Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
File:                     -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json)
Hash identifier:          l6xPLivzx5Pg5+gqIiCtBgLT5aRTmFCtbWZVHyEeuWI=
Subject key identifier:   67:A0:9E:2C:30:E9:3F:16:73:03:FB:DB:E2:82:6D:0F:11:CB:7B:75
Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Certificate issuer:       /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
Manifest number:          0585
Signing time:             Tue 04 Nov 2025 23:19:11 +0000
Manifest this update:     Tue 04 Nov 2025 23:19:10 +0000
Manifest next update:     Tue 11 Nov 2025 23:19:10 +0000
Files and hashes:         1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: x5T+n1nv/O3YLq08fO+yGxb7dr1FVJKTAxMjfINs5Is=)
                          2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
        Validity
            Not Before: Nov  4 23:19:10 2025 GMT
            Not After : Nov 11 23:19:10 2025 GMT
        Subject: CN=690a89ee-cd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:a4:d1:15:f0:0a:bf:d1:5f:85:41:9c:aa:
                    f7:41:18:a6:c0:d5:c0:cd:57:69:15:28:fe:d4:86:
                    12:fd:39:b4:51:f1:b3:42:69:09:d3:ce:2c:5a:16:
                    af:d9:38:6f:b7:b4:96:23:69:56:ec:1b:f1:7f:9f:
                    1a:7f:3e:c5:c0:33:96:7f:88:6a:f4:a3:fd:d1:81:
                    82:e7:1a:e2:f6:3a:50:08:2a:a1:54:6a:a6:dc:4a:
                    9e:d6:88:a2:2e:37:6c:f6:58:d0:69:9a:b6:7f:35:
                    36:2e:07:72:9b:9c:64:8e:5e:a4:a7:ef:22:20:67:
                    ea:c0:be:99:a7:57:cf:f9:1e:c8:1d:b2:0b:53:1c:
                    ab:62:3a:3b:0f:b1:f9:db:71:fc:22:9e:17:20:fb:
                    06:4a:6d:a8:45:15:d2:f7:23:ca:3b:09:b1:17:b1:
                    83:92:f4:dd:28:6b:3e:94:c5:6e:67:52:47:46:74:
                    49:6e:d9:b0:9b:54:d1:e8:1b:8d:dc:57:74:cf:67:
                    44:61:8b:c0:64:74:a9:a7:c8:c3:af:a7:a3:ed:13:
                    3c:61:7f:21:e8:49:9e:09:b1:d0:d4:88:52:0a:23:
                    2b:89:27:dd:2d:67:1a:4c:0b:22:f7:a4:a8:87:08:
                    b2:6b:78:de:f6:41:44:eb:8f:6d:bc:ee:98:57:98:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A0:9E:2C:30:E9:3F:16:73:03:FB:DB:E2:82:6D:0F:11:CB:7B:75
            X509v3 Authority Key Identifier:
                keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:02:92:8a:55:79:d9:aa:b5:f7:34:b0:27:16:6e:f6:8f:76:
         f2:71:2c:67:c6:63:58:37:28:e0:3f:33:e5:48:92:95:40:16:
         f3:08:8e:c6:58:6a:32:3d:61:06:35:dc:4e:39:90:64:c1:ee:
         49:61:85:f8:d8:c8:d5:2a:ca:66:55:03:6e:fe:b0:13:a3:dc:
         da:64:50:89:2f:b0:b9:c2:14:2e:8f:8a:a5:17:6a:55:1a:fd:
         b8:fc:ad:15:44:2c:d9:8f:e5:19:3f:a7:54:9a:09:b1:65:c7:
         e2:f1:8c:80:67:f2:82:02:93:a6:4f:65:b4:3a:b3:74:81:da:
         52:83:97:96:eb:6e:31:1c:1d:ae:0f:e1:9d:1c:c9:32:e7:b8:
         bf:74:a4:fe:6f:ad:c4:99:3f:31:1e:cd:6f:1c:83:15:b0:c8:
         bf:99:e9:b5:4a:ac:c7:ed:28:b7:ad:21:9a:a2:2e:0d:3d:85:
         ae:dd:dd:ad:b3:36:30:5c:7b:77:5e:3e:43:50:bc:6c:74:17:
         b4:e1:f3:8a:6c:ed:e2:68:5b:1d:88:43:b8:6a:6f:27:4f:ec:
         c6:b7:c3:d2:5f:0a:70:19:7a:ab:ef:2f:8f:95:2a:87:0b:14:
         a9:88:f7:f3:15:7e:9e:b7:a7:a1:76:4d:f4:68:3c:d2:07:4f:
         78:6a:dd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:11 2025 by rpki-client