Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
File:                     6SWAZhXd5dmqRq915ntcH7cUamo.mft (raw, json)
Hash identifier:          KxxxMPFd4R0oMr1zYH6k1vIm+5PBdreJhDpxm0OrAJE=
Subject key identifier:   B4:72:87:DF:FA:8C:66:89:6B:86:D9:78:AE:BF:98:E9:7E:61:E7:39
Authority key identifier: E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A
Certificate issuer:       /CN=A918B3C9/serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
Manifest number:          01D3
Signing time:             Mon 03 Nov 2025 02:49:37 +0000
Manifest this update:     Mon 03 Nov 2025 02:49:37 +0000
Manifest next update:     Mon 10 Nov 2025 02:49:37 +0000
Files and hashes:         1: 6SWAZhXd5dmqRq915ntcH7cUamo.crl (hash: qY5G/SgifP9qORAo4RTTo0/DSyae/vXE5HIY0x4AoaU=)
                          2: 55DA06F8038D11EE81D68954C4F9AE02.roa (hash: iSjGEfcg5o0TpD25QvdPysJleeFq2djI0D9nFTHgM2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl
                          rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B3C9, serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
        Validity
            Not Before: Nov  3 02:49:37 2025 GMT
            Not After : Nov 10 02:49:37 2025 GMT
        Subject: CN=69081841-58f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:01:1b:bb:40:19:38:01:64:6e:f3:10:20:66:
                    bd:c9:dd:0d:d2:6e:98:0b:db:80:b1:e2:08:77:3e:
                    85:37:6a:c5:17:1f:f0:7a:84:e6:2a:b2:ea:4b:b4:
                    3e:d6:1d:eb:dc:72:06:8f:5e:cb:d5:55:af:57:69:
                    bf:70:da:53:b6:87:77:ac:03:c8:75:79:17:34:e1:
                    35:46:00:69:4d:d6:6c:a5:b8:5c:d0:43:bb:87:a4:
                    11:e2:00:fb:de:b3:6b:82:cb:c4:fe:c6:17:16:11:
                    b2:06:30:96:ab:cf:d6:b5:fb:ca:fa:20:f2:d5:24:
                    ea:79:d0:5e:d7:cb:ff:8f:04:18:f7:d2:6e:7d:bd:
                    17:c0:68:19:50:77:b5:93:eb:99:44:12:bb:1d:09:
                    eb:03:46:95:53:d9:d1:ae:5f:37:97:a8:8b:ee:3b:
                    09:36:94:bc:25:45:3f:43:52:3d:7b:d7:02:be:87:
                    cb:a6:3c:34:da:d3:c9:65:fb:31:13:33:a9:b2:5d:
                    7c:35:43:b2:0d:15:36:ac:7b:2d:a4:2e:44:a5:bf:
                    37:f7:57:cb:ef:ae:aa:5a:6e:ee:67:c7:e5:de:98:
                    41:b2:0c:01:9e:fb:0e:82:97:21:3e:aa:49:47:16:
                    23:c6:88:e9:48:e9:24:60:66:be:e8:4d:f4:d9:7a:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:87:DF:FA:8C:66:89:6B:86:D9:78:AE:BF:98:E9:7E:61:E7:39
            X509v3 Authority Key Identifier:
                keyid:E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:03:c8:67:11:45:50:4b:c4:71:8c:55:69:ac:2d:f0:ab:fa:
         96:1a:9f:36:73:3c:c8:93:f5:0d:7e:33:84:44:8b:26:27:b5:
         8f:f0:c2:ca:58:af:c2:bf:04:84:cb:28:df:79:5d:ce:5e:84:
         8a:bf:65:ef:0c:4f:68:c8:a6:3d:e8:6c:d3:c3:39:51:c7:36:
         f5:e8:e0:60:2c:cf:73:a0:b6:2b:49:df:3e:82:e8:b6:3f:87:
         2f:ef:77:49:64:0a:b4:e1:e3:97:48:33:c8:a8:04:2e:32:40:
         09:50:a9:3c:f1:ac:cc:c8:5c:cd:f0:7b:ad:2a:06:d1:dc:79:
         e0:c1:cb:80:95:b2:f9:cb:9b:0c:0c:88:5b:47:2e:6d:91:71:
         ac:87:4e:97:16:1f:a2:eb:4a:86:e3:fc:36:62:40:80:1d:ba:
         18:0b:16:5c:79:2e:12:ae:a9:b5:92:02:e0:14:9a:71:14:1d:
         73:cb:62:61:cc:a5:42:36:d5:1a:30:ef:f5:6e:21:4d:56:c7:
         bd:7e:b4:b3:a1:f1:d5:21:b7:aa:d1:0d:27:c7:9e:81:2b:1f:
         c5:4f:d0:64:ac:e9:17:17:c8:c6:d7:ff:b7:8c:af:a4:19:a1:
         dc:f0:73:01:d1:06:94:bc:8c:79:91:b5:70:bd:b3:70:69:b0:
         6e:45:91:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:47 2025 by rpki-client