Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File:                     C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier:          1QqyzwMXeBGkzBmeLj66PQ04BKmKV1bzRi62IM/CU+E=
Subject key identifier:   53:27:42:C5:46:D3:33:C0:21:3A:5B:15:1B:E4:FA:43:21:DE:7C:84
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number:          061D
Signing time:             Sun 02 Nov 2025 22:52:16 +0000
Manifest this update:     Sun 02 Nov 2025 22:52:16 +0000
Manifest next update:     Sun 09 Nov 2025 22:52:16 +0000
Files and hashes:         1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: danaI1uU4ubx1m1lElSaOaLUnvAavScpz0tkwDn7rxU=)
                          2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=)
                          3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=)
                          4: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Nov  2 22:52:16 2025 GMT
            Not After : Nov  9 22:52:16 2025 GMT
        Subject: CN=6907e0a0-bda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:52:00:a7:34:41:ef:e6:77:6e:be:96:47:
                    72:12:4d:57:78:68:fd:3f:eb:cf:1a:80:b8:e4:4a:
                    ad:1e:20:ea:67:91:80:68:05:67:4a:96:2e:bb:63:
                    90:fa:62:36:69:4b:99:0f:fa:ef:3e:d0:cb:7f:e0:
                    45:94:b4:84:7a:f7:1c:14:e6:74:30:6b:06:93:8a:
                    33:5a:93:e5:2f:25:f7:b2:54:73:83:7c:e4:f3:3b:
                    a7:d4:eb:a4:72:47:db:45:de:99:43:f2:90:45:a3:
                    c9:b8:b8:4a:4d:bf:af:37:ca:03:5e:f3:f3:70:76:
                    37:79:f6:94:5c:0f:9a:75:15:5c:8c:c9:3d:e2:c8:
                    43:dc:d3:99:7f:ce:55:6d:21:ab:cf:8c:b7:bb:dd:
                    81:fc:45:db:83:b3:f4:0d:c0:f6:ca:7b:e3:eb:23:
                    c4:8d:70:2c:54:3e:73:1f:80:18:df:70:12:d1:c2:
                    ac:b5:14:00:2e:76:2d:30:e0:fd:46:0a:53:62:ed:
                    fe:52:73:d5:fa:78:4b:ec:47:c9:83:67:10:fa:c0:
                    2a:ea:ba:ca:76:b6:05:11:d4:75:97:2d:89:72:c7:
                    e5:45:ff:36:5e:f9:bf:46:3c:2e:03:85:d8:92:60:
                    8a:a4:a3:be:0c:b4:89:fe:e7:c8:42:81:0d:82:a3:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:27:42:C5:46:D3:33:C0:21:3A:5B:15:1B:E4:FA:43:21:DE:7C:84
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:e0:96:5f:d6:ee:d1:ad:c4:25:5a:cd:34:f9:d3:85:dd:
         57:9f:e5:10:be:4f:06:55:31:af:3c:37:dc:09:e5:60:c9:a6:
         ca:67:af:b4:98:e8:73:c9:be:e4:ff:85:24:80:c6:4a:b8:1d:
         59:3c:ec:96:c4:ea:8e:f9:0f:40:00:6a:15:b2:29:55:3d:48:
         a0:3b:ae:64:a7:2e:d5:50:0c:27:5f:cc:d8:68:16:53:93:69:
         02:24:d6:7d:48:31:f9:25:e4:28:d1:4d:27:98:a6:df:09:e3:
         cf:e5:60:96:34:01:d5:16:b6:7e:68:ec:fd:26:78:24:f3:5d:
         ca:ea:50:45:9c:f2:ad:38:93:b1:b3:bb:5d:e6:d3:a5:ec:97:
         84:8f:32:bf:b7:91:d9:c3:1c:38:4b:ce:a0:d6:9a:21:47:2f:
         54:4a:cd:6c:00:9b:e6:4a:9b:c4:12:73:34:dc:7e:82:df:e5:
         62:ae:ea:29:99:d6:db:fe:15:42:1b:36:80:f8:a7:27:8a:d5:
         71:c7:30:69:12:3e:3e:43:a4:38:0f:f6:c3:8a:17:59:f5:a7:
         1c:8a:65:ea:f8:3e:90:be:b6:7e:4c:f7:59:ef:fe:a1:a0:b9:
         f0:16:9d:23:fa:5f:ed:08:15:5b:04:3d:45:bc:79:f1:cd:1d:
         42:e2:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:17:05 2025 by rpki-client