Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
File:                     -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json)
Hash identifier:          HM3jlvLX+Z41m74eeE8O3djb01NvLf/5cWFrYEI+hjA=
Subject key identifier:   34:BA:96:0D:7F:7C:5C:7F:38:A9:4F:10:7B:D0:0F:C5:81:3E:FB:35
Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
Certificate issuer:       /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
Manifest number:          0859
Signing time:             Sun 02 Nov 2025 20:39:54 +0000
Manifest this update:     Sun 02 Nov 2025 20:39:54 +0000
Manifest next update:     Sun 09 Nov 2025 20:39:54 +0000
Files and hashes:         1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: KctaBVBZkESUerMSQ3RAHBwBgcwovz/dRNB5/yUvwUY=)
                          2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
                          rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
        Validity
            Not Before: Nov  2 20:39:54 2025 GMT
            Not After : Nov  9 20:39:54 2025 GMT
        Subject: CN=6907c19a-294a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:d5:9c:1d:47:82:6e:bd:68:ff:55:da:0e:
                    b9:d3:94:1c:a8:56:b9:46:b0:0b:65:47:37:c4:a0:
                    a6:07:85:2d:90:cf:a7:a9:4b:13:b7:ce:5b:74:ac:
                    06:fc:1a:83:d6:3f:cd:62:5a:dc:2d:bb:e1:11:e5:
                    25:76:f6:6c:24:e8:09:9a:2e:b3:fc:5c:cd:e3:22:
                    59:b8:c4:57:7c:66:60:ed:75:11:22:2c:9d:a3:42:
                    ca:e7:a6:28:2b:78:35:50:3e:d6:a4:9f:97:fc:c9:
                    00:bc:f9:8c:7b:03:1c:57:fe:79:f0:76:a3:8e:d1:
                    2b:75:4e:ff:a3:99:27:35:b9:59:3f:0a:73:d0:9d:
                    19:74:f6:4c:ff:88:3e:38:f7:9c:7e:69:e2:dc:80:
                    df:43:92:e7:6c:60:aa:bb:41:9c:de:f1:8f:d7:41:
                    05:f7:13:35:eb:1a:8f:bd:01:de:aa:25:86:8c:eb:
                    2c:3e:63:f2:a6:01:00:6f:a5:4f:21:c9:60:6a:ba:
                    14:3a:51:d4:e9:e0:66:6d:21:bf:c5:68:96:94:08:
                    fc:5c:48:e7:fd:4a:90:92:a6:e8:b9:be:c6:53:d5:
                    7e:99:c7:3d:d9:0a:04:4e:0e:39:8a:ad:1e:df:9d:
                    b6:39:94:66:c7:ab:61:8a:cd:47:06:d8:a7:26:9e:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:96:0D:7F:7C:5C:7F:38:A9:4F:10:7B:D0:0F:C5:81:3E:FB:35
            X509v3 Authority Key Identifier:
                keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:94:de:ef:8f:2b:e2:71:41:94:a1:ff:fb:98:1c:1d:21:a8:
         96:1d:a4:9a:25:26:9a:2b:47:88:30:41:5f:0b:67:e6:20:04:
         44:80:d9:7a:93:84:49:dd:c2:83:b6:54:9b:59:97:25:6e:be:
         a1:12:d7:a4:7d:c1:6f:1b:44:78:07:69:b8:fd:7a:97:f9:1e:
         39:f6:5a:ae:1e:3b:07:c4:bc:17:41:2f:a5:98:1a:fd:24:3b:
         5f:e1:d1:2f:1a:2e:3d:36:37:8c:d1:a7:b8:ab:5e:ab:4f:c4:
         97:bd:7b:29:b0:f6:50:27:97:8d:69:c6:f4:b5:29:cc:09:fb:
         13:a7:a7:61:b9:49:81:99:e9:72:83:2a:73:8c:ba:24:5c:c7:
         ea:85:d2:f8:59:47:43:da:9a:00:5e:05:8f:2f:f7:0c:06:69:
         fd:5b:87:9c:5c:b0:8a:62:c4:b3:d5:c9:c8:23:30:f8:a6:cd:
         09:eb:44:be:da:c4:95:8e:5e:67:74:ce:7c:d9:ac:4b:8a:a0:
         4f:6d:8c:62:6b:de:70:7d:5a:6e:73:80:27:11:45:a7:fd:e9:
         44:23:b4:cc:d5:b9:6c:03:b0:95:df:0e:b6:9c:d5:36:d6:15:
         83:fa:2f:22:61:84:f2:e4:52:cd:8f:3d:79:ec:46:54:9e:52:
         28:18:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:23:35 2025 by rpki-client