Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
File:                     C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json)
Hash identifier:          49QLR7dCmyZORYXIVJtQwux2MDJB3lr5Xz7JM87ZwVA=
Subject key identifier:   47:DF:B0:DB:0A:B7:C3:B7:05:44:96:1D:24:08:FB:B8:CD:4B:11:91
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       1B07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
Manifest number:          1AEE
Signing time:             Sun 02 Nov 2025 16:18:46 +0000
Manifest this update:     Sun 02 Nov 2025 16:18:45 +0000
Manifest next update:     Sun 09 Nov 2025 16:18:45 +0000
Files and hashes:         1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: 6eoUM/QyJ9ahaUTFiaJ+p2Lc7bubJ2yDfDLvwO0ExZk=)
                          2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=)
                          3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=)
                          4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6919 (0x1b07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: Nov  2 16:18:45 2025 GMT
            Not After : Nov  9 16:18:45 2025 GMT
        Subject: CN=69078466-e03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:49:82:5d:0b:0e:0f:28:ce:ff:be:30:cd:
                    fc:3d:23:c0:34:a5:8d:3d:9c:40:9d:71:e9:3c:2a:
                    dd:df:22:e8:9c:23:36:34:dd:f4:29:f8:21:b6:73:
                    06:03:4d:28:d6:fd:d4:08:5f:66:75:a0:08:dc:6e:
                    b0:bd:43:12:bb:92:76:e7:fb:d7:52:e2:3a:ce:84:
                    da:a9:b4:f8:91:f9:7e:18:f3:4e:27:2c:ac:fe:aa:
                    53:e2:82:d6:d5:b9:e0:86:fe:d9:53:75:ef:21:25:
                    00:d3:d8:7b:0d:cc:2c:ad:b6:07:d2:fe:0c:9e:fb:
                    18:55:b5:e4:7c:55:b1:21:99:2b:90:28:d5:f2:60:
                    20:a2:60:22:50:82:2c:53:f4:85:f3:59:b1:60:2c:
                    42:48:18:8c:40:dc:cf:e5:71:cb:d4:67:7d:77:9d:
                    ca:ed:9c:06:54:94:23:3a:3f:25:7e:bd:35:47:96:
                    1e:3b:83:97:90:88:f0:6d:58:c8:49:3b:4f:ca:87:
                    ec:9b:9a:62:b6:b7:a0:18:c1:34:ea:f2:2e:b0:7e:
                    1e:ac:e2:41:e4:98:e5:6a:04:97:25:e5:50:a8:12:
                    4e:11:83:7d:1a:bc:e8:4b:c7:ee:a7:0f:ad:2e:34:
                    f7:d2:80:38:12:f5:c0:5e:86:ad:89:3a:f1:53:a3:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DF:B0:DB:0A:B7:C3:B7:05:44:96:1D:24:08:FB:B8:CD:4B:11:91
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:da:71:d2:09:66:cc:87:a3:69:d4:72:42:b2:52:b3:f5:
         84:0e:f6:b2:35:42:aa:73:93:a4:51:08:0e:e9:c1:c0:c6:e5:
         f7:48:40:5d:5b:35:37:dc:0a:ef:31:65:fa:5a:22:68:ac:f7:
         92:0f:e6:7f:cc:7b:85:c3:ec:44:1c:83:c9:ed:17:fe:c2:6b:
         ff:1d:8c:44:e8:f3:d8:3b:30:3a:b3:fe:23:c4:f3:ef:3d:45:
         61:f1:36:94:e4:a8:3d:57:60:dc:5a:a4:f4:80:70:9d:ec:38:
         ce:ac:b9:ab:4c:2b:d0:74:8e:32:a5:f1:e9:7c:e8:25:36:e2:
         cb:6a:1f:84:43:dc:f4:cf:80:9c:fc:19:f7:3f:f4:09:ba:1e:
         35:d9:a0:87:d1:b0:7a:17:92:fd:c1:bb:9f:dc:1f:c6:15:63:
         c2:63:12:c6:96:f5:c0:5b:b3:df:1b:09:aa:a6:22:c7:69:8f:
         41:6a:5d:48:55:2e:68:24:dd:76:99:d2:c6:23:42:a4:68:ae:
         be:58:6f:db:27:6a:24:aa:a8:c5:a8:66:f2:6d:67:f9:c3:77:
         c0:be:dc:86:9e:f7:d3:6e:ec:d6:dc:40:3d:c7:cd:47:cf:8f:
         3a:c0:a2:3d:19:78:12:2a:5c:73:c1:b5:ac:5d:04:ea:1e:19:
         ce:b1:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:18 2025 by rpki-client