Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          zIlvuRBPTPLeQAVMIkq9vqpgMFVqmoROZCkQGg2W9uQ=
Subject key identifier:   04:EB:26:D0:64:FB:85:81:2B:58:AC:70:7A:5A:F1:BE:23:9D:1E:1C
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          069F
Signing time:             Sun 02 Nov 2025 22:20:45 +0000
Manifest this update:     Sun 02 Nov 2025 22:20:45 +0000
Manifest next update:     Sun 09 Nov 2025 22:20:45 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: 9hGxeDdZhv38wImEZtu2BZ1il/jFwUPcUDGaTJmizII=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
        Validity
            Not Before: Nov  2 22:20:45 2025 GMT
            Not After : Nov  9 22:20:45 2025 GMT
        Subject: CN=6907d93d-ba5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:6e:0b:7a:f1:94:44:b5:a4:a4:c2:2c:1e:
                    07:39:2c:36:ff:48:88:05:de:80:a7:5c:06:71:23:
                    53:0a:dd:3b:c8:6e:08:dd:e5:69:5b:7e:ae:a9:da:
                    60:02:1b:ba:b2:41:e6:40:48:90:cd:ae:43:0f:7d:
                    59:6c:08:6e:09:b5:42:2a:fe:af:17:d4:b7:b3:1a:
                    f3:10:c1:f9:15:c3:fd:31:3f:92:f6:22:9f:fe:10:
                    39:fb:81:d9:7c:15:c1:a8:22:36:95:ae:f0:cf:4e:
                    42:18:b0:5a:ef:e5:60:cb:90:40:9c:79:48:20:18:
                    26:ff:d2:d6:73:61:36:ee:26:f9:10:96:24:fd:01:
                    38:38:56:0c:ac:28:0b:f9:a8:9a:30:35:bb:5b:38:
                    c6:1a:92:cc:e8:89:3b:09:29:50:6e:2e:75:d0:72:
                    60:5a:8b:1d:50:fa:b8:ce:55:7b:5d:59:0a:ac:e8:
                    5e:02:06:0f:1c:c8:d8:04:7c:e7:35:71:80:5e:1a:
                    8d:73:bc:6f:c9:15:c1:1c:58:8d:d8:e1:61:3f:96:
                    b2:a8:9b:94:2f:65:71:c3:e7:bb:56:f2:7a:b3:79:
                    a1:0f:21:62:4e:1e:38:56:e1:90:d1:09:26:5a:a1:
                    0e:d2:0e:14:95:56:3d:05:10:dd:28:16:2e:b2:5c:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:26:D0:64:FB:85:81:2B:58:AC:70:7A:5A:F1:BE:23:9D:1E:1C
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:5e:39:9b:73:48:5c:fb:36:0c:0c:bf:46:0e:62:6e:e9:
         49:79:9a:22:3e:6a:48:fd:ca:0e:97:94:d1:b2:a0:d9:16:b7:
         61:d7:93:a5:8a:65:d9:27:7e:77:93:6b:71:29:61:67:e0:94:
         5b:e1:4f:6c:30:60:38:63:a4:4d:32:6d:a7:98:d5:f1:38:72:
         b9:0b:a5:b7:64:02:e2:c3:d1:29:06:7e:60:37:c8:ce:51:fe:
         55:13:61:f1:9d:d8:d4:7b:cc:63:72:50:54:90:56:13:70:9b:
         c5:75:c3:34:d1:73:20:5a:e3:cc:16:84:08:21:74:40:f1:ae:
         56:2c:79:94:0d:63:41:c3:5d:94:6d:08:c4:31:b3:00:79:1c:
         bf:df:66:2c:f4:bf:3e:7b:63:4d:b6:17:61:7d:49:6d:bd:54:
         04:52:03:c7:7c:ce:48:75:2c:61:b4:94:39:36:92:e1:b9:cf:
         4d:ef:e4:57:2f:4b:ab:24:fd:10:55:35:f3:94:d8:fe:b1:98:
         63:47:1a:8a:23:be:4f:b1:dc:98:31:7a:2a:63:40:bc:46:74:
         81:fa:db:53:de:5a:b5:d9:01:3e:58:cc:45:7a:91:55:70:11:
         5a:84:17:cb:8f:ff:c4:85:c8:01:8c:7c:e8:ce:9e:83:8b:a6:
         91:04:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:33:10 2025 by rpki-client