Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          FhxixAxMgr0BPh9jUjJ0TgV7NI41JNIBx7pucdMtmNQ=
Subject key identifier:   FB:6C:4D:83:4B:2D:E4:B1:86:3B:AE:08:FC:82:A6:A7:82:DD:E5:53
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0D55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0D4E
Signing time:             Thu 18 Sep 2025 18:11:08 +0000
Manifest this update:     Thu 18 Sep 2025 18:11:08 +0000
Manifest next update:     Thu 25 Sep 2025 18:11:08 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: JCo8xrR41FswLTPSte5DwDJlPJpkbmm4zOf3LXtF4JU=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: XXgLxgibvmpDaf+Wjs0zicx0P8XILsfLy/xTdFUHtdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3413 (0xd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Sep 18 18:11:08 2025 GMT
            Not After : Sep 25 18:11:08 2025 GMT
        Subject: CN=68cc4b3c-aa90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:a3:eb:a2:80:2b:db:ed:d4:c5:fc:93:7d:
                    e9:a4:48:af:2c:f7:80:fc:0b:21:e2:49:18:1b:75:
                    36:d4:98:80:ed:f4:8a:4b:69:03:8a:e4:7a:25:10:
                    c8:d1:97:0b:03:92:73:46:f1:77:bb:3d:13:2a:a3:
                    c4:60:d5:11:f0:b3:a4:0e:b7:bc:5d:7a:42:56:fc:
                    2a:88:a3:31:2e:1a:79:55:d4:0c:56:7f:d3:6e:19:
                    f2:37:ae:35:85:72:8d:ba:03:00:f2:da:14:f1:5b:
                    28:42:f3:09:ad:18:f5:5c:bb:6a:74:9f:5c:28:6e:
                    8d:7a:c9:fc:25:26:de:d7:c9:d8:b3:fd:32:9a:1b:
                    bf:a9:2b:c6:a3:0d:72:93:59:28:1c:60:0c:06:4b:
                    4b:2d:93:c2:d6:65:c2:99:d2:54:0c:59:ec:d7:b2:
                    25:39:62:fd:c3:a0:af:29:11:fd:48:56:8b:23:cb:
                    de:99:32:a2:fb:35:3f:c1:06:e2:6e:04:c0:1d:9e:
                    67:5b:04:5c:79:27:ff:c0:77:dd:c0:49:39:20:a9:
                    27:09:fb:1f:c8:48:ec:34:b7:40:5d:17:79:17:64:
                    34:87:3d:74:81:89:29:dc:8b:2a:c1:7b:8f:1e:d8:
                    bc:06:fc:99:24:c9:47:6c:d5:35:1d:4f:f3:a0:65:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:4D:83:4B:2D:E4:B1:86:3B:AE:08:FC:82:A6:A7:82:DD:E5:53
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:14:95:01:1d:0e:fb:6f:c2:34:71:49:31:34:cf:bb:9a:52:
         76:40:32:18:09:bb:ad:04:44:6d:83:52:00:dd:21:a1:5c:0f:
         a7:47:5b:fa:75:79:53:8c:7b:ad:68:9d:e2:14:98:76:79:aa:
         6d:ed:04:be:25:6e:cb:87:f0:5d:98:2d:2e:b8:fc:70:c1:09:
         1f:07:7b:d5:9a:89:96:e1:25:64:bb:78:db:42:d1:13:c9:ea:
         1e:c2:80:be:ab:71:06:33:d4:14:cc:68:b4:ac:00:58:89:37:
         91:f0:80:58:69:dd:ad:38:6f:bf:fd:38:1f:b5:51:80:e9:90:
         aa:a8:a7:dd:2d:82:10:9f:d7:32:9a:f8:c2:42:8e:93:ec:ed:
         3e:44:ab:41:18:dd:d5:e9:26:ca:57:b6:2b:da:89:ca:b9:3c:
         5e:f1:e2:58:3e:2d:bc:28:7b:75:55:e1:2f:75:d6:4c:98:61:
         0d:a0:92:48:46:49:3c:d4:ee:53:2b:e7:42:bd:07:59:7a:83:
         84:ac:bd:af:ce:b1:e3:87:f1:9c:92:cc:4b:8b:00:71:e8:72:
         fa:01:be:ae:11:40:fb:4b:c5:d3:0c:84:00:d7:4b:34:f2:6e:
         63:b9:2b:78:ab:8c:c7:c7:fe:84:89:66:85:c4:8a:04:c3:87:
         09:6a:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:24:15 2025 by rpki-client