Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
File:                     sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json)
Hash identifier:          AZuwBNqkGK9jluhxL6FDal6jzNfH0+ZjkwVQzZit1UA=
Subject key identifier:   6E:75:8F:42:FA:53:92:94:B7:BD:10:F7:FF:74:D1:CA:B3:98:6D:39
Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Certificate issuer:       /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
Manifest number:          0109
Signing time:             Thu 23 Oct 2025 06:54:26 +0000
Manifest this update:     Thu 23 Oct 2025 06:54:26 +0000
Manifest next update:     Thu 30 Oct 2025 06:54:26 +0000
Files and hashes:         1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: s2fUmXa1g2K/stLWy3vmwFTH3JDY9QteSDUgzzqxry0=)
                          2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: JpA4nCXirPXTeRWZSt2R1IEE7eOI01kXe4irrzUxZv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 06:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
        Validity
            Not Before: Oct 23 06:54:26 2025 GMT
            Not After : Oct 30 06:54:26 2025 GMT
        Subject: CN=68f9d122-57dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:4a:a4:72:fd:73:1f:40:28:84:7d:6c:01:
                    7b:a1:29:21:72:df:22:dd:df:ad:d2:a4:21:e7:e8:
                    6d:f1:80:4a:bf:de:23:a4:26:db:a2:19:d8:09:3e:
                    e7:d4:4b:57:c1:09:02:95:4a:d4:3c:49:58:fd:28:
                    80:57:5a:a9:91:8c:e9:2b:61:ff:fa:90:c6:ec:55:
                    ab:86:15:01:f9:55:2b:b1:55:20:ee:7a:2b:94:9c:
                    c9:33:60:94:b5:81:db:14:ae:5e:2c:5b:77:1d:e5:
                    d1:50:be:dd:e2:07:ca:77:19:ea:e7:36:84:3b:9f:
                    f9:90:fd:87:00:64:8c:66:23:cc:f5:ab:ef:30:d5:
                    78:e5:f8:20:54:79:be:72:a9:03:16:f8:d6:2b:db:
                    70:93:f5:dc:22:eb:82:78:23:d8:f8:14:72:5a:12:
                    2b:e2:a4:11:4c:d5:ac:76:50:1a:34:b3:43:78:65:
                    78:79:98:25:ed:4c:4e:bd:be:d3:16:4b:9e:43:ef:
                    5d:ea:05:98:55:90:3d:e0:e1:d4:d7:5c:d1:25:19:
                    fb:62:71:7c:de:0d:4e:e8:70:24:9e:ad:5d:c8:eb:
                    1a:05:3f:6f:a5:d2:19:fc:b5:1a:44:8d:10:a7:6f:
                    af:9c:6f:fa:53:7d:15:69:9c:d9:5c:5e:ed:86:51:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:75:8F:42:FA:53:92:94:B7:BD:10:F7:FF:74:D1:CA:B3:98:6D:39
            X509v3 Authority Key Identifier:
                keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e1:6e:b7:a7:1f:0b:8a:ce:08:0c:76:8d:4c:ff:8e:10:6d:
         17:07:8d:c3:cd:52:be:05:11:6a:5e:35:98:30:84:ab:99:ce:
         c5:6e:e0:f4:fe:7f:85:d6:0c:67:d8:86:94:4e:05:8b:65:1f:
         3f:e8:86:e4:bf:d5:97:0a:95:8a:fe:38:43:a0:fc:56:95:9f:
         f0:09:52:7c:e3:87:94:19:52:be:12:e3:07:38:1f:70:07:24:
         a2:cc:2e:20:16:84:3b:f0:77:5a:8f:df:77:b7:a0:e8:1c:10:
         38:8a:ca:f0:79:6d:6f:e4:de:f9:85:f3:9b:5a:d7:50:74:e0:
         31:7d:83:5e:50:09:12:63:bd:e6:c8:d2:6e:65:20:00:d6:30:
         37:d7:92:21:09:f6:a6:d5:71:47:2b:70:91:ff:c8:5f:70:4b:
         56:3e:b0:f2:32:d3:94:30:38:cc:b0:9d:50:c7:81:6a:7a:e2:
         cd:fb:6c:b5:04:85:04:02:cb:3e:98:1b:c8:ac:0e:32:a4:d0:
         ea:1c:53:de:3e:3c:b7:e8:6a:56:0a:67:e0:e2:19:57:af:b2:
         30:f0:fd:ca:aa:a2:22:ba:34:51:1e:91:12:e2:c1:a3:0a:c0:
         fb:06:4d:7b:64:73:9c:50:6d:6a:e2:81:15:eb:2f:a9:6a:44:
         81:ce:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 20:36:13 2025 by rpki-client