Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          Cd/H5KnLSUOQD4tm6HCtQx6V+w79GXOUPDqSVq39+nI=
Subject key identifier:   7E:EB:F5:D4:40:3A:F6:7F:5F:BF:15:9E:5B:9E:25:B4:6C:6E:1C:8E
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0AFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0AE9
Signing time:             Tue 04 Nov 2025 19:31:14 +0000
Manifest this update:     Tue 04 Nov 2025 19:31:14 +0000
Manifest next update:     Tue 11 Nov 2025 19:31:14 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: rc8TkCFEiMOEeriFFJnH+5J1z0aBRKQFfg0IE0bn61c=)
                          2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=)
                          4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2814 (0xafe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Nov  4 19:31:14 2025 GMT
            Not After : Nov 11 19:31:14 2025 GMT
        Subject: CN=690a5482-b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:24:5c:e6:20:20:aa:1f:6d:ed:8b:09:94:
                    c3:58:0c:b8:b4:29:68:03:3c:56:12:5a:2c:8a:eb:
                    d8:b4:86:8a:2d:cd:69:cd:cd:2a:f9:12:a9:96:67:
                    77:0c:a1:e1:27:cc:68:38:f4:ae:25:d3:c9:89:68:
                    94:ff:99:89:3e:5d:e4:80:21:20:51:e1:6e:80:ba:
                    5b:08:54:d3:99:ff:1b:46:c6:c3:30:21:b7:1f:28:
                    46:f9:bd:93:f2:76:85:83:40:f4:ac:29:25:28:0a:
                    6d:dd:01:f7:c7:12:d2:58:cd:66:9a:24:32:45:1d:
                    08:c6:71:6a:9d:16:39:bc:ff:97:bf:0e:ff:13:74:
                    30:99:ae:04:b4:e3:cf:86:7b:71:b8:6c:e3:0f:98:
                    98:24:93:fc:8a:22:c3:ca:73:5f:60:9a:a1:b3:f0:
                    a6:14:21:32:12:81:32:fb:8e:6e:70:1e:f8:50:f7:
                    cd:6a:5f:f7:d2:a5:8d:8e:09:db:1c:c5:d5:9e:52:
                    06:09:c8:ba:2e:07:75:f7:83:95:8d:47:8a:92:04:
                    fd:6c:49:0f:44:9a:24:4f:cd:2b:b2:54:f2:23:37:
                    0b:f2:94:24:d5:74:55:34:ff:61:b4:5f:03:69:a0:
                    53:e0:c5:5a:dd:b8:dd:79:2a:a8:48:58:64:3c:fe:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EB:F5:D4:40:3A:F6:7F:5F:BF:15:9E:5B:9E:25:B4:6C:6E:1C:8E
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f1:a2:10:f2:af:a7:88:8a:c8:41:1d:b6:7e:a7:4d:09:8c:
         b2:10:84:6a:6f:e7:bb:e9:78:e2:d8:eb:b9:e9:bb:44:da:68:
         79:df:93:7e:84:6a:8f:96:43:ae:5e:5a:0d:01:d6:22:05:07:
         b4:4a:da:a5:32:88:55:43:8f:50:78:a6:aa:19:68:e3:94:48:
         d3:81:2f:91:30:c1:0b:af:c1:2d:0d:e9:53:69:51:f1:cc:8b:
         54:4f:9f:7b:e7:ab:e3:c8:32:71:26:32:55:6d:5c:5c:f6:c4:
         71:76:a2:c4:9d:46:45:c2:33:78:20:ca:31:46:64:c9:bd:47:
         84:e9:ca:de:ab:d4:9c:b7:02:73:17:54:df:db:96:19:36:4b:
         43:06:98:ad:cf:a6:98:51:e6:59:8c:ec:85:06:b0:5b:2d:d2:
         98:66:3d:4a:11:55:a4:01:74:44:ac:0d:ab:94:f5:82:64:54:
         6b:16:7a:46:70:7a:7a:31:86:9d:18:84:44:5b:3a:37:77:b6:
         96:e2:b9:1d:21:60:83:fd:16:da:4a:db:40:a8:23:64:8d:09:
         63:ef:b0:f6:9c:44:6d:cc:b5:38:ed:29:b6:62:ec:d6:50:f8:
         ff:2a:8b:85:2c:9a:39:fd:6e:02:34:42:08:57:f7:2e:0b:fe:
         4e:72:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:56 2025 by rpki-client