Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
File:                     K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json)
Hash identifier:          6W2rLifZ/422d6Sn+PNeBMn6s5sa1eh6GPTDZoMSGfg=
Subject key identifier:   C2:32:2A:F8:0A:0B:90:04:BD:6B:A2:16:E9:D3:18:6B:E1:5C:C1:D4
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Certificate issuer:       /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
Manifest number:          011E
Signing time:             Mon 03 Nov 2025 04:47:07 +0000
Manifest this update:     Mon 03 Nov 2025 04:47:06 +0000
Manifest next update:     Mon 10 Nov 2025 04:47:06 +0000
Files and hashes:         1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: 5uYIGrtY830kriruRulwH+dOnrgaMZGDWlpSPV40e0E=)
                          2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
        Validity
            Not Before: Nov  3 04:47:06 2025 GMT
            Not After : Nov 10 04:47:06 2025 GMT
        Subject: CN=690833ca-8302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:64:9c:d5:05:23:d7:c2:f2:16:d6:17:b7:
                    89:6e:9c:30:6c:27:e3:32:1c:34:bf:3e:77:7a:d5:
                    95:96:b9:a7:61:c6:f1:21:a8:e5:37:05:ab:c7:74:
                    b4:54:ec:31:98:ec:88:8c:38:be:8e:7e:5d:5a:72:
                    a9:18:e7:f5:79:5f:84:8c:74:73:01:1b:cc:16:46:
                    c0:fb:ed:14:d0:a0:e4:bb:2f:00:5c:58:a2:85:11:
                    95:c2:b7:1b:a2:3d:78:c4:0a:0c:49:6e:4b:16:ec:
                    d8:d9:f8:f0:e7:17:55:4f:9a:67:35:b6:30:a8:a2:
                    6b:fa:d0:cc:7f:c8:01:bd:95:ec:4f:2f:c5:0f:a1:
                    e1:01:3a:c0:1f:f5:2f:0a:e5:2b:38:43:96:c1:8d:
                    ad:ff:c8:59:fa:36:62:98:0b:44:97:52:17:03:93:
                    cd:aa:49:e6:a5:ae:0d:bb:9e:43:12:02:64:9f:8c:
                    6b:d1:c9:db:19:c5:c9:19:48:de:92:ff:14:36:0a:
                    2e:f6:b9:36:2f:89:5a:c3:9f:35:5c:c7:c6:2a:69:
                    3b:ee:12:a0:34:34:3e:02:bd:fd:aa:b4:53:39:5c:
                    3e:75:35:4c:13:b1:f8:08:20:90:d0:5c:61:ac:f4:
                    9d:b5:91:aa:12:11:1d:15:bf:3b:10:84:06:97:6c:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:2A:F8:0A:0B:90:04:BD:6B:A2:16:E9:D3:18:6B:E1:5C:C1:D4
            X509v3 Authority Key Identifier:
                keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:52:89:fc:cd:99:18:59:89:de:8d:85:9b:a6:02:9c:e5:c5:
         ab:81:5c:27:71:0c:f5:a6:cc:77:2d:a3:48:bf:c3:6a:ea:51:
         5d:b2:64:4a:bf:37:1f:e1:36:3c:a5:d7:88:c1:51:fe:0a:f0:
         b4:ac:46:5b:39:4a:14:1a:dc:49:f5:4e:c2:96:fb:46:1c:56:
         03:fe:d1:f0:15:9c:c7:a1:24:cf:25:bc:fc:4b:7a:7e:af:5c:
         da:53:5f:34:f0:48:d4:16:a9:88:63:37:8f:81:13:42:cc:1b:
         48:6b:13:5d:be:b1:4e:67:6c:7f:5a:6f:f5:04:52:7f:06:ac:
         46:40:db:12:23:85:21:95:88:4f:a3:db:d7:ce:19:a3:ed:0e:
         5e:1c:cc:53:67:46:b6:fd:f9:7e:cc:e6:b8:35:ee:0a:58:06:
         7a:74:de:c9:a7:be:e3:ef:e3:33:57:b8:f5:13:cb:62:6c:19:
         96:05:1e:47:d4:9e:e8:6b:d3:b0:4a:c0:59:75:20:7b:6d:0c:
         50:72:29:ae:93:91:d3:ad:b2:e7:ee:d0:3b:86:41:a4:6f:d8:
         13:2d:21:47:fb:f9:6c:97:f0:e8:b7:ae:90:53:e6:a4:18:1c:
         88:f7:34:2a:6c:87:a4:f6:1b:fb:e1:8c:e7:12:87:b5:0b:bf:
         16:39:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:35 2025 by rpki-client