Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
File:                     9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json)
Hash identifier:          S+GdVhf3zOX4z3HrGRKGTZmnjWTAyUYA/XRiTtmPDj4=
Subject key identifier:   50:2A:AE:D6:99:BE:B1:2A:BC:E3:4F:24:FE:E3:E3:EE:9A:3A:89:7D
Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
Certificate issuer:       /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
Manifest number:          0121
Signing time:             Sun 19 Oct 2025 07:36:56 +0000
Manifest this update:     Sun 19 Oct 2025 07:36:56 +0000
Manifest next update:     Sun 26 Oct 2025 07:36:56 +0000
Files and hashes:         1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: 7qz3FcYOCsAdp6e9B6OQq24hJ/ZVkuFOXZKHKDKBEiE=)
                          2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: 5CJbD7pKl6AqdADQ2DaLJ20RlS7MYpOoT15StrcsKuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl
                          rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
        Validity
            Not Before: Oct 19 07:36:56 2025 GMT
            Not After : Oct 26 07:36:56 2025 GMT
        Subject: CN=68f49518-a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:c0:f9:12:2c:3a:10:01:bc:35:53:8f:8b:
                    07:e0:38:83:de:fd:1f:53:df:ce:25:98:4d:44:cd:
                    07:88:90:18:10:79:c1:7a:8a:1f:16:e0:da:ca:18:
                    e1:74:c0:f7:c9:41:a9:5c:5e:9d:0e:c3:fa:eb:55:
                    36:9c:6c:2c:0b:8c:eb:1c:a7:83:b5:f5:6d:bf:a1:
                    3c:97:42:2f:a7:a6:d9:51:4c:47:95:56:fd:30:37:
                    d0:d3:8e:4f:6b:bc:e4:48:1b:20:1c:0c:49:6a:21:
                    df:47:de:86:8c:46:18:7f:c3:37:dd:4c:38:e3:77:
                    db:6e:12:3e:bb:03:7c:37:f7:df:d7:9f:c7:47:3a:
                    71:c6:c3:e7:56:40:cb:b2:04:01:22:a7:10:de:f8:
                    0f:7f:44:ff:25:09:81:28:1c:78:74:3b:4d:60:91:
                    e7:71:90:9f:76:56:b2:81:99:10:75:07:0d:18:ad:
                    5e:99:fd:98:08:57:e5:ac:46:52:68:9c:79:e9:3a:
                    18:b2:a2:30:68:b1:25:19:81:df:49:e7:53:10:50:
                    73:46:75:39:51:76:f0:a4:5c:90:ae:3c:c2:cd:aa:
                    03:b9:ec:a2:fe:d1:b8:f3:ac:d3:af:41:1a:61:ab:
                    f2:43:ec:1f:02:5a:6d:c9:de:4c:b8:a9:00:b8:d1:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2A:AE:D6:99:BE:B1:2A:BC:E3:4F:24:FE:E3:E3:EE:9A:3A:89:7D
            X509v3 Authority Key Identifier:
                keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:2a:ad:77:20:00:e9:01:24:9d:0d:5d:18:ad:12:24:7c:
         b0:56:52:ea:06:6e:4a:af:39:93:0d:28:24:a5:d9:1d:b0:4c:
         e5:c9:7c:c9:95:9d:dd:10:a8:6b:05:7f:bc:78:d2:61:3a:1e:
         9e:c8:44:de:7a:76:c7:64:16:68:31:06:30:48:c9:1a:1b:bc:
         8a:f8:43:24:a9:02:76:e3:df:5e:f5:6d:e0:21:7f:da:bb:f4:
         1e:e5:af:ed:1a:b4:7b:1d:e1:d7:54:8e:6d:0f:68:da:21:54:
         72:26:af:5d:25:0c:a9:7f:19:fd:12:f5:5f:c9:77:68:ca:46:
         36:74:9b:66:ae:96:42:04:d8:d6:7f:f5:5d:6f:0d:ab:86:09:
         25:8a:b9:ae:e7:47:6e:e2:a1:8e:92:2c:7b:6e:da:b9:58:b5:
         cc:7e:f8:66:8b:81:bd:25:fc:3b:02:a3:30:a6:ef:ba:7f:b7:
         66:54:8b:e4:3e:a4:c3:7b:b9:aa:b2:01:78:f0:79:ce:12:1d:
         78:0f:73:26:d1:08:55:68:f0:81:0c:22:82:84:05:25:e9:97:
         d2:4d:4e:80:f3:71:41:90:e2:d2:81:3c:7c:93:11:f7:c3:dc:
         79:11:60:da:81:bc:ee:3d:80:d0:5c:33:92:b5:d5:76:2a:a5:
         d0:fb:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:47 2025 by rpki-client