Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
File:                     J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json)
Hash identifier:          u4Dhee7geqcPkncumThRwRLICrpq608tDdxGwdUhZ2U=
Subject key identifier:   58:F0:05:FE:84:7C:6A:4D:91:D7:CB:EC:EB:E6:E2:37:01:C6:A1:30
Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45
Certificate issuer:       /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
Manifest number:          0152
Signing time:             Wed 05 Nov 2025 04:20:43 +0000
Manifest this update:     Wed 05 Nov 2025 04:20:43 +0000
Manifest next update:     Wed 12 Nov 2025 04:20:43 +0000
Files and hashes:         1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: O31unXQX0IgEcX/AXHiNNBnuxtn/G2bR5YiS4mAUabM=)
                          2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl
                          rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
        Validity
            Not Before: Nov  5 04:20:43 2025 GMT
            Not After : Nov 12 04:20:43 2025 GMT
        Subject: CN=690ad09b-75de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:e9:1e:7a:e1:4e:d4:1e:b6:76:3e:08:f7:
                    8d:67:78:d0:1d:94:26:1b:46:6f:8a:0f:8c:2c:6c:
                    5b:36:d7:c2:61:0e:12:8e:35:23:eb:0f:86:97:c2:
                    ee:6c:13:e3:38:11:d1:b7:84:99:90:27:f5:ad:9e:
                    ec:69:50:a8:70:c7:a0:0d:fa:72:7b:67:b0:08:32:
                    92:80:76:f8:c9:c4:d2:22:76:61:65:bc:17:bd:e2:
                    fc:d2:53:2e:bd:29:ff:11:cf:c2:8f:ce:de:35:9d:
                    af:5f:ef:88:e4:7b:05:7c:a5:65:b2:b8:f3:56:4a:
                    84:b7:ef:14:66:cc:47:51:e7:60:22:bc:df:7c:9b:
                    b1:95:b7:8a:71:6d:01:aa:09:b1:e8:3f:60:8b:aa:
                    cc:81:23:54:1d:4d:12:61:14:b2:2f:12:db:a3:82:
                    2b:25:98:20:3b:0d:6d:aa:a3:1d:2e:50:db:db:8c:
                    bf:de:cb:31:b5:1f:75:eb:2a:78:5c:1d:86:96:3f:
                    c9:ba:8d:b9:db:e1:62:2e:c3:a2:b0:3a:0a:73:a4:
                    82:f7:1d:a3:85:ef:d7:57:37:0b:65:ff:a3:0c:a1:
                    58:b1:ee:29:d1:15:99:c5:af:4a:28:0a:7b:9f:44:
                    cc:41:86:4a:6b:64:50:05:ff:de:f1:84:b0:24:d0:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:05:FE:84:7C:6A:4D:91:D7:CB:EC:EB:E6:E2:37:01:C6:A1:30
            X509v3 Authority Key Identifier:
                keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:7c:36:cf:2b:10:ee:b3:dd:0f:5a:40:65:60:51:2f:86:
         c7:d6:91:82:39:4e:48:ee:0a:bf:5f:d7:cd:a0:6e:77:10:90:
         91:5b:70:1d:3a:3c:f2:d4:33:f1:b3:86:02:67:36:1d:be:3b:
         4b:fd:39:bd:80:18:ab:87:45:6d:2f:90:d2:9a:69:8a:e2:ff:
         95:e7:b1:64:dc:d9:43:ae:b0:c1:f5:60:bb:1a:48:ef:d7:4e:
         10:17:49:f5:51:ac:63:13:c8:3f:34:20:e8:52:84:46:59:ea:
         08:e1:79:e2:5c:f1:9e:c4:1b:ea:47:27:62:cc:42:4e:2b:c5:
         26:07:76:29:6e:1f:5d:2c:bd:2c:89:a1:59:e6:d3:86:1e:ec:
         01:9f:55:ba:f7:8c:d2:35:0d:55:27:b8:f1:17:26:73:db:f5:
         d7:aa:7c:f2:fe:5c:79:d3:d2:6b:df:a9:a5:c7:6c:ed:fb:2a:
         39:00:2c:08:f2:ed:8b:8f:04:ef:32:e5:15:47:7f:16:9d:0f:
         f0:13:e6:98:5f:87:55:9a:b8:c6:5e:76:42:01:77:68:d0:98:
         29:09:a1:41:a9:0b:a9:a9:1a:ab:64:a9:e4:e1:bd:06:1a:48:
         10:a3:25:48:18:28:7c:be:cf:de:3f:ab:b5:37:d7:0e:c3:2c:
         26:01:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:54 2025 by rpki-client