Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File:                     K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier:          kVt6tAklQ7CSNq8kU3LLYWuTyZQKdQkT96cVvaLdP/g=
Subject key identifier:   03:8D:FE:83:A5:B5:4A:C8:AC:4B:4D:F9:A3:25:11:BC:4A:38:14:E8
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer:       /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number:          0142
Signing time:             Wed 29 Oct 2025 04:07:53 +0000
Manifest this update:     Wed 29 Oct 2025 04:07:53 +0000
Manifest next update:     Wed 05 Nov 2025 04:07:53 +0000
Files and hashes:         1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: BaqMAAahEHyj72sRRnNGQFdGiq1pyaq1rALaySQeRcs=)
                          2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
                          rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 04:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
        Validity
            Not Before: Oct 29 04:07:53 2025 GMT
            Not After : Nov  5 04:07:53 2025 GMT
        Subject: CN=69019319-104e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:4a:15:09:83:d3:28:0b:a8:45:db:d0:b1:
                    00:9a:a4:8c:2b:35:6a:a6:68:c3:7a:ab:dd:86:95:
                    f3:e0:59:f1:26:70:89:c6:20:3f:fc:4c:e7:1a:c5:
                    1d:35:cc:73:c8:a4:d3:e1:15:86:ae:dd:88:34:4d:
                    29:90:90:5d:b1:84:7d:92:6f:25:33:9f:d9:9d:c7:
                    45:06:87:ee:2c:a3:5d:49:01:d0:4c:a6:9d:55:4c:
                    57:34:81:8a:f2:29:49:0f:e8:d8:a9:d1:55:97:de:
                    5c:2a:2a:39:47:7c:c1:3c:09:2a:e4:5f:75:af:d6:
                    fb:c7:d5:20:e3:ce:13:10:2d:91:71:53:1c:11:f1:
                    29:14:74:45:01:8f:54:0b:12:4f:6a:05:63:90:83:
                    bc:d2:cf:8c:20:0c:16:3b:0f:e2:8a:7f:a4:90:a8:
                    ab:ea:8d:fc:73:56:da:80:86:64:fa:6c:52:b4:cc:
                    40:0e:85:1f:b9:a9:95:e5:60:43:c4:e7:85:80:7d:
                    9b:ff:0a:f7:07:cc:03:17:b3:1a:16:43:79:57:07:
                    9c:2f:c7:04:9f:64:47:50:51:b3:c4:33:3e:57:8b:
                    be:06:23:c9:7b:44:2d:e1:55:d4:42:55:f8:24:d8:
                    86:56:db:8c:32:bd:db:d3:d3:06:8c:0d:e7:a4:a4:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:FE:83:A5:B5:4A:C8:AC:4B:4D:F9:A3:25:11:BC:4A:38:14:E8
            X509v3 Authority Key Identifier:
                keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:de:52:3a:4f:89:71:74:0e:ac:a1:62:09:ba:e6:6c:42:44:
         c6:87:cd:ca:7d:b2:c7:ac:3e:2f:9d:95:38:f7:e1:bd:e6:47:
         59:42:ec:ae:c9:c5:c5:7f:fd:32:66:09:ee:fc:45:b2:f2:f5:
         15:d7:63:11:f5:19:a0:37:9f:3b:4d:63:aa:33:46:ab:c8:f9:
         7c:a5:04:a2:17:d3:61:4b:e4:37:79:f0:13:3f:4b:66:fc:59:
         9b:e8:03:8e:c7:8d:a6:c2:71:10:84:fe:88:aa:a2:9b:c1:bb:
         aa:56:d2:fa:75:56:b9:86:d4:6e:15:d4:6a:49:23:0f:06:a4:
         12:52:81:97:ef:a4:26:2a:f9:73:c2:b1:4f:35:86:82:20:b4:
         26:09:15:73:5f:3c:95:f8:30:c1:ec:3f:02:14:05:1f:54:77:
         54:47:d7:5c:3e:e0:c2:8c:0f:82:82:54:8a:15:6a:6d:b1:92:
         94:29:1a:9b:55:b6:55:2a:22:72:2a:b2:20:da:92:ad:13:87:
         6e:b9:fd:bb:23:1c:9e:35:f5:bb:6d:92:48:21:53:81:ce:dd:
         9e:da:81:a8:b4:f2:54:7d:1d:84:4f:fb:b6:11:95:1e:aa:17:
         fa:2d:27:7c:72:b3:cf:bd:1f:d5:71:f8:48:11:bc:14:33:41:
         1e:ab:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:39:10 2025 by rpki-client