Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
File:                     s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft (raw, json)
Hash identifier:          yOj5St+PslcF2d/JYWINLpf0FQnuYGKq1brQ5JiSvm8=
Subject key identifier:   67:53:81:FE:02:58:07:EB:E7:9D:8B:09:6F:D9:2C:B6:D3:DA:1C:43
Authority key identifier: B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33
Certificate issuer:       /CN=A91A05BF/serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
Manifest number:          06
Signing time:             Mon 03 Nov 2025 08:03:29 +0000
Manifest this update:     Mon 03 Nov 2025 08:03:29 +0000
Manifest next update:     Mon 10 Nov 2025 08:03:29 +0000
Files and hashes:         1: s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl (hash: faHkg1Hx9p7t+voItX40LpBHwAtvu1jBGU0l0AcP8XM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl
                          rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 08:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05BF, serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33
        Validity
            Not Before: Nov  3 08:03:29 2025 GMT
            Not After : Nov 10 08:03:29 2025 GMT
        Subject: CN=690861d1-5097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:fe:09:02:5e:e5:b9:46:69:c7:17:c2:f6:
                    9e:db:c2:37:9f:ef:97:54:f6:4d:01:81:02:6a:d5:
                    83:0a:f4:d3:c3:6a:6a:97:74:03:7e:43:76:e7:b9:
                    1c:50:3f:30:ce:8a:db:4c:a9:5d:30:ae:af:40:cb:
                    2a:8e:6c:aa:80:6e:6f:41:9b:77:4a:88:0b:9a:21:
                    36:06:45:68:e8:d5:59:b2:66:02:91:34:14:78:40:
                    68:d9:a9:59:30:55:ad:f3:f8:8f:26:69:1f:81:08:
                    05:1c:0a:3f:77:4a:fa:77:ef:72:b4:7a:dc:45:19:
                    5a:76:2d:ff:34:64:b1:db:36:cd:b8:9b:56:e6:ea:
                    af:6c:ad:4d:78:3c:e1:ed:5c:68:50:ff:5e:48:e4:
                    ff:da:dc:a5:8d:c4:15:cc:fe:06:59:75:19:ae:47:
                    53:d9:40:3b:90:6a:1d:64:be:21:c2:5d:1a:74:d2:
                    16:1a:78:9f:df:fa:0f:e5:96:fa:49:1b:a4:fc:6d:
                    4e:8a:00:27:c6:56:e9:df:b5:97:0e:b7:72:34:c8:
                    86:c1:7e:da:c8:9d:36:c7:a5:db:41:6c:f4:8a:6b:
                    15:29:47:5c:e5:f9:d8:57:3c:b0:56:59:c8:a4:a1:
                    ca:e4:db:10:7b:d5:34:f9:b3:e5:f9:19:97:27:19:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:81:FE:02:58:07:EB:E7:9D:8B:09:6F:D9:2C:B6:D3:DA:1C:43
            X509v3 Authority Key Identifier:
                keyid:B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2e:82:90:66:ae:20:5c:be:ff:63:4d:55:70:7c:d7:3e:6c:
         e2:92:58:8d:fb:32:3a:ee:d1:da:46:ed:9f:cb:ea:e3:3a:b8:
         22:9d:6d:52:ab:fc:7d:4c:77:f8:03:d4:ee:c7:ea:45:79:f7:
         be:6a:ce:7f:95:45:e7:1f:d7:2b:55:8b:5b:01:ed:62:77:d8:
         75:96:65:61:7b:25:39:40:36:e7:07:f6:a9:eb:8b:10:d3:da:
         0a:60:af:cc:d3:84:ea:96:8d:a0:cd:8d:e5:11:3d:d6:73:90:
         05:80:56:1a:c4:81:ae:e7:44:19:28:f4:69:9b:3f:fc:8f:f6:
         7f:99:c1:7a:74:ba:03:1d:99:bd:e8:26:01:bb:8c:91:5a:40:
         7f:86:d3:90:da:ed:f3:c9:d3:f8:73:58:10:87:38:ca:80:93:
         c8:47:75:f0:96:92:2b:f1:4b:ae:20:0a:fa:f2:a4:db:e9:b3:
         cb:e6:c9:3f:b3:2a:8e:5d:6d:7d:29:45:55:ec:ba:2c:27:d3:
         4e:b3:89:e6:a4:92:3b:7d:40:18:0b:a8:94:c5:c6:ec:9d:60:
         50:36:07:24:4d:98:71:03:0f:f6:70:c4:c9:ed:49:e1:09:fb:
         30:66:53:5c:0f:46:d4:84:cb:20:da:45:8b:c7:44:d7:b5:40:
         22:41:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:55 2025 by rpki-client