Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File:                     ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier:          mXyLiZXC6/3gvZ4nQRjnwKNd0Ay5tIdJiFphntuqRGQ=
Subject key identifier:   F5:72:77:4D:C2:DF:41:B7:FE:7B:A8:2E:21:B5:B5:83:AE:CD:98:5E
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer:       /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number:          C6
Signing time:             Mon 03 Nov 2025 05:47:56 +0000
Manifest this update:     Mon 03 Nov 2025 05:47:56 +0000
Manifest next update:     Mon 10 Nov 2025 05:47:55 +0000
Files and hashes:         1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: 5FkaDbDL57obmtNSmlkfBLVVdIicpis5n6zUNPH4dDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
        Validity
            Not Before: Nov  3 05:47:56 2025 GMT
            Not After : Nov 10 05:47:55 2025 GMT
        Subject: CN=6908420c-690d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:7b:22:33:92:0b:00:72:63:34:61:84:97:
                    f9:48:82:71:e1:0d:32:41:44:ff:28:b8:85:37:40:
                    c0:2a:b5:1a:c1:0d:11:2b:96:41:55:0d:32:53:91:
                    58:0e:fb:3e:56:a8:9e:52:0b:a3:27:1b:15:9d:c7:
                    34:ce:c4:85:47:fd:44:8f:55:e9:66:d9:59:9f:0e:
                    ae:68:79:31:0e:36:32:64:7b:22:65:3c:c6:db:1c:
                    f1:94:83:07:a6:b8:54:a5:a5:5c:a9:4c:db:56:94:
                    b4:a6:8c:6b:a0:50:0c:d2:58:48:11:30:a6:3a:15:
                    d0:eb:95:94:77:e3:71:e5:db:3d:5d:cf:f7:88:2d:
                    05:21:1f:43:c8:74:44:61:cc:b7:20:1e:c2:c9:b7:
                    56:65:2d:e9:48:f0:72:5d:e6:c3:2a:d3:0f:a0:d9:
                    6c:27:4f:f9:40:d3:74:9c:e5:0f:78:fd:a3:30:a5:
                    f2:5c:09:d5:cc:84:9f:45:04:e5:63:2e:8c:c0:5f:
                    6d:43:84:cc:b0:86:46:0d:c7:ae:dc:5f:a2:0c:72:
                    51:d1:99:6c:b9:c1:00:be:a6:15:00:fe:46:b6:cf:
                    1e:7f:16:29:4f:d8:74:be:87:d4:d4:87:8a:e9:e4:
                    2a:7f:e8:d1:16:b4:15:d4:e0:25:6c:36:93:ec:ba:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:72:77:4D:C2:DF:41:B7:FE:7B:A8:2E:21:B5:B5:83:AE:CD:98:5E
            X509v3 Authority Key Identifier:
                keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:91:64:16:b1:31:10:13:2d:c8:01:c8:95:ca:b4:a3:32:
         e2:97:f4:a5:24:4c:f9:81:ed:84:1f:03:16:0a:55:45:97:53:
         a0:95:f3:fc:ea:ea:a2:01:49:9c:89:a1:3f:10:ea:6a:69:db:
         8b:c0:aa:17:7d:9b:21:68:42:25:3f:28:8e:a0:4b:6e:95:d9:
         70:d7:87:bc:83:33:26:3b:c0:a5:70:d1:df:d3:7c:7a:b8:9c:
         2d:48:fa:12:dd:cd:a8:02:54:ba:aa:a1:f1:75:b0:c7:4d:82:
         50:43:ad:0c:c8:12:31:23:28:c3:b2:84:5d:61:2c:c8:29:a4:
         cc:89:5c:b9:01:7f:a3:8d:ed:c9:01:97:da:7e:d5:68:f0:a1:
         9d:2c:30:66:9e:e5:b8:22:33:ea:99:24:88:a8:e3:6a:20:82:
         ce:b1:8d:e2:38:3f:7e:c0:35:2f:13:f1:c9:7f:fe:ae:95:fb:
         76:aa:e4:f1:d6:4c:e0:55:fe:0a:84:ed:8c:7d:9b:b5:46:52:
         a1:2b:0f:55:76:40:54:3f:86:ce:55:a8:1c:98:3a:84:e7:20:
         97:07:6b:a7:76:cd:cb:89:14:b3:4e:15:4e:56:90:98:af:03:
         d7:f8:24:e0:53:ca:47:aa:f1:d1:c1:36:fe:34:15:45:9c:66:
         f0:72:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:04 2025 by rpki-client