Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File:                     6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier:          1zco+TCkAvosg56LXs2AXRBGGfjXI9f9+NDqo39Ze0I=
Subject key identifier:   6E:6E:61:09:03:19:0F:76:BC:D2:41:09:79:DF:CE:A7:0F:E4:1A:50
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer:       /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number:          0127
Signing time:             Mon 03 Nov 2025 04:37:58 +0000
Manifest this update:     Mon 03 Nov 2025 04:37:57 +0000
Manifest next update:     Mon 10 Nov 2025 04:37:57 +0000
Files and hashes:         1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: GZiF2HJFW4dgBU4BridZaNf/TUqRIBanogxAF3PgWpg=)
                          2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
                          rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
        Validity
            Not Before: Nov  3 04:37:57 2025 GMT
            Not After : Nov 10 04:37:57 2025 GMT
        Subject: CN=690831a5-d2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:9e:c9:7f:f6:e5:eb:3a:f0:74:e1:72:02:
                    27:76:c3:42:e8:3f:23:cc:59:36:f0:7b:65:b9:1a:
                    b9:6d:ee:da:ba:20:7f:1d:16:d1:c5:33:54:c9:70:
                    bc:d0:b5:e2:a5:07:33:ff:2b:fb:d8:b6:41:50:58:
                    4b:d1:be:4f:67:3c:b0:e6:39:37:6c:2c:67:06:61:
                    4c:7d:82:07:47:0b:ef:25:24:a9:1f:b4:af:18:74:
                    68:2d:ce:5b:a0:b6:8b:e1:61:3c:39:18:51:a4:a2:
                    f2:89:1f:e0:1b:3d:9a:d7:0e:94:69:25:97:34:df:
                    bd:9b:c2:88:4b:cd:3c:fc:f4:a1:2f:22:c5:94:a9:
                    2f:d8:1f:18:33:a8:da:13:7e:a2:8e:4d:b8:8e:5a:
                    90:9d:d1:60:81:62:86:7e:86:2e:a1:5f:6d:ab:ee:
                    b1:3b:29:ce:27:f1:11:bb:b8:f4:48:ce:90:ea:a3:
                    07:bc:7f:2e:c7:16:b0:2a:81:72:5b:06:85:7e:d8:
                    ca:47:e3:38:0b:b4:c3:be:11:9c:15:7d:34:f9:b2:
                    cc:b9:49:85:64:cc:47:81:e0:86:76:fc:2e:42:1f:
                    5c:8f:92:8b:63:4a:c5:19:5a:c9:1f:a6:8d:d2:8f:
                    6c:63:44:aa:c2:d8:b2:cd:dc:7e:2c:f3:bd:ef:47:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6E:61:09:03:19:0F:76:BC:D2:41:09:79:DF:CE:A7:0F:E4:1A:50
            X509v3 Authority Key Identifier:
                keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:41:3b:5c:c3:88:c4:4e:64:23:27:84:2d:ab:ce:ae:a6:81:
         03:dd:73:0e:da:43:44:a6:93:64:f5:96:18:31:14:76:9a:e8:
         d3:fe:e5:d9:af:80:69:87:cb:c1:81:a1:c8:0f:ac:4c:a9:3e:
         e3:31:3a:7f:ed:f9:4f:e1:db:40:0e:ae:50:1d:5c:4d:42:d8:
         c5:90:84:37:54:7a:2e:a9:99:19:b8:c7:bf:78:a7:55:7f:2b:
         90:d0:0d:08:a2:4c:36:2c:67:d1:67:79:63:ec:9f:47:20:50:
         83:dd:4a:fa:e6:aa:03:c1:d7:f2:4e:3b:10:61:bf:ff:34:b7:
         54:4a:71:d1:ad:c1:9e:ad:75:09:be:7d:04:8a:3a:9e:25:81:
         02:8b:d8:fc:3f:e4:04:dc:9d:2e:f5:15:eb:b4:6d:61:20:05:
         51:72:e1:72:b2:33:db:e4:54:ce:88:fa:54:8a:e4:b9:bc:34:
         95:5f:84:a0:f1:5b:c5:80:26:a3:c5:8d:60:98:17:70:15:26:
         cc:57:c2:bd:c1:df:c1:f2:c0:50:39:ae:52:f1:b2:ab:72:3b:
         46:a4:cf:42:37:91:10:66:d9:32:95:b2:fe:bc:29:0a:b7:ff:
         04:ef:07:fc:d8:87:6f:3f:46:ba:31:90:87:c1:e2:cd:4c:bb:
         0b:02:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:24 2025 by rpki-client