Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
File:                     j6hk_qmvHMBaicsQ6i43MXBt8_U.mft (raw, json)
Hash identifier:          LcxSeKVHF4MbPkQcZkw3+3CFuqwIQeoiXeJsIEPrcs0=
Subject key identifier:   17:4D:16:D0:C7:56:7C:97:00:1A:10:24:AB:7D:D4:5E:00:97:22:B0
Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5
Certificate issuer:       /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
Manifest number:          15
Signing time:             Mon 03 Nov 2025 07:55:23 +0000
Manifest this update:     Mon 03 Nov 2025 07:55:23 +0000
Manifest next update:     Mon 10 Nov 2025 07:55:23 +0000
Files and hashes:         1: j6hk_qmvHMBaicsQ6i43MXBt8_U.crl (hash: OjwIy2/rotSmNxDUHjEPMID87l0c6CPLwCW+PU1qijM=)
                          2: 8121DCA49DF611F0B7D5393FC4F9AE02.roa (hash: 9g7OIf/aUpSy1rCWca9ZMugo81QHot1HlcLobRXWLTE=)
                          3: 0B1E45B49DF711F09C653340C4F9AE02.roa (hash: vIsigsIWJxpolid0KI36h1A1tKYdEORqEUTOoyk6qAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl
                          rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
        Validity
            Not Before: Nov  3 07:55:23 2025 GMT
            Not After : Nov 10 07:55:23 2025 GMT
        Subject: CN=69085feb-da31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:c8:f6:d7:4d:40:d2:14:62:e6:ca:29:1a:
                    f6:be:2c:cf:59:b6:d0:a3:a9:d2:1d:4b:41:91:94:
                    d8:9e:3a:7f:4e:56:ea:9d:bf:60:63:64:38:8e:93:
                    fa:b5:e0:fb:24:ee:36:35:a3:f8:f2:73:69:7d:3a:
                    c7:ad:15:21:fd:db:fe:8b:43:51:3d:01:36:88:50:
                    2d:3d:9e:1e:38:15:12:cf:1a:de:ab:1a:52:8b:21:
                    f9:67:20:ed:d7:0b:ad:57:f0:37:68:b3:4a:69:b3:
                    79:f4:75:54:91:cc:11:4c:e0:6e:d3:82:fe:81:3f:
                    a1:be:f0:81:9b:1b:80:cc:6a:18:5c:0c:78:5a:7c:
                    0f:f2:38:db:67:0d:05:74:ab:0e:3a:a0:0a:e7:47:
                    40:02:85:ed:b6:78:2f:2f:3c:55:61:63:d3:f2:0a:
                    d1:37:37:d4:52:2b:bf:db:e4:68:13:f9:f5:cc:fb:
                    5b:7f:7f:ce:13:4a:cc:3d:22:4d:ae:d4:60:cd:68:
                    bf:8c:bc:96:80:ab:58:0e:72:d6:99:93:2d:db:98:
                    ea:66:3a:77:0c:dd:90:eb:e6:ad:95:08:d7:c6:bf:
                    6f:8e:d3:27:65:e1:64:9a:f3:a4:84:7e:ca:e6:6d:
                    fa:55:88:9e:1e:a2:8c:31:0f:cd:31:d5:62:2f:3d:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:16:D0:C7:56:7C:97:00:1A:10:24:AB:7D:D4:5E:00:97:22:B0
            X509v3 Authority Key Identifier:
                keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cd:a2:6c:f2:b6:29:4b:08:ca:e5:72:92:89:f2:1e:44:6e:
         6f:26:5d:4c:83:d6:99:17:a2:7c:30:bc:28:4a:d8:ea:bd:f8:
         27:35:bb:f2:42:d4:6b:3d:c0:54:4e:0d:39:8b:ff:6d:95:f2:
         67:d0:96:de:7a:28:61:da:0a:6d:00:3c:9f:59:f0:95:26:08:
         fd:1e:3c:1e:cb:db:82:67:e8:8e:ee:3b:57:ea:05:5a:d7:23:
         12:7b:ed:34:21:36:00:4c:db:4b:ef:0a:5d:dc:31:fa:4d:f8:
         b5:de:b5:96:a3:ab:28:51:29:38:86:dd:c3:69:56:c3:a3:aa:
         56:3b:3a:da:0b:31:e0:e3:c7:d3:38:04:bb:95:b3:dc:bb:ca:
         9d:68:f8:03:eb:6a:3c:f8:79:21:c7:b0:b9:13:76:79:ef:df:
         8f:d8:ce:53:98:2a:ac:02:51:3e:78:48:7d:9b:28:ab:79:e6:
         e4:3a:46:ca:52:14:fe:10:c4:af:14:10:5f:33:39:03:50:4f:
         fe:10:56:98:54:6e:93:74:da:96:79:b1:b2:6f:eb:bb:59:71:
         19:a9:dc:c1:24:4c:89:ec:ac:93:6e:a9:4a:c0:f3:88:ea:be:
         35:4a:da:47:02:00:55:ef:f9:f3:01:0c:ad:b3:09:05:f9:d9:
         83:2a:7e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:51 2025 by rpki-client