Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File:                     6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier:          PEesoxppYdCfNcZkh6nALvVM39znDlfXksRU/kl2Kks=
Subject key identifier:   C2:11:DD:7F:53:A4:97:F3:AB:CA:17:56:06:7C:75:19:F2:E4:B4:66
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer:       /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number:          023A
Signing time:             Wed 05 Nov 2025 01:58:23 +0000
Manifest this update:     Wed 05 Nov 2025 01:58:23 +0000
Manifest next update:     Wed 12 Nov 2025 01:58:23 +0000
Files and hashes:         1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: Vjb9X1ezYNk7yp2yB5nyK+b+TPszL1Ht57c3qfviBT0=)
                          2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: JPPg4axF52fUr6Imwg/bjNt0uzHT0+P65yVOXCd9Qfg=)
                          3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
        Validity
            Not Before: Nov  5 01:58:23 2025 GMT
            Not After : Nov 12 01:58:23 2025 GMT
        Subject: CN=690aaf3f-d2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:cf:40:68:b0:2b:8b:88:ba:c9:a7:d2:85:
                    2b:81:fd:fc:a6:84:bc:e0:a8:11:db:81:f9:56:d9:
                    ef:2e:49:6d:b4:d6:05:33:d4:77:b9:9f:45:65:c2:
                    1c:86:33:06:a9:4f:66:6b:4c:d2:43:f1:10:54:6e:
                    74:7c:56:c6:e0:31:be:3d:74:56:53:16:02:dc:dc:
                    7c:02:e6:a3:c3:63:65:e7:43:2d:9a:f2:d8:66:d6:
                    7f:d0:cd:ab:f7:02:30:71:74:85:84:72:72:02:9b:
                    bc:a0:41:2c:5f:37:90:6e:27:c7:4f:be:61:29:e7:
                    47:eb:98:de:4d:72:71:a0:54:61:f4:5f:fb:55:74:
                    04:fe:6e:b7:b7:e6:47:5c:9a:ee:f2:f2:07:c5:24:
                    f5:4e:4a:46:17:b4:ff:68:0b:d6:d3:bb:bf:a4:b7:
                    d3:39:be:88:b2:e4:e7:d7:83:b6:f1:08:36:ab:d6:
                    fa:91:72:ad:d9:46:b0:2b:ed:07:dd:08:58:b0:31:
                    a8:73:64:ac:26:61:be:46:7b:38:b9:ca:c6:38:85:
                    17:e1:e3:c9:45:76:80:39:f0:ca:e1:03:28:9d:17:
                    31:1d:ff:a2:15:a9:22:f0:c5:0f:92:f9:90:e4:43:
                    75:f2:75:72:a9:5b:32:40:e6:58:ca:d6:ca:ab:82:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:DD:7F:53:A4:97:F3:AB:CA:17:56:06:7C:75:19:F2:E4:B4:66
            X509v3 Authority Key Identifier:
                keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:72:f9:20:a1:0b:65:22:86:c5:fc:17:f6:ad:a7:36:dd:cf:
         9a:99:49:15:df:64:ec:e4:d4:a5:1b:95:3c:b9:58:33:37:95:
         a1:73:3c:0d:cf:0c:eb:82:17:37:a3:b7:82:f9:ea:c1:4c:4d:
         57:58:6c:17:52:41:f5:01:7d:82:dc:eb:30:36:44:4b:43:90:
         f4:7e:18:57:d5:0c:52:a5:55:82:47:2e:ac:01:b4:6b:43:fb:
         98:fa:92:c8:38:64:d8:13:20:68:79:29:9d:d9:3c:d7:fc:97:
         73:a5:e5:88:58:ba:7c:9b:c8:32:fb:30:80:1d:d6:a0:9c:89:
         a1:d6:9b:a2:67:d9:6f:a2:6f:a0:d1:3a:20:2b:cd:97:99:d5:
         d5:54:b9:0c:b3:db:ce:b4:3c:56:8b:10:2b:b7:77:27:95:e5:
         cc:ed:19:36:63:51:2c:a7:e8:01:c1:37:97:8d:9a:d8:84:de:
         95:65:b6:95:e3:a7:a5:65:c6:b3:02:d5:79:33:3f:7c:2d:ea:
         58:55:a1:73:86:a9:71:50:f1:f3:76:e8:09:ac:0c:3c:fe:44:
         5a:c1:58:f8:0b:90:d4:d9:71:af:1f:3d:c8:8d:94:27:bb:1d:
         72:7e:cf:88:e7:cf:66:42:72:bc:9d:74:be:fc:bf:f3:f8:4b:
         55:71:2f:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4
QjgwNjZDOEIwHhcNMjUxMTA1MDE1ODIzWhcNMjUxMTEyMDE1ODIzWjAYMRYwFAYD
VQQDEw02OTBhYWYzZi1kMmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqbPQGiwK4uIusmn0oUrgf38poS84KgR24H5VtnvLklttNYFM9R3uZ9FZcIc
hjMGqU9ma0zSQ/EQVG50fFbG4DG+PXRWUxYC3Nx8Auajw2Nl50MtmvLYZtZ/0M2r
9wIwcXSFhHJyApu8oEEsXzeQbifHT75hKedH65jeTXJxoFRh9F/7VXQE/m63t+ZH
XJru8vIHxST1TkpGF7T/aAvW07u/pLfTOb6IsuTn14O28Qg2q9b6kXKt2UawK+0H
3QhYsDGoc2SsJmG+Rns4ucrGOIUX4ePJRXaAOfDK4QMonRcxHf+iFaki8MUPkvmQ
5EN18nVyqVsyQOZYytbKq4LemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIR3X9T
pJfzq8oXVgZ8dRny5LRmMB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz
OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUJCMS82N0JFQTQwNjUzOUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWlls
b0hTbVczeXM3X0dMZ0diSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEcvkgoQtlIobF/Bf2rac23c+amUkV32Ts5NSlG5U8uVgzN5WhczwN
zwzrghc3o7eC+erBTE1XWGwXUkH1AX2C3OswNkRLQ5D0fhhX1QxSpVWCRy6sAbRr
Q/uY+pLIOGTYEyBoeSmd2TzX/JdzpeWIWLp8m8gy+zCAHdagnImh1puiZ9lvom+g
0TogK82XmdXVVLkMs9vOtDxWixArt3cnleXM7Rk2Y1Esp+gBwTeXjZrYhN6VZbaV
46elZcazAtV5Mz98LepYVaFzhqlxUPHzdugJrAw8/kRawVj4C5DU2XGvHz3IjZQn
ux1yfs+I589mQnK8nXS+/L/z+EtVcS+3
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:39 2025 by rpki-client