Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File:                     XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier:          1W6d+vi0wNO13ZerU5Mc2VmGdIbbKd517y9hY3JhC2E=
Subject key identifier:   DE:9D:03:55:C3:EE:FA:71:3F:84:DA:FB:43:47:0A:5C:EF:99:EF:8E
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer:       /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number:          01C6
Signing time:             Thu 23 Oct 2025 04:32:21 +0000
Manifest this update:     Thu 23 Oct 2025 04:32:20 +0000
Manifest next update:     Thu 30 Oct 2025 04:32:20 +0000
Files and hashes:         1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: Ue2F8W64JtqaWS/1Fhgyogz4lpwZpRoBtFGrK4GEYws=)
                          2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: SO9SbWUjXyJ9Yb5w7Q+6mTlLwT6ktJsJ2PGUdf4nf50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 04:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
        Validity
            Not Before: Oct 23 04:32:20 2025 GMT
            Not After : Oct 30 04:32:20 2025 GMT
        Subject: CN=68f9afd4-7c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:ee:dc:51:10:91:32:41:d6:0f:ff:88:95:
                    13:fe:5a:7b:a4:62:51:64:97:db:b6:c2:35:f4:fc:
                    90:66:8f:9a:56:02:2d:c0:1a:4c:57:d8:8a:14:93:
                    2b:5e:e9:42:0e:b1:22:6d:27:61:90:8c:b6:e8:e3:
                    5b:11:29:98:f0:33:5b:53:b2:d2:2b:8a:de:8a:dd:
                    1f:99:5a:8e:13:56:65:dd:48:67:2a:b6:86:3c:86:
                    bc:8f:38:58:52:17:1d:af:bf:bf:99:5f:a6:c2:d2:
                    2a:30:dc:b5:2a:75:4b:b5:b3:7d:b1:58:63:fc:ee:
                    14:76:f2:45:4d:9c:5c:2b:d9:dd:d4:3e:99:f6:a0:
                    50:68:a3:08:a9:e8:e8:dc:01:30:2b:5f:27:8e:46:
                    30:a8:38:60:3f:71:86:e4:f4:04:b7:0d:27:c9:e1:
                    b6:9f:ed:ab:95:b8:96:3d:6b:aa:77:38:5e:e0:de:
                    0d:85:80:f5:84:69:66:f2:33:4b:b6:d4:17:37:8d:
                    83:61:f6:79:0e:2d:f0:e1:b1:08:31:05:d3:57:7e:
                    04:3a:67:a6:bd:e9:f3:eb:71:fb:6b:e1:5a:27:eb:
                    11:b2:60:1c:ab:24:b8:b0:05:c7:f5:92:06:51:8a:
                    49:ec:52:5a:0c:f9:3c:7e:e1:1b:e0:65:37:a5:26:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:03:55:C3:EE:FA:71:3F:84:DA:FB:43:47:0A:5C:EF:99:EF:8E
            X509v3 Authority Key Identifier:
                keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:27:43:75:19:e0:bf:c0:e5:b0:48:b9:62:f7:90:21:9c:ab:
         ff:7c:cb:b7:f4:ff:12:07:a1:6b:49:98:b0:4c:4c:5c:cf:ca:
         b7:d2:1a:2c:56:e7:ce:51:be:d6:f2:f5:7e:26:73:07:f6:df:
         32:bb:2d:28:bd:2d:60:95:b1:1c:ac:4d:07:7c:be:6b:56:f1:
         91:41:0e:de:bd:96:20:ea:1b:46:4a:f6:0d:af:27:16:3c:75:
         0e:df:e0:9b:66:a2:e6:26:7b:b9:72:fa:8b:8f:92:78:a2:19:
         64:9d:f1:01:be:8c:5c:52:6b:66:a7:d9:07:76:20:bc:cd:0b:
         71:b6:3b:f5:a2:d3:3f:b1:7c:b9:7b:32:f0:93:c9:40:6f:73:
         30:9d:34:00:fb:20:5c:b0:cf:00:76:86:b4:57:a2:b1:68:3b:
         b8:bb:15:5c:d1:1f:df:51:9d:aa:50:ca:1d:bd:35:8e:5c:9b:
         71:00:fc:b8:83:3c:af:51:0c:33:d5:3a:78:2a:69:39:d5:f6:
         d1:29:15:70:01:a3:51:4f:92:d3:5a:10:44:79:ce:89:cf:04:
         52:85:9d:18:28:a4:b6:3d:1b:8a:a3:5d:ae:26:ed:ba:fa:ea:
         e2:7e:1c:a8:09:8f:3c:33:62:8b:2f:5b:ef:23:13:32:8f:5e:
         20:6e:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:51 2025 by rpki-client