Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File:                     6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier:          kTWDDWRxDGdtLF+rqYds/uv3rjqk+g5eIkLDq528o9w=
Subject key identifier:   CA:85:4F:88:4E:8C:9C:4C:22:DB:C8:62:49:9C:58:EA:E5:25:26:25
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer:       /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number:          0152
Signing time:             Mon 03 Nov 2025 04:15:03 +0000
Manifest this update:     Mon 03 Nov 2025 04:15:02 +0000
Manifest next update:     Mon 10 Nov 2025 04:15:02 +0000
Files and hashes:         1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: idjQ6FCTZce29h8BYLqo2pjmENkGAgczpkowUgyN6Jw=)
                          2: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw=)
                          3: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: lkljamiAGuWTdMNk035Kt/plV9Fx0R6Faku03HPbg7U=)
                          4: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: tLt6JDfDub8DNFZW2G3EMTsxDiFDr62JlgmUF1Jhoi8=)
                          5: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=)
                          6: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Validity
            Not Before: Nov  3 04:15:02 2025 GMT
            Not After : Nov 10 04:15:02 2025 GMT
        Subject: CN=69082c47-e614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:d6:0d:08:18:0b:a0:f3:80:55:bf:6a:02:
                    50:74:00:6c:6e:13:d0:6e:bc:02:53:6f:92:7e:9c:
                    98:90:85:d8:a2:14:80:f9:9c:db:31:c3:af:b2:6d:
                    58:d5:32:5f:f9:cc:5e:72:cf:b3:11:51:9e:b1:7d:
                    3f:77:d4:14:b6:f1:39:f9:b8:5c:a0:34:fa:3e:aa:
                    1f:4a:fa:cd:ff:25:7c:11:c3:6d:bf:65:57:45:b7:
                    2c:02:72:d5:08:1b:53:84:e7:1e:0d:fe:8d:ca:3a:
                    06:a4:0a:cf:4b:96:a2:e0:10:cb:91:c8:06:c6:4b:
                    3d:05:bd:a9:5f:f3:e5:11:a9:10:9d:a7:90:70:b7:
                    eb:1f:d2:db:c7:3f:9a:e6:86:f7:02:17:35:ad:54:
                    a4:d5:53:71:68:ed:26:13:9c:5c:c2:8c:f8:a6:ff:
                    ad:fe:a5:d4:74:b8:95:56:09:19:1d:26:f2:12:86:
                    69:55:00:c8:4a:d1:36:0b:67:f3:0b:ca:96:7c:eb:
                    51:5e:08:19:ae:3a:63:e0:0a:96:de:68:8e:06:fc:
                    64:b7:f3:36:8f:e7:45:b9:f0:f8:94:26:cf:ab:28:
                    4c:68:28:25:ef:3b:04:a0:67:b2:d7:0a:ba:a9:c9:
                    5e:00:ed:d5:00:dc:94:4d:a4:67:75:93:2f:eb:02:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:85:4F:88:4E:8C:9C:4C:22:DB:C8:62:49:9C:58:EA:E5:25:26:25
            X509v3 Authority Key Identifier:
                keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:54:af:a0:46:69:2d:df:8a:47:06:0d:44:68:af:be:83:
         82:3a:a8:3f:04:07:ba:03:24:eb:71:80:ad:ba:33:fa:37:0b:
         ba:ab:2f:6b:9f:a5:81:a4:c7:99:46:f2:55:43:61:a1:bf:f7:
         12:d6:98:cb:84:65:97:93:9c:3a:50:f2:0f:67:84:67:d2:5f:
         55:a9:39:b2:d6:0e:5e:c3:13:d9:a0:f0:4a:24:df:d0:8f:73:
         58:10:24:b4:94:8c:6d:16:c8:4e:d4:09:63:eb:3f:40:47:2b:
         49:53:12:d2:5b:cb:07:48:67:71:e8:42:1f:f1:24:47:2a:56:
         5f:1d:d9:6b:86:f4:04:07:d6:da:60:b4:74:f5:73:99:30:ec:
         f6:91:7e:a1:5a:6a:7d:43:dc:42:47:4f:df:b8:4c:88:ed:e9:
         5e:6b:04:63:75:d5:f9:37:45:46:d7:03:76:5c:18:c0:57:0f:
         4e:f4:ce:44:03:3c:dc:d9:d1:fb:8f:dd:57:88:84:b7:2b:90:
         13:dc:97:8c:d9:02:5d:f5:24:6a:06:ba:20:54:1b:0d:8e:90:
         ae:ec:cd:02:41:37:21:eb:16:1a:bd:00:9e:08:6f:e1:45:33:
         4e:46:06:96:3d:2f:ee:36:b5:cc:e8:b0:bc:33:30:4e:91:e3:
         50:55:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:54 2025 by rpki-client