Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File:                     p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier:          H2u/Is3qOeRP3mF8B4jX2W28Hv2Tz7XiEpbAvxOBw2E=
Subject key identifier:   A3:E6:41:11:E2:9E:DA:1E:94:75:52:C2:6A:1C:E4:04:D7:10:C1:9D
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer:       /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial:       0C0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number:          0C04
Signing time:             Sun 02 Nov 2025 18:47:35 +0000
Manifest this update:     Sun 02 Nov 2025 18:47:34 +0000
Manifest next update:     Sun 09 Nov 2025 18:47:34 +0000
Files and hashes:         1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: IUmFa9g+Ns1S11Yw7fQBFoQ882SZ7nVm4VHimgLM+JQ=)
                          2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: bvU87sPankSR4y/0B0suj/VghvgnUkOI9EyFZQQUQyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
        Validity
            Not Before: Nov  2 18:47:34 2025 GMT
            Not After : Nov  9 18:47:34 2025 GMT
        Subject: CN=6907a746-0523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:c9:ea:04:1b:05:2c:80:78:49:45:1c:40:
                    f1:86:6c:d6:36:5d:3b:aa:0c:25:f9:e6:55:25:e4:
                    f5:a3:6a:68:aa:d4:ff:27:b5:82:31:c7:d4:f0:4f:
                    c1:a6:60:6b:a1:e6:fd:d3:73:24:71:4f:50:d6:23:
                    d7:9a:d0:ef:7c:3d:90:ba:78:b7:c2:db:ff:2a:3c:
                    90:17:63:b1:e4:09:ed:91:ab:c8:4e:3e:c6:5a:8d:
                    cb:d8:63:7a:0a:6b:a2:77:c5:02:1b:c1:9c:d5:d1:
                    d7:84:39:5c:6b:12:45:de:2e:d8:45:6d:fb:df:d4:
                    5f:f0:48:b2:18:2c:3c:4e:4b:d6:63:30:40:09:37:
                    89:c3:83:94:df:9d:e0:f9:9b:12:9f:14:30:6c:83:
                    cd:34:9b:07:65:20:fd:52:7b:ef:f0:c4:9d:3c:41:
                    87:ba:1e:9c:9e:d4:3b:80:42:e3:e9:bf:02:5d:80:
                    35:1d:5c:38:10:21:8a:18:ae:85:6a:11:7d:fb:77:
                    0a:26:db:47:55:21:d0:96:28:d6:79:57:ac:37:ab:
                    ba:c6:c6:3f:3a:c0:5e:01:33:60:e0:2f:33:14:56:
                    de:49:8c:a1:e5:cc:ae:4c:3e:0c:fb:98:0b:b3:d8:
                    2d:3c:21:19:9d:eb:a8:48:36:b6:9f:a4:c2:ce:8e:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:41:11:E2:9E:DA:1E:94:75:52:C2:6A:1C:E4:04:D7:10:C1:9D
            X509v3 Authority Key Identifier:
                keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:86:a7:5c:9e:b2:01:59:01:d3:5f:b8:9f:ae:66:bc:94:
         c4:6c:4d:07:62:7c:71:1b:dd:79:9a:b7:c6:c8:b4:c6:ae:dc:
         7f:a9:ff:18:16:d1:82:cf:b4:de:2c:ba:37:7a:2c:3b:c1:5b:
         e6:14:2d:61:0c:57:e4:48:56:87:f1:49:89:0a:45:ee:05:66:
         b5:ba:13:67:ae:81:95:ed:01:3e:2d:c4:f1:34:37:70:91:df:
         63:e5:c7:5f:4a:37:ab:73:17:c1:f0:f2:6a:46:f6:ef:1d:e4:
         bf:10:67:cb:8a:29:0f:e5:bc:74:b7:ec:90:18:1c:25:7c:3d:
         0b:da:fd:a1:fb:50:c1:c4:45:2d:2a:7a:d1:ae:17:06:4d:06:
         a0:1c:6d:be:31:63:cc:d3:35:dc:96:1c:3d:da:32:3f:a2:2d:
         30:31:05:06:30:fb:92:31:91:08:06:52:26:03:94:67:ec:a2:
         41:4f:ec:7e:e3:58:76:42:a7:01:f4:5a:f7:f7:96:79:31:5a:
         18:4a:48:09:87:ff:70:31:e8:33:f7:2a:01:42:1c:36:6c:72:
         40:0c:cb:c0:1a:1e:4b:5f:96:1e:d8:e6:75:6c:f3:b4:58:8b:
         6f:ea:48:08:ad:61:16:22:c6:d0:4f:67:93:1f:bd:ab:b6:17:
         5b:d6:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:33 2025 by rpki-client