Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft
File:                     Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft (raw, json)
Hash identifier:          7Yr82Bb2wvvC99GEsPs8S+tWaNnNLHDytXhjh/esAAU=
Subject key identifier:   32:5D:F5:4F:65:85:2F:3A:AD:35:46:E7:22:02:AD:A7:70:8B:A8:BD
Authority key identifier: 0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE
Certificate issuer:       /CN=A91FB179/serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE
Certificate serial:       06FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft
Manifest number:          06F8
Signing time:             Tue 04 Nov 2025 22:01:50 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:49 +0000
Manifest next update:     Tue 11 Nov 2025 22:01:49 +0000
Files and hashes:         1: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl (hash: cxulSYoJclNXBZyvQXyd+MLLJuxQToloJKH15L2LzEU=)
                          2: 6C4046C665EE11EB9ADB5F40C4F9AE02.roa (hash: 2Mo86XnCI5KeTWF6zAmVrthl3kfcd93BXOE5Y90BE8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl
                          rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB179, serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE
        Validity
            Not Before: Nov  4 22:01:49 2025 GMT
            Not After : Nov 11 22:01:49 2025 GMT
        Subject: CN=690a77ce-b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:4f:e2:e2:76:4b:8f:70:fd:b8:24:bb:96:
                    39:e8:e2:ca:e6:5e:cb:1a:24:74:53:8e:94:45:03:
                    c8:40:cc:0a:3d:28:4e:49:67:ff:00:aa:bf:58:bf:
                    1b:fd:f8:ad:ab:82:e4:92:b8:6a:2a:7e:f4:94:99:
                    2c:d0:7e:4e:5c:2c:14:4d:de:d8:0a:ac:3c:26:34:
                    90:a4:3d:01:40:b4:99:21:c5:0f:62:4b:0f:42:cc:
                    6b:79:64:57:76:d7:72:49:4b:ad:16:81:f2:16:cb:
                    0e:20:ed:3a:d2:f2:95:d7:57:47:dc:86:69:0d:48:
                    16:e1:9b:6b:ed:b2:77:85:99:0f:f7:37:60:79:09:
                    69:67:a0:bd:37:93:a5:56:6b:25:21:e0:67:e3:1b:
                    f2:b8:10:e7:32:8c:d5:6d:5f:5a:fc:0d:ae:51:ec:
                    24:29:39:5e:34:a1:39:94:3b:7c:99:4f:6f:96:8d:
                    4d:cb:7a:33:7e:31:5e:9b:0c:fd:b6:83:8e:30:e0:
                    42:57:be:99:83:8a:15:23:32:2f:a1:c7:22:e8:66:
                    45:ca:02:c8:0a:21:db:39:44:94:a4:b4:a0:46:81:
                    a0:0c:01:a7:10:42:fa:a3:96:7e:48:7c:69:bc:2d:
                    22:6a:a7:17:20:07:2f:0e:e5:0a:75:b8:9b:23:2b:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:F5:4F:65:85:2F:3A:AD:35:46:E7:22:02:AD:A7:70:8B:A8:BD
            X509v3 Authority Key Identifier:
                keyid:0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:64:e9:3c:d8:99:50:84:61:1a:c7:c6:36:a3:ca:88:99:
         a6:c8:5d:50:de:43:b9:74:ff:6f:8f:29:f2:b6:0c:39:e4:f1:
         a6:41:1d:f6:9f:d6:cd:70:e1:56:90:22:c2:1b:86:41:5f:b2:
         c3:3b:0b:eb:82:25:b0:eb:b8:d4:50:2b:6a:96:bc:40:80:ee:
         5d:3c:b4:04:f8:9f:60:8c:ed:00:15:48:ef:8a:39:6b:4f:14:
         02:c5:33:fd:ac:5a:3b:0d:be:32:b9:0f:22:e9:ec:55:2a:3e:
         94:7f:f4:81:4b:0d:94:73:a9:84:63:e0:07:f3:5a:6b:eb:8f:
         62:21:52:3a:94:f1:f4:99:61:6a:08:44:91:ed:8a:01:df:22:
         af:20:d4:dc:cd:11:ca:8d:be:f5:f4:39:b2:89:16:76:65:c8:
         ea:44:5b:41:43:c3:5d:1c:51:56:0b:7f:a4:d1:35:f2:e7:25:
         bd:4f:b6:77:97:fd:4e:82:a3:f3:69:2d:ab:ec:f8:2e:53:79:
         05:55:ac:0e:d5:9f:d7:1a:0a:91:2e:19:88:6b:87:42:f6:c4:
         78:9f:0e:7d:5d:45:23:95:c7:d0:e1:3d:2f:bb:9a:bf:bc:9f:
         93:12:26:2c:a7:54:a4:76:48:4d:6b:50:83:ec:6b:a6:a4:83:
         c6:07:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:59:31 2025 by rpki-client