Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File:                     PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier:          eFK4oI+lUh6pYtyANPt7Fi4f+lzSv2QSarZXVeJB3SQ=
Subject key identifier:   0F:A9:A2:7F:9F:26:E3:D1:3E:0D:C9:93:D3:D0:AF:4E:88:A2:A2:34
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number:          79
Signing time:             Sun 19 Oct 2025 10:19:40 +0000
Manifest this update:     Sun 19 Oct 2025 10:19:40 +0000
Manifest next update:     Sun 26 Oct 2025 10:19:40 +0000
Files and hashes:         1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: Gp2rOP6Tta9eMKXoYCX9GoHuWebvcWLDwwX0Y6GGLZg=)
                          2: 3CAF51428A4011F089F66D4DC4F9AE02.roa (hash: ZzMBP858bjKyqNHajLa/B1+Ml+sgJ7x2b7/AcooKrCY=)
                          3: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=)
                          4: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=)
                          5: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Oct 19 10:19:40 2025 GMT
            Not After : Oct 26 10:19:40 2025 GMT
        Subject: CN=68f4bb3c-54c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:47:8b:68:06:b5:4e:bb:c2:89:64:04:91:
                    6c:e2:cf:c5:d5:1d:f5:56:07:39:ac:84:f7:bb:28:
                    c9:59:aa:8d:df:f6:78:de:0e:a6:58:2d:03:7e:14:
                    a5:fe:39:e9:d4:ca:eb:02:a3:31:55:38:ae:58:aa:
                    cb:cc:1a:cc:d3:bd:9a:63:ef:c0:86:e1:29:28:8f:
                    c1:22:ab:01:f0:80:5a:8c:d9:87:4b:64:aa:14:09:
                    b5:ed:2d:df:ad:c7:62:fd:94:87:69:da:4c:6e:f2:
                    db:62:57:10:64:96:03:db:6f:93:6f:c4:bd:77:bc:
                    85:08:55:33:94:dc:62:90:fd:f5:2d:a8:b0:65:f8:
                    2a:a0:7a:b3:3b:9c:e3:8e:b9:95:2a:38:98:d9:73:
                    16:24:2a:a5:0e:9c:5a:1b:8f:53:06:c3:17:3c:e9:
                    61:7a:8d:cd:8d:09:c7:04:fb:8a:ef:b7:83:15:ef:
                    e5:24:30:7f:c2:a7:78:13:de:78:f0:ae:fa:e1:89:
                    38:75:77:3c:1d:81:54:ce:f2:cb:d1:eb:cc:0e:3d:
                    e9:8f:4f:2d:94:39:7a:13:0c:5d:b0:9d:43:b8:3d:
                    6e:af:3d:6f:bf:34:46:4b:8a:60:34:0f:b7:f3:e0:
                    bf:9a:55:3b:55:bd:f3:67:c7:2a:d7:9c:c2:31:37:
                    38:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A9:A2:7F:9F:26:E3:D1:3E:0D:C9:93:D3:D0:AF:4E:88:A2:A2:34
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:31:76:7f:25:59:89:be:b2:d9:65:1d:d2:63:9a:6e:74:0a:
         49:a7:15:c1:06:b7:ec:03:32:cc:c1:51:1c:4d:36:49:3e:c0:
         3e:20:86:1f:81:07:0e:7b:26:bd:8e:92:a5:73:29:b5:f2:c7:
         e1:93:fd:71:a9:f1:d2:4e:f5:90:00:98:37:4b:75:6a:34:8d:
         8d:2c:cc:85:e6:f8:d0:e1:21:b0:b3:44:b1:52:6c:fc:81:4f:
         52:3c:5f:e6:9b:24:45:c4:09:f3:bc:05:6c:67:4c:93:69:d1:
         ff:4e:d1:d3:c4:11:26:fa:58:92:c3:bf:7c:aa:6a:3d:6b:f5:
         27:7e:b7:26:d9:8e:0e:ed:d4:0a:94:cd:9c:84:cd:d8:46:8e:
         98:1a:8e:78:00:b0:56:c5:6d:d6:33:81:81:af:b9:86:c6:1d:
         56:e8:a0:da:a7:f0:d7:68:82:b6:30:e6:f2:c1:9c:c4:01:27:
         12:53:f2:78:5d:42:8c:0a:a8:e5:20:2a:33:70:ac:06:62:17:
         75:43:64:ac:bb:20:0e:c3:a9:d2:fd:bf:ce:75:94:96:85:18:
         aa:e3:8f:41:81:20:34:e7:27:f5:00:41:b7:2c:39:f6:de:c7:
         cf:99:92:13:cc:74:bf:f7:c4:57:95:2c:bd:ff:e8:83:e0:ec:
         e8:5e:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:24 2025 by rpki-client