Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File:                     ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier:          bTmnXByzLg6J9Sbe7tpMx3UsSZbwtnnebi4pdHuBBy0=
Subject key identifier:   A7:01:F0:8A:A7:48:44:04:16:8F:C9:99:FD:A8:A2:94:93:2A:A0:AE
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer:       /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial:       07AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number:          07A4
Signing time:             Tue 04 Nov 2025 21:31:23 +0000
Manifest this update:     Tue 04 Nov 2025 21:31:22 +0000
Manifest next update:     Tue 11 Nov 2025 21:31:22 +0000
Files and hashes:         1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: ZGTlXXE1wKh6Uw+iplKqPod1/rRjOEhgOhIk3P362e4=)
                          2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: ST/Rl9xKmY8tlX8GinkPsHXgmmClbDe8hWqTijwIMqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87, serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
        Validity
            Not Before: Nov  4 21:31:22 2025 GMT
            Not After : Nov 11 21:31:22 2025 GMT
        Subject: CN=690a70aa-05ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:0e:52:a0:c0:ed:13:7e:f1:de:e7:00:f3:
                    cc:a6:9d:fb:6c:37:82:fb:29:d3:28:0c:13:d2:43:
                    00:af:72:3b:07:5c:05:c8:b1:e4:43:b1:a1:c2:91:
                    f8:12:89:9f:dd:59:f5:42:2e:ba:03:7f:d4:36:ab:
                    6c:eb:0f:51:63:72:75:ca:66:73:c9:e6:96:51:2b:
                    fc:58:40:4e:5b:4b:32:95:a5:f2:fc:9d:dd:67:dc:
                    95:4f:48:11:aa:64:c9:c0:87:86:a4:e4:73:fc:41:
                    76:83:e7:fa:87:6f:4d:4b:c2:0e:a9:83:00:e9:a4:
                    50:0c:f4:56:ea:fc:3f:56:ae:6a:a0:78:3b:83:9f:
                    4a:91:51:b8:0e:e2:f4:87:54:ec:3c:d9:b9:e9:fd:
                    17:1b:5e:12:6e:a4:ea:a9:d0:08:16:aa:56:e4:ae:
                    fa:4e:d1:ae:1b:cd:e3:2d:47:69:96:64:20:af:53:
                    ec:07:a4:48:1f:d9:24:6c:02:ef:08:e0:bf:72:26:
                    e6:39:34:08:8d:c2:14:b5:df:89:91:b3:b8:98:8d:
                    ba:22:0c:34:d1:a8:21:16:c2:9d:1c:5a:7d:5e:0f:
                    1e:c3:7b:61:e2:af:de:2c:35:8f:32:9e:9c:b3:56:
                    7c:eb:c8:9f:48:8c:4f:cb:95:17:4e:a7:6e:37:d7:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:F0:8A:A7:48:44:04:16:8F:C9:99:FD:A8:A2:94:93:2A:A0:AE
            X509v3 Authority Key Identifier:
                keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:d4:80:61:4f:20:b8:37:1d:6c:c0:70:63:5e:8c:e6:df:
         5a:63:e5:3f:4b:89:9d:ab:34:4f:a9:37:a6:15:ba:1d:95:a2:
         f8:40:9a:b3:47:8d:86:f7:20:23:57:0c:95:37:93:47:13:b4:
         e6:9a:21:61:7f:16:4c:03:ba:e6:93:36:99:56:01:c9:fa:49:
         d4:32:33:b9:3e:47:60:ab:30:22:8d:9c:45:e7:1e:d0:11:c4:
         7b:d8:bc:e7:c8:af:8e:25:f1:07:da:0b:85:73:15:aa:c8:c9:
         2e:b4:f5:81:0d:3e:b0:46:a7:85:cc:15:01:9f:d7:42:2d:30:
         f4:1d:46:05:c3:d6:f7:1e:97:6b:a4:75:a7:a4:a2:75:d6:23:
         e3:71:8f:10:d2:f5:d3:4f:fd:c0:f0:01:2e:35:3b:32:fa:2a:
         db:57:b9:2b:5f:04:06:72:78:87:20:c4:b3:73:a9:20:4e:c6:
         dc:cf:eb:1c:29:05:20:d5:e2:f8:dd:e4:65:f4:cb:ba:60:c2:
         2f:49:10:4b:8b:98:68:ba:c8:1a:8a:a9:4c:5b:36:86:1f:7b:
         73:28:fd:47:c0:d8:e3:d8:df:b2:7b:3c:ba:98:23:88:dc:58:
         76:a8:dd:91:85:95:d2:e9:6c:e3:9c:67:07:e3:a2:4b:5a:30:
         21:79:2c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:52:05 2025 by rpki-client