Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
File:                     6u5Zump8cEkFjFZZfMdFxh7FoKk.mft (raw, json)
Hash identifier:          oa1y2kxT64SikApfLzcDtkeEuloWFsRyn9WhB2Rv7+k=
Subject key identifier:   F2:95:53:6C:94:F2:6A:19:28:E2:0C:C8:16:A9:36:CF:B6:C5:F7:32
Authority key identifier: EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9
Certificate issuer:       /CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
Manifest number:          0561
Signing time:             Wed 05 Nov 2025 00:45:56 +0000
Manifest this update:     Wed 05 Nov 2025 00:45:55 +0000
Manifest next update:     Wed 12 Nov 2025 00:45:55 +0000
Files and hashes:         1: 6u5Zump8cEkFjFZZfMdFxh7FoKk.crl (hash: ili0d5ZO7+fdhh93QjTPSAWbCN8vco7GWC8KMIJOxg4=)
                          2: F19BD82C46A011EE85BCFA3FC4F9AE02.roa (hash: wKLo017zboTn3X0bykWjpCuyqUjp9oJY923Pgbk9gE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl
                          rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AD92, serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9
        Validity
            Not Before: Nov  5 00:45:55 2025 GMT
            Not After : Nov 12 00:45:55 2025 GMT
        Subject: CN=690a9e43-4783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:81:f7:3d:99:6d:de:25:a2:2e:57:f5:67:
                    be:9f:1a:81:7e:a2:18:96:df:9b:a1:bb:a4:a9:d5:
                    2b:f3:32:4f:20:7d:35:1f:81:77:3a:fb:8e:58:97:
                    21:89:79:b9:2d:d1:87:2b:6e:5e:dc:22:b5:94:04:
                    df:9c:a7:22:db:28:7c:0a:ca:a0:a4:07:3c:c8:a6:
                    76:db:3b:6d:33:83:29:c0:80:cd:d6:fd:bf:2b:59:
                    f0:e6:93:3d:cd:49:a3:d5:81:b3:ff:39:cf:1d:5b:
                    4c:fd:51:3d:f3:56:90:d5:40:78:5b:39:51:67:57:
                    ca:11:c3:48:f6:c5:0d:c5:d7:2c:c8:bd:88:10:df:
                    df:1d:4a:cb:58:4b:99:c1:70:11:66:ec:9b:2e:7e:
                    28:2b:8b:3b:fe:b7:39:cd:52:7c:59:d2:38:a9:bf:
                    2e:f3:d8:e3:83:57:89:87:12:47:f0:b8:62:83:8c:
                    7d:cc:24:6a:a6:04:a6:ee:bd:73:1a:63:1b:27:fd:
                    56:c4:9e:19:05:f9:0d:89:6e:ea:77:16:a3:fc:4b:
                    92:ea:4e:b8:22:5b:c6:cd:a8:b2:cf:c1:d5:e2:9e:
                    60:e6:3c:37:51:48:05:b8:14:db:42:e6:2f:f0:40:
                    8e:bd:ac:ec:9c:76:ac:69:b4:0d:6b:f3:5f:99:23:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:53:6C:94:F2:6A:19:28:E2:0C:C8:16:A9:36:CF:B6:C5:F7:32
            X509v3 Authority Key Identifier:
                keyid:EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3b:49:7d:ed:21:0e:b9:bb:e1:73:6a:02:da:24:46:56:52:
         e5:27:d0:a6:3e:2f:bf:35:ba:19:b3:8e:3c:8b:f8:b0:5c:49:
         18:3b:a8:29:37:e3:b4:8c:5b:6b:48:fe:42:5d:14:53:c0:ec:
         68:ad:31:c2:21:b2:91:1e:1b:81:d2:66:b4:29:a5:0b:66:fd:
         82:1e:f2:c0:61:a0:e7:e7:72:99:5a:6b:2a:5a:b7:4b:bf:30:
         3a:fe:b7:84:3b:20:13:67:41:8f:bc:31:76:b6:8e:38:c0:b5:
         89:8f:26:d5:48:87:3b:51:4f:4d:d1:62:59:b0:14:8a:b9:d3:
         2f:35:f5:45:5b:36:82:22:35:59:13:26:47:9e:49:fd:f7:ae:
         4d:c1:dc:41:9d:bf:64:c4:ec:33:a6:62:14:ef:60:d5:96:1e:
         a1:bd:bd:9f:2e:57:77:8e:5d:5b:6b:6f:cd:4f:97:46:95:5e:
         9a:27:01:4b:71:47:02:6e:a2:e4:87:eb:41:7d:9f:67:4d:4d:
         5f:91:b9:1c:9d:be:0e:63:ea:db:67:6a:3a:13:3e:25:7d:eb:
         de:b0:de:75:b2:97:0b:a3:65:e6:f7:4e:f3:9b:5d:e4:76:5d:
         eb:c4:64:69:3b:8c:a3:8b:0f:7a:7a:fa:3b:8d:3f:02:41:38:
         2c:7f:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:50 2025 by rpki-client