Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File:                     kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier:          V0ojfVwjNbDXHJuRPgftS2F4c04gMxDRfeeT/UW+Geo=
Subject key identifier:   B1:4E:C5:D7:E9:AC:FE:02:8F:96:6E:1E:E4:A0:27:D3:9F:C4:28:AE
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number:          F6
Signing time:             Mon 03 Nov 2025 05:27:42 +0000
Manifest this update:     Mon 03 Nov 2025 05:27:42 +0000
Manifest next update:     Mon 10 Nov 2025 05:27:42 +0000
Files and hashes:         1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: a85xz+AjaPlB6lgF762sIlzZsggI85Cu+9wevRnzD28=)
                          2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I=)
                          3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M=)
                          4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: /OrLVPVfTQAPE0kSOqhjwV7inTaQkqbRHnBk9gH3iZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Nov  3 05:27:42 2025 GMT
            Not After : Nov 10 05:27:42 2025 GMT
        Subject: CN=69083d4e-4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:16:03:47:90:37:2f:9d:73:df:41:5a:7a:
                    30:7d:ac:7b:d6:db:74:6f:a8:14:57:3d:db:1e:55:
                    af:6c:95:db:bc:3a:48:4b:8f:20:39:77:6e:ad:9c:
                    54:18:69:43:ef:79:04:a2:b1:ed:e5:88:fa:0f:7c:
                    03:32:70:c9:8b:17:40:42:ae:80:0f:41:02:eb:2d:
                    50:30:ba:2c:20:7c:cb:01:30:c2:65:e8:11:1d:53:
                    ba:24:eb:be:a8:1e:39:4b:71:5e:09:76:55:cf:96:
                    65:bb:c1:56:79:5f:18:ea:d2:e1:c7:f3:e2:c7:73:
                    99:6c:dc:cd:9c:bf:be:35:10:af:41:6c:84:cf:32:
                    4c:e5:e8:27:5e:84:64:61:0b:10:ea:6e:0c:80:a6:
                    8f:d1:b7:41:fd:2b:fc:4e:2e:f9:ad:78:91:bf:e2:
                    80:6c:64:33:b4:dc:75:f5:5d:8b:92:cd:d2:a4:9c:
                    1c:33:9c:a8:86:60:72:ab:d2:d6:05:1a:99:70:58:
                    f1:fd:4e:bb:12:83:c4:ab:b0:53:bd:33:d2:55:41:
                    c9:d1:1c:10:92:b8:6e:e3:97:2b:81:90:2b:3d:66:
                    93:0c:52:cb:1e:e5:1b:4d:95:93:47:0c:14:2f:06:
                    65:85:7d:25:58:01:83:a7:5c:53:7c:16:5e:d0:a8:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4E:C5:D7:E9:AC:FE:02:8F:96:6E:1E:E4:A0:27:D3:9F:C4:28:AE
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:4f:00:fb:5b:90:8c:dc:43:09:00:1e:38:3f:99:da:5c:
         07:07:b0:2e:8c:d5:88:51:8f:e5:c4:a2:ee:f3:89:cf:20:e8:
         59:a3:d2:73:6e:4d:88:4d:03:dc:d5:d8:7e:a1:69:c6:3f:ee:
         0e:df:5b:54:b4:09:ba:93:61:37:30:7c:3b:95:90:58:05:57:
         77:20:16:c4:6b:f8:22:2b:8b:af:27:a7:2d:94:63:c6:5c:ab:
         ca:9c:cb:43:07:64:0c:b7:f3:25:7c:3a:bf:1e:9a:32:a6:cb:
         ea:47:27:59:92:bc:97:ef:5a:4d:c5:f8:2c:29:f2:3d:49:f5:
         fc:e3:fc:70:03:1f:da:50:7f:07:8f:13:30:23:42:c1:1a:13:
         07:da:5f:36:c5:b6:c0:c1:fd:56:c9:29:ae:c7:cb:ad:e1:92:
         00:e4:67:65:5a:ec:54:21:f8:17:5b:fc:af:c0:1d:c7:fc:2c:
         09:26:a1:69:ce:02:20:9e:11:34:9e:10:e4:84:d2:57:63:2a:
         65:11:67:74:3f:96:a7:a6:a9:1d:c1:c8:a9:fd:ea:57:0c:a2:
         c1:57:ed:4f:11:ed:c3:2b:3d:a4:ea:2c:cd:88:0f:90:da:ea:
         28:c4:49:7a:f8:ff:4b:e0:00:0a:b5:83:b4:70:80:a1:61:76:
         51:60:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:24 2025 by rpki-client