Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
File:                     k6TJbWKYFprgVdTqJmgrEHL7lQI.mft (raw, json)
Hash identifier:          KECzeZK75ElOrapgoPJ3ElLMVb2zAHHqWsVNWT3Vvl4=
Subject key identifier:   9A:3E:3D:4D:15:F1:D7:B1:33:FF:80:01:41:50:7A:F3:B3:0E:7E:4D
Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02
Certificate issuer:       /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
Certificate serial:       0C7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
Manifest number:          0C75
Signing time:             Tue 04 Nov 2025 18:37:26 +0000
Manifest this update:     Tue 04 Nov 2025 18:37:25 +0000
Manifest next update:     Tue 11 Nov 2025 18:37:25 +0000
Files and hashes:         1: k6TJbWKYFprgVdTqJmgrEHL7lQI.crl (hash: mdBN8ZXaZ/qoJY7NPOP06E8UHb65kutuoVD85kFJpe0=)
                          2: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (hash: VFDvNQ3DTdQ4HGioihxyxHaqz473S/vMVmDMPnquVSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl
                          rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3198 (0xc7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
        Validity
            Not Before: Nov  4 18:37:25 2025 GMT
            Not After : Nov 11 18:37:25 2025 GMT
        Subject: CN=690a47e5-6835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:7c:0c:36:b1:0e:69:b9:c6:c8:4b:68:1f:
                    0a:13:32:69:05:10:ea:cb:f6:35:56:4d:83:67:ed:
                    f0:af:bc:80:87:61:6a:73:f7:d8:0b:c2:6f:b8:87:
                    fd:b2:8f:c1:a4:d4:5a:9a:86:2a:9c:92:11:d2:99:
                    77:38:9c:dc:8f:f6:64:bc:cd:30:15:3e:bb:c1:8e:
                    af:07:16:b2:7c:e6:83:ab:d8:51:e4:84:b5:c0:ce:
                    e1:f4:f6:38:17:43:d0:a6:8d:fd:c7:c4:78:7d:07:
                    b6:41:f0:4a:f6:c3:a1:22:a7:db:45:41:ec:f6:b6:
                    90:f5:60:aa:e3:60:af:e4:91:83:c2:5c:68:9a:b5:
                    c8:46:60:76:d2:5c:12:a8:d2:91:a5:1e:f7:2e:c7:
                    12:18:5d:c0:3b:2b:ff:7a:7d:ef:3b:a9:6a:21:6e:
                    11:6c:7e:95:81:ae:6d:88:af:7c:8c:2e:55:cd:bf:
                    c3:fc:69:22:da:b1:4d:b2:de:f0:c8:cd:f5:06:98:
                    34:66:b2:5b:59:9e:ea:12:11:ec:8a:87:c1:49:eb:
                    14:02:97:fe:ba:57:99:70:0e:44:a7:8e:1b:6d:4c:
                    1f:1b:ca:75:c2:3b:e7:a6:a9:bb:15:2d:91:fd:2f:
                    98:9c:01:17:dd:0f:48:b2:17:4a:c5:cd:ea:bb:df:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:3D:4D:15:F1:D7:B1:33:FF:80:01:41:50:7A:F3:B3:0E:7E:4D
            X509v3 Authority Key Identifier:
                keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:3c:69:ac:82:0b:92:61:27:fd:54:09:16:23:41:24:f4:
         92:fc:fd:c4:cb:96:30:ec:b0:85:1d:b1:7c:74:c4:64:73:e1:
         be:67:95:d8:65:43:a7:85:f7:b1:07:8d:ea:0a:77:f2:8a:cb:
         2d:eb:48:2a:ea:72:7b:94:e3:37:ad:50:f2:3e:7f:d8:e4:09:
         d9:28:a3:9c:e8:3e:89:1c:12:08:3c:cc:d1:03:a4:60:33:81:
         8a:75:80:90:a4:84:a9:68:5d:5a:a6:89:74:ab:02:a1:1a:fe:
         4c:14:57:3e:a7:2e:7b:02:c8:4b:e3:58:fe:d9:c3:70:24:7f:
         fe:f7:f3:6c:c6:06:9f:98:0a:f3:c3:72:e1:97:b0:52:9a:fc:
         0b:d6:70:7f:3c:dc:ae:ed:1c:3d:c6:b3:42:1b:83:92:30:70:
         99:54:08:b7:88:d8:b8:80:b4:9c:45:72:43:42:27:9f:87:77:
         da:f2:3b:35:48:9c:34:2f:96:32:a8:a2:2d:d0:58:5d:14:9c:
         30:25:51:69:73:a4:9a:49:94:bc:a0:fb:06:7d:01:58:eb:c9:
         3d:8f:9b:08:10:44:ab:3b:fd:40:a0:07:f5:01:9e:6a:ae:c4:
         00:bc:0e:54:6b:34:64:9c:65:4e:db:95:af:89:fc:e2:65:75:
         60:c4:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:18:16 2025 by rpki-client