Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
File:                     6JNyY8Gd-yOWz0THcFJD_MJujzo.mft (raw, json)
Hash identifier:          6wNqdkDwnEIOucFrkjAsPD0VL4S20cMib/uvjLsZJXg=
Subject key identifier:   91:EA:EF:A3:45:C2:72:10:E1:14:49:F2:2D:19:9B:83:B4:A6:F2:99
Authority key identifier: E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A
Certificate issuer:       /CN=A913827A/serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
Certificate serial:       0370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
Manifest number:          036A
Signing time:             Wed 05 Nov 2025 00:59:36 +0000
Manifest this update:     Wed 05 Nov 2025 00:59:35 +0000
Manifest next update:     Wed 12 Nov 2025 00:59:35 +0000
Files and hashes:         1: 6JNyY8Gd-yOWz0THcFJD_MJujzo.crl (hash: 2ev/dnO8G0TQj+bxGlo748dow7Q2yLmiL1Dfde/TC7I=)
                          2: F89476D4CF1E11ECA610684AC4F9AE02.roa (hash: TEwRyHVvBihM84ufAexV7qZmj3OlIpW3f1GP5PqkIug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl
                          rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913827A, serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
        Validity
            Not Before: Nov  5 00:59:35 2025 GMT
            Not After : Nov 12 00:59:35 2025 GMT
        Subject: CN=690aa177-fd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:a7:29:8b:f0:e2:9e:9d:9f:fc:05:c8:3b:
                    48:90:4e:30:d8:6b:0f:ac:65:a7:d1:0c:bb:cc:49:
                    a6:9b:e5:9a:b7:7c:c5:ad:59:4c:2d:57:dd:7b:c0:
                    fe:5e:ed:2c:31:28:21:74:ed:6b:e8:e0:fc:64:bd:
                    6b:55:f6:aa:6a:db:9b:ab:7a:ec:f4:01:e1:36:c7:
                    34:10:23:b1:25:c4:51:5a:e8:c6:4a:26:fe:4e:18:
                    98:fd:50:3f:b6:ad:93:36:ae:60:00:8c:e5:6e:ca:
                    66:8c:20:74:4d:d8:77:4f:f1:5a:12:8f:6a:84:5b:
                    91:d5:5d:0d:30:46:99:4f:03:e4:92:49:30:3f:c5:
                    b9:1e:41:63:c2:a1:f9:16:bc:8e:6d:81:40:d7:16:
                    bd:cd:fd:97:1b:98:a5:83:c9:6a:e6:45:03:ff:71:
                    b5:98:40:ed:0e:fc:8b:2d:46:27:ff:3f:17:7e:4f:
                    b5:21:fa:c9:45:63:b8:ea:e0:77:d3:52:80:2f:17:
                    70:4d:0f:cc:0e:18:e5:59:16:97:fd:52:83:6f:af:
                    1f:b9:1e:8f:17:2a:ee:eb:15:5c:15:ae:bf:af:95:
                    f4:a6:f6:24:c8:5d:7f:64:4f:12:c1:5b:2c:4c:d8:
                    ee:0d:b6:e3:b4:71:78:d4:90:7e:e1:cd:94:ad:87:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:EF:A3:45:C2:72:10:E1:14:49:F2:2D:19:9B:83:B4:A6:F2:99
            X509v3 Authority Key Identifier:
                keyid:E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:28:8f:11:75:b5:fe:2f:45:66:9c:a2:a5:10:ba:4d:d0:85:
         ad:c5:be:7f:a2:83:88:63:ef:bb:c6:53:68:16:d6:07:d5:92:
         c8:e2:03:5f:2e:ee:3e:49:b7:c9:54:57:96:2a:81:fb:f7:22:
         fb:5d:6f:5b:3d:2a:6c:c6:6c:94:94:47:96:b1:45:d5:fd:a3:
         69:80:72:06:88:b2:65:83:af:41:ab:eb:30:f7:e0:6d:65:a6:
         42:ba:0d:1c:bf:3c:dc:ea:aa:0f:a6:0a:9d:b0:35:bc:01:ca:
         9c:4b:03:53:c6:2d:bb:9b:cc:b4:cd:53:44:9b:53:b3:a9:bd:
         b2:c9:d2:94:be:81:4d:f8:e0:b5:3d:85:62:c6:97:0a:88:fe:
         f1:80:62:20:9f:8c:b9:f9:69:1a:02:5c:65:86:e2:84:26:eb:
         a6:3c:60:d9:3d:90:97:4e:27:af:ef:85:3e:26:af:59:a7:6f:
         41:58:49:dc:b7:19:dc:31:08:d3:58:3f:6d:15:56:96:7d:ef:
         28:a2:25:38:82:8d:23:e6:16:18:21:86:10:55:f5:c0:72:8a:
         91:fe:be:7d:56:4b:37:85:ea:d8:89:8a:e2:77:cb:16:99:cd:
         8d:bc:08:b9:d8:eb:75:c6:64:70:94:cc:bf:75:3f:ee:47:c1:
         fa:85:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:33 2025 by rpki-client