Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
File:                     6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft (raw, json)
Hash identifier:          23OHc2QLyCFasDd1NPyYCm5oaW0e3hxJZWdhnWCasrE=
Subject key identifier:   0E:DD:C7:8E:2D:C1:F2:E1:7B:17:8C:E2:89:EE:28:66:C1:A1:80:85
Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
Certificate issuer:       /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
Certificate serial:       04AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
Manifest number:          04A5
Signing time:             Sun 02 Nov 2025 23:56:10 +0000
Manifest this update:     Sun 02 Nov 2025 23:56:09 +0000
Manifest next update:     Sun 09 Nov 2025 23:56:09 +0000
Files and hashes:         1: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl (hash: t2zyT4D/q6CG7dPyHRy+JNdRu6Yx4h1R1Ilx9XR5oo4=)
                          2: DA61635E534811EC8FFBDB7CC4F9AE02.roa (hash: k6KOlaww8ZZoE8DhHLb+fcqbZNEuZUquu+zgOXhayXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
        Validity
            Not Before: Nov  2 23:56:09 2025 GMT
            Not After : Nov  9 23:56:09 2025 GMT
        Subject: CN=6907ef9a-8100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:ee:32:b9:1a:0e:74:32:f5:3f:87:e1:d9:
                    a4:64:78:c0:fb:5d:a5:6d:04:98:c8:fc:82:f8:30:
                    bb:4a:9b:14:56:75:b5:2f:5d:47:79:02:a6:16:d3:
                    6e:18:01:d2:71:c3:aa:1e:ac:b1:5c:44:72:45:53:
                    ce:d1:91:b5:58:39:99:e9:8f:11:0c:a3:53:59:57:
                    e0:86:7c:29:99:75:8d:98:01:3f:a0:31:47:9b:03:
                    dc:c8:ab:7c:73:79:b2:66:5e:48:7e:03:0c:63:c1:
                    22:8b:ec:76:c9:ae:bd:fc:d0:b1:27:67:de:23:44:
                    55:5e:6e:c4:9c:af:b7:2f:46:c6:25:50:db:af:43:
                    c3:1c:48:d2:dc:b3:6a:9a:a9:1e:fe:bd:76:5a:8d:
                    29:8a:8c:f0:a4:42:27:15:df:69:08:0d:be:aa:bb:
                    d0:51:17:e2:53:6c:b2:46:87:8d:c9:e2:ef:76:8c:
                    7b:52:2a:f8:c4:94:49:6e:d6:6d:31:87:ac:11:db:
                    c6:a6:c9:76:87:d8:61:67:00:28:d3:26:04:55:2e:
                    3b:54:62:0b:77:2a:3f:89:79:6d:95:7d:bc:2f:17:
                    38:02:78:c2:22:3b:22:76:d0:43:02:1e:7a:ac:86:
                    00:2d:c1:c5:f5:84:cd:e4:66:48:e8:15:3d:b4:9e:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DD:C7:8E:2D:C1:F2:E1:7B:17:8C:E2:89:EE:28:66:C1:A1:80:85
            X509v3 Authority Key Identifier:
                keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:10:98:f5:92:f3:93:c4:15:83:a3:82:35:7c:26:3c:b7:8c:
         6f:ec:4d:05:ba:82:f2:65:57:b5:68:d6:a8:b3:4e:c4:7b:90:
         79:70:f8:29:87:5e:2f:45:f5:49:78:41:d3:24:78:80:d2:c4:
         77:1c:f3:25:4a:35:40:73:87:55:48:b7:03:9c:56:5b:30:f0:
         16:b5:01:ad:99:eb:ad:d0:46:09:5f:6a:0a:1c:de:fb:96:3b:
         d6:dd:fa:b0:f8:19:ac:39:39:6a:06:b7:a4:c9:09:5a:35:ff:
         c7:ab:b3:cb:09:2f:a1:b4:d8:54:ea:10:27:4c:84:0c:87:fe:
         32:01:69:56:88:81:3f:9e:33:94:50:c0:38:cd:47:ef:af:8b:
         e4:5f:7f:9e:c8:4d:9c:7e:c7:8d:fe:37:4e:4c:58:0c:1c:8a:
         21:9d:84:47:07:b5:c6:de:ae:c3:8f:1f:e0:c4:c5:e6:17:d9:
         f8:58:a4:67:38:a5:d8:4e:2a:70:85:54:fb:1a:28:5f:1a:05:
         e2:01:9d:4d:ab:68:0d:20:1c:c9:dc:e0:45:08:24:fd:58:bd:
         70:d3:7d:fc:24:ea:6c:9b:c6:bf:69:ac:09:3e:06:dc:39:90:
         2d:42:ad:d6:56:e3:70:d4:b1:f9:9c:d3:2e:80:72:9d:3f:87:
         38:f1:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:41 2025 by rpki-client