Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File:                     luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier:          MjvJlthX40xlRxjRPEYCY8WCfsmCyPvbDsaZgKWZYH8=
Subject key identifier:   9B:70:84:C8:3D:4A:89:A5:CC:65:E1:44:78:F8:33:F2:6A:7E:63:D8
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       06BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number:          06B6
Signing time:             Sun 02 Nov 2025 22:11:48 +0000
Manifest this update:     Sun 02 Nov 2025 22:11:48 +0000
Manifest next update:     Sun 09 Nov 2025 22:11:48 +0000
Files and hashes:         1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: keOpRU9zsqQgV+DKWUUz9Ri/yn/XvjKwDVqURPy6Y3c=)
                          2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hWmIjVl3wq2WAFI85MCQWSOZgmGgPc2bb2Ktcia7bs0=)
                          3: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: 7THfaaI2xr5bkDyTmWI45Sy1DSF1UxvdqjKUDobmspg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
                          rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727 (0x6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Nov  2 22:11:48 2025 GMT
            Not After : Nov  9 22:11:48 2025 GMT
        Subject: CN=6907d724-a566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:e6:0c:ed:83:80:65:37:55:79:31:6d:e0:
                    d9:aa:49:50:ec:f6:6c:e3:fd:da:40:46:c3:2b:e0:
                    41:21:bd:be:9f:6b:bb:a3:ad:5d:3b:91:ad:68:d9:
                    78:a8:28:ce:49:fa:34:73:ee:d9:34:13:d4:09:19:
                    7c:9e:07:27:fb:83:aa:de:3b:ba:62:07:f9:66:c5:
                    53:b6:d4:c5:7e:cc:bf:13:0e:18:3f:f0:61:61:4e:
                    f2:b1:28:7b:d5:44:d2:ab:19:72:8f:28:b9:e0:1b:
                    f8:bf:eb:29:75:df:bd:95:62:78:a9:a2:b3:e2:30:
                    5a:0d:b4:c0:0b:fa:e9:1a:db:3d:41:2f:5c:6a:eb:
                    15:b8:f5:ac:9e:10:81:d9:24:96:c1:bd:93:72:8e:
                    03:56:81:9b:34:21:61:96:56:3f:fe:38:33:32:d2:
                    b0:7f:b8:3d:46:81:f0:1e:f7:9c:e7:2e:ba:df:31:
                    29:93:38:8c:1d:7f:32:47:58:93:fe:87:73:6e:63:
                    35:e2:6e:c4:bc:c9:ef:ec:6a:51:c6:88:69:7a:39:
                    c1:7e:94:56:1d:34:65:4e:5c:12:03:84:27:4e:87:
                    80:94:89:9f:ac:34:3a:68:ef:9b:89:bb:d1:81:df:
                    7a:0c:aa:18:31:9a:e1:93:3a:30:e2:04:35:95:0d:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:84:C8:3D:4A:89:A5:CC:65:E1:44:78:F8:33:F2:6A:7E:63:D8
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:42:d3:24:73:cc:62:7a:55:38:60:4e:82:f9:c6:aa:0b:93:
         63:e3:13:6b:86:7e:41:d3:2e:7d:18:db:6d:cb:a4:8c:ff:98:
         3a:66:0a:ee:b9:8a:c7:2f:33:d3:35:2e:55:ec:33:28:90:8a:
         a8:99:9d:6f:6b:45:fd:fd:8d:05:6a:34:35:ab:2f:75:b6:99:
         cb:3f:65:4e:c8:64:4d:c8:3c:b9:97:7f:4e:39:e3:2b:b6:aa:
         8c:c9:10:51:8c:3b:06:a7:f6:71:78:a2:57:7a:52:0e:6d:6f:
         48:36:33:12:94:4e:30:cd:b0:b3:a8:57:a5:cb:22:fc:03:e5:
         2e:f7:31:d5:29:bb:00:1f:80:60:14:99:2a:18:b3:bb:84:86:
         52:5e:d3:4b:ae:06:f4:89:aa:85:c6:fd:88:96:8e:a4:ec:5e:
         3c:5c:30:46:ec:9e:8e:a5:85:6b:97:e3:bd:c5:26:5d:09:88:
         ae:ec:c6:91:30:83:66:65:81:67:9e:d7:f6:d5:59:49:6f:90:
         32:7b:1e:df:4c:8c:a7:54:81:a9:52:83:76:9a:ec:40:49:95:
         9f:97:72:75:8a:e5:bc:60:49:12:0c:93:80:de:8d:5a:64:cf:
         a0:43:6e:63:2b:51:82:35:48:d2:f9:3e:81:d0:cc:71:7b:8a:
         cd:f5:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:11 2025 by rpki-client