Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          Vu6W+1HCbJI4Oky4A5IT75CLDaTtVhyONRsqeaTz3m8=
Subject key identifier:   50:7E:3A:A6:2D:0C:C1:F0:27:BB:1B:BD:95:53:AB:6E:1D:6F:1E:47
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0A9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          0A94
Signing time:             Tue 04 Nov 2025 19:39:34 +0000
Manifest this update:     Tue 04 Nov 2025 19:39:34 +0000
Manifest next update:     Tue 11 Nov 2025 19:39:34 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: ylIZkJoVuihyj/9lW6zw8FlD/rYqWwhpwegCH3gfm5A=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: /yimLjurJ7sHVYzGxlJmL9G5S578rgeQv3crr3uJYA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717 (0xa9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: Nov  4 19:39:34 2025 GMT
            Not After : Nov 11 19:39:34 2025 GMT
        Subject: CN=690a5676-97be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:dc:10:9c:1e:73:fe:b3:42:ee:be:28:b1:
                    c0:98:ed:65:6f:1d:fb:ea:4c:16:7d:69:68:d6:b9:
                    33:6e:90:7c:11:ce:67:d2:bf:db:b6:43:ba:40:15:
                    82:16:8e:6d:d9:88:6d:19:17:74:a9:e1:fc:10:8e:
                    10:23:6e:97:78:92:a1:1e:19:f3:d5:a6:e6:c0:23:
                    97:eb:1f:53:d0:80:64:41:7a:83:bc:5f:94:36:c9:
                    01:3d:ad:09:c9:81:30:64:1e:b3:2b:5a:48:43:1f:
                    dc:38:b9:58:4c:fb:94:1d:33:c4:2f:8f:b7:9c:95:
                    58:0c:c3:1b:63:ac:ae:6b:d9:2a:54:36:c7:ab:da:
                    ab:1e:5c:14:fc:ee:b4:1a:cf:a4:2f:7c:72:fa:45:
                    7e:fd:a9:08:04:4f:8b:34:d9:9a:16:64:fd:40:c5:
                    62:47:61:4c:8e:82:b6:f3:fb:64:04:58:58:19:fb:
                    03:03:d5:d9:11:70:ff:eb:83:db:85:a9:a2:0b:9f:
                    8c:43:cc:eb:71:8b:8f:67:d2:61:07:44:9d:c9:d2:
                    d2:9d:d7:17:23:86:86:94:b3:25:be:e6:7a:a5:e6:
                    ab:2a:86:a5:9b:f0:e6:a4:85:c8:4f:7a:c0:c7:f2:
                    59:57:c7:cc:45:68:d9:30:13:f3:cc:ee:26:90:28:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:3A:A6:2D:0C:C1:F0:27:BB:1B:BD:95:53:AB:6E:1D:6F:1E:47
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:d1:16:0c:dc:a5:c2:76:bf:38:11:32:ce:bb:ab:2e:71:
         f9:03:c0:60:69:84:d1:48:f7:72:8d:e3:a0:d4:c2:6b:26:28:
         9b:9d:77:f5:24:a9:a8:6c:a8:95:a3:39:c5:98:85:47:7f:1d:
         1a:db:dd:cf:1b:e2:d6:be:29:8d:56:1a:ad:cd:c7:0c:cf:63:
         1c:70:dd:3e:7d:08:19:c7:a8:fb:05:2e:31:9f:db:e6:15:35:
         8c:1e:0f:99:7a:48:c7:85:66:c1:ae:83:bd:b9:c9:82:8b:55:
         94:89:b0:44:58:94:e2:ad:25:52:1a:2e:6c:ff:c6:20:46:7a:
         93:c8:50:db:08:c8:a0:b6:ee:47:ff:32:56:3b:1d:07:86:35:
         c0:1a:ec:86:47:2a:23:fa:24:b5:09:63:09:03:05:5a:fb:f6:
         8b:12:48:cc:72:d0:fc:06:a0:0e:3d:d2:6a:ee:63:6a:e2:0f:
         87:74:77:14:10:b7:19:9d:5d:c5:16:74:ad:50:8f:f4:be:cf:
         78:ac:58:30:49:b1:6d:84:e8:c7:69:12:f7:fa:25:eb:6d:b9:
         13:c0:c9:d1:87:7b:bc:51:de:39:39:8c:c5:67:ae:59:9d:55:
         4a:cc:a9:9d:15:6b:65:97:3e:9a:44:44:63:bf:ed:ad:d4:59:
         7a:5d:73:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNFRUIxMTAvBgNVBAUTKEU5Mjg1Q0EyMEY5RjhCRkZBQzdBOTczQjQ5RTA3RUND
NDI1QjUxMTgwHhcNMjUxMTA0MTkzOTM0WhcNMjUxMTExMTkzOTM0WjAYMRYwFAYD
VQQDEw02OTBhNTY3Ni05N2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv77cEJwec/6zQu6+KLHAmO1lbx376kwWfWlo1rkzbpB8Ec5n0r/btkO6QBWC
Fo5t2YhtGRd0qeH8EI4QI26XeJKhHhnz1abmwCOX6x9T0IBkQXqDvF+UNskBPa0J
yYEwZB6zK1pIQx/cOLlYTPuUHTPEL4+3nJVYDMMbY6yua9kqVDbHq9qrHlwU/O60
Gs+kL3xy+kV+/akIBE+LNNmaFmT9QMViR2FMjoK28/tkBFhYGfsDA9XZEXD/64Pb
hamiC5+MQ8zrcYuPZ9JhB0SdydLSndcXI4aGlLMlvuZ6pearKoalm/DmpIXIT3rA
x/JZV8fMRWjZMBPzzO4mkCjFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB+OqYt
DMHwJ7sbvZVTq24dbx5HMB8GA1UdIwQYMBaAFOkoXKIPn4v/rHqXO0ngfsxCW1EY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0VFQi83MDZEODQyNDY5
QjAxMUVBQTRCMjk5NDJDNEY5QUUwMi82U2hjb2ctZmlfLXNlcGM3U2VCLXpFSmJV
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZTaGNvZy1maV8tc2VwYzdTZUItekVKYlVSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0VFQi83MDZEODQyNDY5QjAxMUVBQTRCMjk5NDJDNEY5QUUwMi82U2hjb2ctZmlf
LXNlcGM3U2VCLXpFSmJVUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBT1dEWDNylwna/OBEyzrurLnH5A8BgaYTRSPdyjeOg1MJrJiibnXf1
JKmobKiVoznFmIVHfx0a293PG+LWvimNVhqtzccMz2MccN0+fQgZx6j7BS4xn9vm
FTWMHg+ZekjHhWbBroO9ucmCi1WUibBEWJTirSVSGi5s/8YgRnqTyFDbCMigtu5H
/zJWOx0HhjXAGuyGRyoj+iS1CWMJAwVa+/aLEkjMctD8BqAOPdJq7mNq4g+HdHcU
ELcZnV3FFnStUI/0vs94rFgwSbFthOjHaRL3+iXrbbkTwMnRh3u8Ud45OYzFZ65Z
nVVKzKmdFWtllz6aRERjv+2t1Fl6XXOi
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:42 2025 by rpki-client