Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File:                     72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier:          zLRE/Pm5QecUXzRUHhqBAu2k/WhOkkqcBCCVp9bmjlM=
Subject key identifier:   D4:15:39:C2:C3:EC:53:B1:06:B3:EF:87:DB:ED:25:E7:0D:B0:A9:CE
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       12DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number:          12B6
Signing time:             Thu 30 Oct 2025 17:03:54 +0000
Manifest this update:     Thu 30 Oct 2025 17:03:54 +0000
Manifest next update:     Thu 06 Nov 2025 17:03:54 +0000
Files and hashes:         1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: smAU30FySmAddcrDm1Hes7Vshjt7P9/5Hhdsy+8kbug=)
                          2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=)
                          3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=)
                          4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=)
                          5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 17:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4827 (0x12db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: Oct 30 17:03:54 2025 GMT
            Not After : Nov  6 17:03:54 2025 GMT
        Subject: CN=69039a7a-0ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:4b:77:6e:7f:1c:11:c6:22:2b:b7:cb:f4:
                    6a:0b:00:52:f7:7c:8c:3f:76:20:e0:1e:32:17:36:
                    91:26:69:84:9d:72:12:1a:1b:30:8c:0f:d6:b5:d9:
                    99:59:a4:60:7b:8e:ca:68:4b:ed:98:0f:75:3a:3f:
                    b8:46:92:d7:e5:45:79:d8:1f:63:3e:fc:b4:29:55:
                    3f:2e:0b:72:80:96:2c:62:25:b2:32:2b:e8:dc:3d:
                    1c:2b:87:88:69:78:ab:d2:a7:37:65:45:d9:a8:a1:
                    b0:b3:3f:b4:92:8b:f3:2f:e5:52:30:61:ce:b1:12:
                    16:db:d7:b6:f7:47:ac:62:10:f6:c0:05:88:7d:66:
                    69:d6:22:77:d7:f3:81:51:7a:66:dd:f2:3a:28:b8:
                    c3:c5:63:15:82:80:84:38:a8:00:61:1c:d9:ee:61:
                    cc:7b:ec:c7:f3:9f:25:79:70:cb:b2:1d:6c:21:18:
                    78:15:8d:02:cf:45:83:f4:f4:26:92:ce:64:49:c4:
                    e4:28:1e:a9:71:35:18:19:f5:d5:c6:bc:d2:a9:e6:
                    ad:42:be:a1:85:76:f0:a2:72:59:0e:31:ba:4a:ac:
                    be:ba:9c:cd:73:8d:30:3e:08:81:f5:e4:25:e8:68:
                    6d:7b:cf:50:ce:c1:55:7d:56:16:68:e5:5e:0f:f1:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:39:C2:C3:EC:53:B1:06:B3:EF:87:DB:ED:25:E7:0D:B0:A9:CE
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:b9:d5:66:e1:31:56:9d:6e:8f:99:a8:46:6f:87:af:a2:
         e6:b9:c9:2d:b6:40:19:6e:e3:f3:96:d6:b5:69:88:67:fc:32:
         a7:1a:5d:0d:1a:4a:f5:83:cc:f3:6e:97:e3:e0:05:fc:42:13:
         a9:6a:95:70:8c:20:76:7e:a6:30:53:c3:2a:84:09:0d:67:ff:
         7d:57:5f:a4:8d:a2:0d:e4:67:e5:a8:e5:c6:70:b1:8b:27:e8:
         ba:bd:b3:3c:08:04:c4:c0:0a:e6:1c:ce:b9:c0:99:70:eb:f8:
         eb:d5:64:46:32:5f:a7:29:6b:a5:8f:5d:0e:40:44:d7:f1:3a:
         55:40:91:db:ff:bf:4f:05:b7:9f:59:18:0a:7f:9a:98:7d:c4:
         5c:71:a9:94:00:87:17:dc:44:f7:68:f2:dc:80:a1:f9:ec:e6:
         12:86:2a:85:3d:5c:33:df:ee:30:3c:d5:a9:39:b9:43:fc:16:
         fe:25:f6:e0:c7:dc:d4:48:60:85:37:cd:66:88:8e:c8:56:2f:
         da:22:cc:2c:9a:82:1e:52:93:f4:60:c1:9b:2e:c1:9b:57:76:
         b6:45:de:8a:db:13:85:76:12:67:38:3c:d1:17:e7:63:90:f2:
         1b:c1:f2:5d:02:f0:c3:3f:3c:1e:66:bc:6b:ad:44:77:53:51:
         1a:1b:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:47:20 2025 by rpki-client