Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          7U2UhIGbTuXPC1q3J06rCyNznCo4gQBA/nUPUXmgBoU=
Subject key identifier:   22:9A:73:86:8E:DE:57:40:16:0B:8E:D7:DF:36:80:C3:8E:6C:17:5D
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0ADC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0ABD
Signing time:             Sun 02 Nov 2025 19:28:22 +0000
Manifest this update:     Sun 02 Nov 2025 19:28:21 +0000
Manifest next update:     Sun 09 Nov 2025 19:28:21 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: m+DMO9HSTQAEztemCw26Wu/Dm+DgUAopgmld6kBEGi8=)
                          2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=)
                          4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Nov  2 19:28:21 2025 GMT
            Not After : Nov  9 19:28:21 2025 GMT
        Subject: CN=6907b0d6-88f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:80:7a:c9:7a:e7:ef:8c:58:8c:2e:ee:46:
                    e5:a0:9f:0e:ad:3a:d0:7a:a6:e6:0d:6e:e4:e0:91:
                    34:22:59:93:69:16:d8:b6:70:22:77:f6:02:9b:72:
                    03:7f:c7:81:cd:5f:d8:fa:43:e3:0c:23:2c:df:37:
                    c7:63:12:24:cd:ae:17:15:d9:5f:32:66:6f:ba:1e:
                    05:35:38:47:47:7e:f3:cc:f6:9f:a3:01:aa:65:fd:
                    e3:aa:62:86:1c:0c:bb:d1:67:50:a2:76:93:dd:a6:
                    ce:83:b1:9f:dd:e2:2f:7d:c0:ac:e9:2d:2d:0e:da:
                    b9:47:58:ff:3a:4e:85:1f:48:39:c1:1f:a5:03:97:
                    81:3b:b1:ff:e1:e9:3c:a4:81:d2:4d:d2:5f:ed:65:
                    0a:cd:47:f8:14:4d:d9:6f:1b:1e:36:09:dc:8f:d3:
                    9b:fb:e2:11:04:68:48:e5:e8:d5:3c:2c:2a:0c:6e:
                    41:f5:56:02:3d:97:14:39:ec:38:f3:96:f5:84:77:
                    47:8a:fc:ef:d8:a9:06:27:be:a5:31:5b:1e:bf:c6:
                    a5:98:ae:8f:a4:2b:18:9d:04:b6:0f:30:c4:ee:2c:
                    e7:f5:41:e2:cc:e3:9a:be:dd:29:63:7f:0e:73:d2:
                    3e:5a:31:0d:64:60:46:f4:dd:d5:28:c0:6c:bd:3d:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:73:86:8E:DE:57:40:16:0B:8E:D7:DF:36:80:C3:8E:6C:17:5D
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:78:f2:ea:f4:33:9c:c8:80:24:7a:c2:fb:90:b8:8d:de:
         63:6c:a4:ce:17:d1:70:cf:2a:4b:e2:c3:81:f0:c0:f0:84:fb:
         32:8d:63:2d:43:80:9f:44:be:68:43:64:9e:2f:aa:2d:c1:cf:
         7f:fd:e7:ea:b5:9f:8c:3e:29:aa:d2:7a:42:b3:ae:6c:c5:fa:
         d4:07:9e:63:90:15:35:fc:da:70:45:9c:07:b0:ad:00:d1:48:
         7f:de:c9:76:4d:e8:d6:49:45:3c:47:65:f7:c7:7a:88:43:83:
         ad:89:56:f4:94:75:f7:2e:0e:2f:b2:21:8b:d3:dd:9f:3b:6d:
         f3:c0:05:3f:e4:56:e0:cd:e0:d8:73:92:ab:b1:3c:d8:f3:88:
         01:f3:22:20:af:aa:6b:1f:85:d5:dc:e5:82:ff:13:97:db:1c:
         02:54:be:e1:b4:47:ec:dc:04:e5:6a:5f:6c:19:90:10:b8:ef:
         cf:66:32:38:81:7d:f7:84:8e:50:2a:ae:26:92:ba:cc:ae:92:
         00:0b:24:e7:ad:a8:83:ab:61:a8:93:ae:1f:45:f9:41:e0:92:
         ca:30:e5:3f:81:52:e6:c4:61:50:96:ed:51:0b:32:99:f9:37:
         86:66:ad:98:3c:9a:97:9d:a4:07:60:cf:32:6b:0c:60:86:88:
         de:38:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:33 2025 by rpki-client