04:e9:7d:c2:ec:c8:01:34:7b:c4:97:2b:
                    61:d1:0a:c1:ff:95:01:8b:38:46:23:8c:0e:a0:12:
                    79:9d:c7:04:11:d8:68:fe:b5:58:94:5a:1a:cc:7e:
                    9f:f7:78:d8:0a:4e:54:cb:bd:af:26:7a:3e:12:80:
                    fa:f5:20:1a:d5:e9:4f:84:16:c8:71:d6:93:45:13:
                    65:89:78:d6:d7:dc:19:93:9f:cf:5a:b8:9a:84:ce:
                    37:7e:30:bb:24:e9:92:8a:32:ec:eb:e8:a9:7b:c1:
                    56:db:e5:0b:ec:b6:4b:24:57:0d:10:7b:92:e9:15:
                    14:56:ec:62:fa:75:42:5f:6f:7b:7c:10:17:b6:13:
                    0c:87:26:86:d2:28:ae:79:2c:71:74:08:de:f5:85:
                    6b:06:bb:a5:c2:b3:8c:17:13:5e:61:d0:0e:61:95:
                    c7:63:60:70:84:c9:79:94:24:24:1b:2c:cd:0a:e4:
                    92:a6:c4:9e:25:b6:80:a1:13:46:ef:41:4c:d9:b3:
                    7a:6c:a1:a1:b2:da:8e:dc:59:f7:31:e2:52:45:91:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:31:E0:A0:2D:45:BE:C7:4A:36:B6:E1:8D:9D:06:09:D6:AC:EF
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5d:c1:76:71:11:31:4d:e3:12:1c:5f:44:43:ff:d1:59:2d:
         8d:08:ad:4b:52:9c:90:c4:f2:0a:dd:84:0a:42:f2:73:9f:50:
         4a:53:05:a7:c4:f2:0f:e6:18:54:b5:97:cc:93:7a:68:28:99:
         24:c5:06:ea:e3:f8:11:e0:77:b4:8e:7c:39:ef:37:e1:43:e3:
         74:be:81:a2:7c:a8:1a:55:b6:48:4d:b6:fe:6b:28:95:4e:16:
         6a:98:0a:50:86:54:99:89:4b:c9:bd:36:7f:f5:fc:91:87:77:
         51:04:39:56:d7:d5:30:ea:25:60:59:a7:ed:a1:33:97:3b:c2:
         19:5c:64:fc:74:04:77:33:31:54:9e:45:f2:69:bf:5b:3f:14:
         8f:0f:d2:f9:8f:d8:cf:f3:0b:fc:aa:16:b7:71:fb:d1:b7:24:
         3d:a9:52:50:ce:a7:8c:d0:ad:b5:cc:eb:19:0c:bc:c3:fc:bf:
         e3:96:c6:a8:8b:3d:c1:30:59:f4:a9:45:e1:c3:7b:bf:64:af:
         44:54:58:42:ad:d9:aa:e0:09:43:8b:ed:b5:d3:96:d7:7d:a8:
         ed:0b:93:14:db:cf:01:dc:a3:eb:0b:3e:28:28:ab:18:de:7a:
         7f:90:0c:7f:9f:5a:39:f2:66:88:21:17:21:88:b9:18:ca:e5:
         90:11:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:50:12 2025 by rpki-client