Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          4T2pFb9/HLTOrK5Qph3lRz6gDG5g22hgN9Nx+9CPvlY=
Subject key identifier:   87:EA:20:A3:18:65:02:50:56:EB:CE:F5:92:56:F9:F9:BC:9B:DE:61
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          0219
Signing time:             Sun 19 Oct 2025 04:26:18 +0000
Manifest this update:     Sun 19 Oct 2025 04:26:17 +0000
Manifest next update:     Sun 26 Oct 2025 04:26:17 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: ylkrVNHHMgCh7aepZgyQ0q9HRHx75j/fLo1kSmCiAhM=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: HvJRtP/1M+AejuhqdGaCDBK61eDiFrYobniM96LvHvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Oct 19 04:26:17 2025 GMT
            Not After : Oct 26 04:26:17 2025 GMT
        Subject: CN=68f46869-cc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:33:a3:bb:24:ce:01:79:f7:56:42:f5:ae:
                    95:58:7c:ef:75:fb:f1:e1:bf:7e:ff:bd:83:57:a4:
                    3c:6a:f1:29:3f:c3:a8:a5:47:88:5a:66:85:ee:a5:
                    b4:97:3d:7b:86:c0:e5:eb:3b:82:99:2e:fd:0f:3a:
                    f8:9e:68:9c:a3:0d:56:f3:da:3d:31:d5:00:eb:c1:
                    3f:f4:d2:36:ab:b1:d7:09:be:75:e7:4b:49:d0:35:
                    27:fb:b3:41:55:1d:fc:35:95:b6:81:6e:d0:e3:13:
                    11:c7:04:69:4d:d0:16:46:48:2a:42:64:ea:d2:73:
                    87:80:e1:e2:75:43:ef:4a:79:d3:16:be:9c:22:7a:
                    55:1a:93:60:ef:04:31:40:10:1e:9b:4d:e5:3c:d9:
                    db:58:a7:b6:23:02:09:1d:44:ca:3e:58:17:08:da:
                    a4:81:a5:2f:b1:07:a0:b9:5e:a2:33:c7:2f:fb:11:
                    23:cc:a7:24:30:74:36:dd:ad:d8:0b:87:4d:9d:84:
                    a0:f3:f6:bf:1a:db:7c:b7:24:2a:14:e3:be:43:bc:
                    cc:e7:75:31:77:b4:33:06:1b:8b:91:18:95:c0:d9:
                    ae:ca:d6:eb:63:39:55:f0:57:03:14:04:53:c4:20:
                    72:0e:ae:6f:ee:27:a6:c2:07:d5:3d:7a:1a:36:fa:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EA:20:A3:18:65:02:50:56:EB:CE:F5:92:56:F9:F9:BC:9B:DE:61
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:73:50:f5:87:1d:61:af:3d:65:13:27:be:d1:09:c2:55:eb:
         c4:9d:37:cc:b0:df:d0:73:2b:e8:75:88:b0:db:44:aa:f6:a0:
         65:25:29:1e:d3:0c:db:2c:cf:61:8a:c2:ef:7c:18:23:20:08:
         03:22:0a:fd:bb:3a:80:9c:21:e1:3b:92:2a:17:ed:bd:37:cb:
         7a:46:f1:ca:83:55:a2:0b:00:ef:69:4a:95:0c:bc:2e:65:25:
         b0:34:79:26:b5:83:bf:ad:cb:87:6c:70:f9:ee:f6:08:ff:19:
         0e:47:46:dd:d3:f3:e3:a9:22:36:ae:56:b8:9e:c1:4e:37:44:
         a5:8d:98:e4:36:4c:10:39:60:9f:c1:77:21:60:10:c4:c4:af:
         ef:87:00:99:d0:b6:ea:e3:ab:d3:4b:5b:b0:96:71:4b:b9:24:
         eb:b5:56:8d:0b:d3:cb:69:51:12:c0:77:c1:70:8b:37:7f:32:
         94:dd:d0:be:cb:5e:45:80:53:50:66:30:c0:03:f5:d9:2d:29:
         f5:e4:2d:58:ba:37:b9:1a:97:9d:0b:29:a0:56:b4:4e:47:33:
         69:eb:7e:54:cd:36:a3:60:c4:3f:ae:db:d2:a8:04:48:f5:fd:
         3b:ea:3b:d7:f4:25:1f:f2:12:13:0d:09:1c:f3:64:85:27:d5:
         52:6f:4e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:26 2025 by rpki-client