Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File:                     6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier:          EC+Lp3ICdyR5NzdsZQkOTqEW/xcvHpUKSeeCjjDzvWA=
Subject key identifier:   DA:A0:B1:B4:78:45:F6:1C:FF:6C:4A:20:C8:B1:F6:A4:95:7E:CE:19
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer:       /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number:          0239
Signing time:             Mon 03 Nov 2025 01:49:05 +0000
Manifest this update:     Mon 03 Nov 2025 01:49:05 +0000
Manifest next update:     Mon 10 Nov 2025 01:49:05 +0000
Files and hashes:         1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: 6Od5WpCqsuyX96+xN7S182Ox1sAR4zc6Y9qZIejosU4=)
                          2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: JPPg4axF52fUr6Imwg/bjNt0uzHT0+P65yVOXCd9Qfg=)
                          3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
        Validity
            Not Before: Nov  3 01:49:05 2025 GMT
            Not After : Nov 10 01:49:05 2025 GMT
        Subject: CN=69080a11-3311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:6a:0f:b4:14:84:90:1d:81:52:fc:13:f2:
                    78:8e:ca:21:75:9a:73:07:9d:8c:b5:59:61:25:cf:
                    26:8a:9b:c2:ec:4a:0c:78:9c:94:c4:82:3d:74:5a:
                    87:9f:4f:9a:88:93:da:81:c0:38:98:d7:8e:e7:29:
                    a4:c5:cd:73:e9:84:10:04:da:b2:71:c8:34:72:e6:
                    a9:76:8b:65:25:93:05:4d:33:41:b8:47:0b:da:79:
                    00:68:bf:b8:f0:47:76:5c:53:25:12:a4:d8:5b:f5:
                    44:a5:dd:a3:75:1c:55:80:6e:02:83:bd:8f:08:2e:
                    28:3c:a4:42:e8:2e:b3:60:c4:6a:90:d3:55:87:cf:
                    0d:6a:f5:ce:30:da:f3:4d:1e:1d:b1:a9:b7:07:28:
                    94:d5:69:7f:62:7e:f1:e6:7f:a7:0c:41:93:ab:5c:
                    ae:0c:b4:04:e0:33:93:a6:eb:2e:26:13:5c:a5:5e:
                    de:8c:ad:a8:77:b3:57:5b:19:8e:68:d4:71:93:f8:
                    60:a4:8c:09:ba:6c:ed:c3:15:d2:a8:a2:f1:83:cf:
                    d6:79:b5:ee:77:a7:d5:bd:34:eb:c5:24:c4:3c:49:
                    03:99:23:8a:73:52:31:f5:5c:38:1b:10:41:76:42:
                    5b:41:60:45:d6:71:7d:98:56:a5:3a:66:11:3f:ad:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:B1:B4:78:45:F6:1C:FF:6C:4A:20:C8:B1:F6:A4:95:7E:CE:19
            X509v3 Authority Key Identifier:
                keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:34:c2:d1:e1:d7:c0:c7:a8:22:30:15:50:21:a8:02:82:f3:
         b5:a3:1f:06:c6:89:61:73:0a:ca:af:ab:f4:50:95:7c:26:15:
         c7:98:ad:4e:ca:e0:f0:81:0c:e3:4c:bd:0d:2e:0d:9a:a6:8e:
         23:7d:06:fd:e8:40:fc:cf:15:10:eb:c2:2d:c1:6b:5c:ea:41:
         0c:06:d6:cc:d2:ee:9c:82:d3:be:c1:ec:ed:1d:e2:6e:7b:a7:
         17:50:72:87:32:4f:ad:88:b9:d9:ef:bb:d6:30:b6:9a:5f:1e:
         27:b5:7f:2b:28:41:f4:59:20:85:af:2e:fe:68:c2:10:92:cb:
         e4:10:d4:e9:88:08:5d:25:f6:cb:47:5d:8f:7d:1b:1e:1e:b2:
         13:49:30:59:a0:2b:07:87:b8:ed:e0:36:36:01:3c:1f:15:08:
         8b:78:4b:21:15:ba:e8:75:2d:63:ac:d1:ee:14:e4:2b:4c:15:
         c3:a3:32:ff:2c:11:bd:64:c9:73:78:85:53:95:c4:59:b1:7c:
         9a:59:b6:05:8c:f0:06:61:0f:7b:34:10:66:2f:15:3f:4e:20:
         dd:2b:fd:0a:64:e3:a4:af:5b:23:7c:44:6a:1f:86:18:b1:0d:
         83:7d:ef:3d:aa:d8:ea:bd:17:db:c0:ef:8b:d6:41:7f:85:27:
         bc:35:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:13 2025 by rpki-client