Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
File:                     6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json)
Hash identifier:          MhJfKKBE7doftuzT1x1nWA4IF3pPP0foKmrXoiXz4dw=
Subject key identifier:   8B:E9:01:1C:8C:24:9D:60:5F:34:86:FF:23:29:78:EF:1D:9A:7A:04
Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Certificate issuer:       /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
Manifest number:          01C0
Signing time:             Wed 05 Nov 2025 03:05:07 +0000
Manifest this update:     Wed 05 Nov 2025 03:05:07 +0000
Manifest next update:     Wed 12 Nov 2025 03:05:07 +0000
Files and hashes:         1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: b611SCcAehioRcPLU9zU6CumORCF/5VhlA1uiMNerN0=)
                          2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: MXFdujZ+nAPECH8UBuQy5IelDh540oVpA1herCcQ+54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
        Validity
            Not Before: Nov  5 03:05:07 2025 GMT
            Not After : Nov 12 03:05:07 2025 GMT
        Subject: CN=690abee3-4b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:97:0f:25:6d:5c:18:08:ec:f5:de:b0:69:
                    a0:6c:3a:b6:ec:35:97:b0:48:44:82:76:d6:a8:85:
                    a5:80:87:dd:d0:9e:54:f7:7d:6b:9c:62:3b:a7:eb:
                    47:a7:ca:9b:ce:cb:1c:97:db:4f:ff:96:83:68:84:
                    9b:71:4c:9a:72:53:7d:ee:84:bb:87:eb:cd:7f:93:
                    a9:2d:09:12:6d:07:6e:b6:f1:a7:e6:c8:a4:2c:98:
                    ef:47:9a:5a:4c:f6:2c:75:5c:b2:8d:44:83:66:6f:
                    32:4b:9d:aa:9d:3c:56:dc:d2:44:83:d7:67:30:78:
                    14:55:54:b9:d2:83:03:3e:4e:fb:f8:b4:ab:4b:10:
                    4d:c5:76:82:54:fc:f4:2c:ae:01:3f:56:b1:bd:04:
                    ed:67:a7:fc:ef:9c:3c:fa:20:68:b1:90:e6:bb:35:
                    e6:07:f3:88:b6:aa:ac:3b:4e:9e:aa:fa:5f:5a:0b:
                    69:13:94:25:18:c8:c1:94:5a:b5:03:96:06:86:2e:
                    04:0b:1a:ed:bc:2a:a8:00:93:b8:35:5e:e4:20:72:
                    59:ad:08:fa:22:f1:40:64:de:c3:81:ae:a9:98:d5:
                    76:96:2f:3c:2c:de:ea:89:31:71:36:e7:4c:a6:32:
                    b1:ac:da:8f:2a:92:1f:fa:25:8b:83:8e:32:f8:9f:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E9:01:1C:8C:24:9D:60:5F:34:86:FF:23:29:78:EF:1D:9A:7A:04
            X509v3 Authority Key Identifier:
                keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:57:a3:a1:10:b4:79:d0:c2:04:a3:2a:92:d7:2a:aa:c8:
         8c:84:5f:09:18:26:4b:68:2a:5a:27:f3:f0:33:60:83:1f:c6:
         57:b0:46:fa:b0:b8:74:42:f5:8f:18:94:a3:a4:25:e1:1a:ae:
         58:04:68:2c:01:81:72:b3:56:21:16:d4:18:ca:e0:a5:50:9f:
         f1:d6:9d:fe:e9:cf:a1:89:c7:da:1a:16:3a:6b:25:4d:6f:79:
         be:f2:0f:47:a7:7c:cd:01:44:b9:be:cd:d6:f0:49:54:6a:bd:
         fa:f8:09:69:55:7e:f1:f9:6a:8c:49:02:a9:ec:b9:99:da:8e:
         d4:7e:80:fb:01:20:3e:ac:44:22:a5:47:fa:8e:57:fc:be:6c:
         fa:12:5e:32:00:60:bf:75:fd:09:af:9a:60:77:81:40:46:8a:
         87:60:06:dc:e5:42:56:7e:6e:d1:1c:d5:97:1f:f3:3f:d9:c0:
         0c:00:4d:32:53:d3:55:44:cc:bb:48:31:15:d8:ce:c4:3f:d7:
         85:f2:60:00:c9:20:af:47:a4:c5:61:40:c3:7b:9f:28:72:15:
         b3:3e:77:cb:ce:0a:13:e4:88:96:d9:95:54:22:ac:3e:4a:ef:
         75:f2:4f:20:b3:ec:e8:78:03:87:6c:06:12:de:af:33:13:9b:
         0d:61:e2:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYxMTkxMTAvBgNVBAUTKEVCMEFGNDczMTJERjE0QkY5MTNBQ0NERERGMENEQzNE
M0MxNUVBNjAwHhcNMjUxMTA1MDMwNTA3WhcNMjUxMTEyMDMwNTA3WjAYMRYwFAYD
VQQDEw02OTBhYmVlMy00YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEOXDyVtXBgI7PXesGmgbDq27DWXsEhEgnbWqIWlgIfd0J5U931rnGI7p+tH
p8qbzsscl9tP/5aDaISbcUyaclN97oS7h+vNf5OpLQkSbQdutvGn5sikLJjvR5pa
TPYsdVyyjUSDZm8yS52qnTxW3NJEg9dnMHgUVVS50oMDPk77+LSrSxBNxXaCVPz0
LK4BP1axvQTtZ6f875w8+iBosZDmuzXmB/OItqqsO06eqvpfWgtpE5QlGMjBlFq1
A5YGhi4ECxrtvCqoAJO4NV7kIHJZrQj6IvFAZN7Dga6pmNV2li88LN7qiTFxNudM
pjKxrNqPKpIf+iWLg44y+J/dPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvpARyM
JJ1gXzSG/yMpeO8dmnoEMB8GA1UdIwQYMBaAFOsK9HMS3xS/kTrM3d8M3D08Fepg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjExOS85NEEyOTczNDA5
MjIxMUVFQjk3NzA2NkNDNEY5QUUwMi82d3IwY3hMZkZMLVJPc3pkM3d6Y1BUd1Y2
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ3cjBjeExmRkwtUk9zemQzd3pjUFR3VjZtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjExOS85NEEyOTczNDA5MjIxMUVFQjk3NzA2NkNDNEY5QUUwMi82d3IwY3hMZkZM
LVJPc3pkM3d6Y1BUd1Y2bUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdFVejoRC0edDCBKMqktcqqsiMhF8JGCZLaCpaJ/PwM2CDH8ZXsEb6
sLh0QvWPGJSjpCXhGq5YBGgsAYFys1YhFtQYyuClUJ/x1p3+6c+hicfaGhY6ayVN
b3m+8g9Hp3zNAUS5vs3W8ElUar36+AlpVX7x+WqMSQKp7LmZ2o7UfoD7ASA+rEQi
pUf6jlf8vmz6El4yAGC/df0Jr5pgd4FARoqHYAbc5UJWfm7RHNWXH/M/2cAMAE0y
U9NVRMy7SDEV2M7EP9eF8mAAySCvR6TFYUDDe58ochWzPnfLzgoT5IiW2ZVUIqw+
Su918k8gs+zoeAOHbAYS3q8zE5sNYeJl
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:17 2025 by rpki-client