Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
File:                     60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json)
Hash identifier:          CeWCvPB+WLDyLT2V6l3eoHW5RIMV5A/4MgLFgIUCpag=
Subject key identifier:   4B:13:AD:95:6C:D1:16:96:41:A4:F7:DE:BD:1B:6E:39:5C:14:4B:B4
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Certificate issuer:       /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial:       02C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
Manifest number:          02BC
Signing time:             Wed 05 Nov 2025 01:32:38 +0000
Manifest this update:     Wed 05 Nov 2025 01:32:38 +0000
Manifest next update:     Wed 12 Nov 2025 01:32:37 +0000
Files and hashes:         1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: 8Ra6VEOyVvTVL8+cCGM5AM/9qsBPjXs4yZlwWJUWF3s=)
                          2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: K2eRSWaNhgeJAJT+eZoCaSCPtQt1cFG3OtTWO7vDxZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
                          rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
        Validity
            Not Before: Nov  5 01:32:38 2025 GMT
            Not After : Nov 12 01:32:37 2025 GMT
        Subject: CN=690aa936-5a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:32:14:2d:09:79:50:c6:08:15:65:5e:57:
                    73:9d:f1:f4:51:a7:5c:67:43:a1:e3:a1:b4:19:0d:
                    1f:c3:d1:07:50:64:5d:9c:3f:36:c8:b0:cc:0d:b1:
                    d7:10:90:d9:d2:f9:c4:6d:40:4e:a5:21:6a:c4:2c:
                    34:8e:d5:0d:a5:1c:4b:47:9b:82:ce:56:ef:49:c6:
                    20:b0:a6:13:72:db:05:51:0b:a1:f8:84:8c:35:dc:
                    cf:17:22:31:07:94:2f:1a:e5:71:d7:43:5a:1f:7b:
                    d2:68:d7:6a:13:5b:11:70:d3:ca:10:b0:b9:7f:8f:
                    9a:f8:24:93:64:79:b3:37:1d:e9:63:b8:4a:70:e7:
                    d6:02:e1:f0:0c:44:df:a5:57:cd:78:20:9c:1e:54:
                    41:41:58:5d:ee:f6:52:ec:af:a8:c3:4f:bf:45:a1:
                    49:79:e7:e3:5c:1b:70:44:ef:6e:af:53:db:85:3c:
                    c1:b6:dd:82:fc:12:f7:d3:67:2a:62:06:53:70:22:
                    18:b0:bb:c0:bc:81:46:94:c4:00:e5:67:ca:0c:32:
                    f0:69:0e:7c:33:e0:4c:72:83:3b:c8:ea:39:7a:a6:
                    cc:46:00:d2:ae:d0:9d:fa:79:2f:30:4f:a2:56:a1:
                    ff:10:95:5e:fd:ea:4c:89:ac:db:19:09:1f:92:12:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:AD:95:6C:D1:16:96:41:A4:F7:DE:BD:1B:6E:39:5C:14:4B:B4
            X509v3 Authority Key Identifier:
                keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:36:e5:cb:89:48:4c:4c:e3:59:43:01:28:fb:34:3e:63:ef:
         ec:b0:fc:cc:2b:b5:3e:1f:d5:c4:f6:33:ba:f4:ca:aa:79:4c:
         4e:97:55:32:c8:fc:c1:f4:d6:79:00:0f:20:f5:f1:0e:4e:0d:
         02:0f:45:c1:70:4f:a1:a4:93:7d:1c:e1:41:24:08:2e:72:8d:
         fa:b0:90:73:d8:e6:49:c4:f1:cb:ee:57:e3:17:78:26:1f:01:
         e0:51:6c:d1:02:34:f3:c0:15:2e:36:56:63:36:c7:02:f3:5d:
         2f:62:e9:24:57:85:1f:2e:34:5e:27:26:e1:e1:14:3e:97:e5:
         35:39:39:bb:e1:f4:8d:5c:bb:65:ac:a0:36:d7:44:27:af:d3:
         9a:98:15:80:8f:15:d9:5b:61:09:9c:ee:36:26:af:c4:ac:0d:
         44:d1:ae:6c:32:12:5a:d4:57:e8:e0:6f:a1:dd:41:a3:78:6f:
         3a:83:7b:49:92:a5:d1:dc:6e:76:69:2a:be:57:71:03:cb:7f:
         a1:df:d6:54:79:16:f1:1d:74:27:94:3d:71:32:af:23:10:f6:
         d8:b0:6c:d7:0c:61:ab:d7:63:15:58:7e:60:3f:f0:1e:18:32:
         a7:ed:81:48:24:d2:2f:d1:c9:72:46:0a:c3:cc:b7:c4:26:42:
         16:38:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:57:07 2025 by rpki-client