Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
File:                     6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json)
Hash identifier:          WbAxpNyypYwfaoJU7jmMrMWEEsjzhD0xqEIz6ppUs6Y=
Subject key identifier:   8A:EE:79:29:5E:E1:3C:C4:AB:8C:C7:97:AD:6D:DD:05:00:E4:B4:DF
Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Certificate issuer:       /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
Manifest number:          01BA
Signing time:             Sat 25 Oct 2025 06:23:56 +0000
Manifest this update:     Sat 25 Oct 2025 06:23:55 +0000
Manifest next update:     Sat 01 Nov 2025 06:23:55 +0000
Files and hashes:         1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: y4QyOsNt3Gt6MC6ZTyLfASzyZCoANLLxGfuSHFhOvTU=)
                          2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: MXFdujZ+nAPECH8UBuQy5IelDh540oVpA1herCcQ+54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 06:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
        Validity
            Not Before: Oct 25 06:23:55 2025 GMT
            Not After : Nov  1 06:23:55 2025 GMT
        Subject: CN=68fc6cfb-7537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:4c:c7:02:b5:2e:32:54:d4:90:65:c1:36:
                    76:6a:d4:5e:8b:ff:a4:28:2d:3b:c9:bb:ae:f3:15:
                    cc:eb:0e:de:8a:ea:e9:9b:e7:74:72:16:5e:db:c3:
                    d1:50:21:b4:40:0c:97:3f:2e:f9:69:07:53:fc:a2:
                    2e:b1:80:d6:9b:f8:e4:d4:69:9a:c2:d9:21:3d:2e:
                    fc:28:47:68:b0:ab:1c:86:0b:30:95:ba:8d:ea:e1:
                    c9:e7:4b:ab:f2:92:17:6f:05:c7:d7:e2:1f:d3:9c:
                    4a:cb:f7:0f:32:69:5f:b2:8f:7a:a3:5b:e7:d0:4d:
                    17:7b:03:7d:79:f3:13:df:c5:1e:cc:c0:b3:2b:72:
                    05:28:3a:a1:ec:2a:1e:94:0b:73:ac:e2:44:21:6f:
                    79:ae:41:fd:eb:a0:21:22:8d:d0:8d:70:fb:f9:38:
                    81:2c:ca:28:39:16:ed:be:0b:08:0f:8a:4d:f6:b8:
                    28:48:50:28:a5:98:98:66:c7:7e:ef:4c:e4:32:8a:
                    36:c3:b6:8a:43:c4:4a:67:80:7f:c0:59:68:1f:c2:
                    17:0c:50:6b:cf:d0:3d:43:c5:da:77:5b:3b:6b:40:
                    b4:b4:44:ae:16:05:cd:21:0e:e3:9a:de:df:91:85:
                    06:2b:a7:51:85:fd:96:71:f6:84:a9:ea:1a:85:d6:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:79:29:5E:E1:3C:C4:AB:8C:C7:97:AD:6D:DD:05:00:E4:B4:DF
            X509v3 Authority Key Identifier:
                keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:f5:33:17:6a:20:3d:6a:05:64:98:53:59:d6:d7:73:63:
         e7:25:58:ee:4e:c6:d1:40:43:6f:4a:06:15:c7:68:f9:46:7e:
         3f:3a:a4:c2:41:45:54:4e:5a:a6:65:80:a5:3a:e4:2a:58:88:
         04:1a:2e:a4:ca:f8:86:60:11:0e:01:35:0d:38:92:4a:9d:3c:
         97:f2:59:41:97:f6:ce:9e:c8:0c:3b:28:2d:2d:e8:9a:45:fe:
         06:82:5f:c6:f5:ab:ad:4e:b6:1c:80:78:7b:8a:74:24:d0:a2:
         e4:5c:f6:cb:58:83:05:be:81:f2:b6:69:96:90:b7:9d:17:3f:
         a4:85:5a:e1:c9:75:93:cf:39:8a:4e:91:80:e3:94:0a:0f:70:
         c7:41:82:52:51:88:07:70:cc:3a:fd:8e:45:49:a0:bc:12:0d:
         53:f3:9f:83:e2:b9:8b:f7:80:a8:52:a6:cc:53:c7:a3:88:b8:
         32:e0:37:fc:df:0b:f0:c3:81:a4:7e:bb:f2:11:28:c7:bb:aa:
         36:57:45:8b:1f:fc:95:6d:55:74:65:5d:5f:0d:5a:dd:0f:a6:
         55:7c:1d:fc:27:16:37:9c:24:73:ca:a8:7b:86:c1:94:ea:1c:
         be:fc:b1:e1:1c:25:c1:ac:81:31:ca:81:25:5f:95:ac:a4:d9:
         1b:12:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:42:26 2025 by rpki-client