Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
File:                     r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json)
Hash identifier:          NeqG12+ygDYn6RmNIlzqUbkuragp7qq+zTvG5TyK6lc=
Subject key identifier:   97:E9:C4:40:E3:92:41:6F:90:15:F1:78:6D:09:BD:DB:A8:CD:CC:DA
Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1
Certificate issuer:       /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
Manifest number:          9C
Signing time:             Sun 19 Oct 2025 09:44:49 +0000
Manifest this update:     Sun 19 Oct 2025 09:44:49 +0000
Manifest next update:     Sun 26 Oct 2025 09:44:49 +0000
Files and hashes:         1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: RHW9dcwOBR4xvDYFyhQCVdvle/6+hxDjTlsvcrPfzkY=)
                          2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl
                          rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
        Validity
            Not Before: Oct 19 09:44:49 2025 GMT
            Not After : Oct 26 09:44:49 2025 GMT
        Subject: CN=68f4b311-090a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:27:c6:72:9c:bf:fe:b1:12:d9:6b:3b:bd:
                    80:f2:12:fd:bd:db:bd:14:4d:a1:06:b2:19:fb:54:
                    7d:53:83:79:03:1f:5f:0b:eb:48:11:27:b5:48:d7:
                    ea:44:77:d3:b8:00:0d:b0:77:f6:cd:91:0c:b9:26:
                    9e:9d:79:9f:a4:84:51:cf:c3:79:6b:6f:85:78:6a:
                    f8:1c:fe:f8:c4:00:ba:3f:27:fb:28:4c:6e:9b:f6:
                    53:be:e3:53:94:5c:8e:40:de:62:71:aa:a1:40:82:
                    9f:db:51:9b:ed:47:81:fe:c1:44:98:8a:7e:6f:43:
                    7b:60:88:ef:ae:17:ad:69:fb:b4:93:bb:02:2b:9b:
                    dd:16:c7:b8:4f:02:e5:25:e5:7a:1f:11:f0:40:e9:
                    e0:b1:f7:e4:8a:be:df:67:c6:45:5a:57:bd:e3:e9:
                    5b:54:cf:05:4b:00:4c:08:8e:fe:27:b8:89:2e:be:
                    6a:da:63:a9:68:40:f3:ca:3d:fa:1a:e5:a8:7a:d6:
                    54:cf:31:bd:c3:15:9d:4c:9d:e7:a8:50:8a:77:1f:
                    8b:fd:c3:f1:03:dd:d4:54:ed:1c:c3:f0:37:42:28:
                    af:95:c1:7e:a1:29:d5:16:5f:31:3c:62:2b:bb:8d:
                    a9:36:ab:1c:64:4f:b2:e6:e0:45:7a:87:89:87:f2:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:C4:40:E3:92:41:6F:90:15:F1:78:6D:09:BD:DB:A8:CD:CC:DA
            X509v3 Authority Key Identifier:
                keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:9b:65:ec:89:4f:b7:f0:ce:b3:00:ce:ac:6f:b1:18:ff:
         5a:45:33:2a:1e:59:cc:43:d0:66:fd:3e:cd:6b:6f:cd:80:69:
         a0:53:ea:3f:e5:f4:23:76:67:2c:87:52:0f:6a:d0:d7:4a:d8:
         b5:ce:28:7c:1d:1d:43:14:96:58:76:a2:42:4f:ee:81:f0:e8:
         de:30:17:9a:53:0e:64:57:c3:eb:42:49:b3:65:8a:c0:3c:a0:
         af:c0:53:33:15:fe:d9:0e:92:94:28:9b:d1:67:77:e6:92:6d:
         1a:c4:98:1f:ec:70:fd:a3:80:ff:21:0e:27:84:b4:f5:31:6b:
         1f:03:04:bf:20:da:ba:0c:fa:e7:c6:d9:bd:c8:32:a6:5b:df:
         cb:ef:13:e8:6e:69:7f:70:06:b1:8f:48:e5:58:9a:54:e0:c7:
         9f:37:1f:e7:17:be:a1:c5:52:9a:ac:c9:a9:8a:4e:a5:da:ca:
         1b:56:33:04:f0:12:08:4f:72:6d:45:bb:bb:9d:1e:a6:5b:78:
         df:f4:8d:3f:da:05:60:03:9b:d4:bf:67:4d:36:df:ff:d9:b7:
         29:f9:5b:ad:ab:28:31:a5:31:16:f0:f0:0e:55:2a:a6:f0:c6:
         b8:f1:1a:ce:96:17:b3:42:40:80:23:2d:44:18:68:92:10:0e:
         98:10:05:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRFRjYxMTAvBgNVBAUTKEFGNDYxRDU3QTkwQTMzNUIyRkE3N0E3QUFFQzE2NzM0
OTU0OTIzQjEwHhcNMjUxMDE5MDk0NDQ5WhcNMjUxMDI2MDk0NDQ5WjAYMRYwFAYD
VQQDEw02OGY0YjMxMS0wOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxMnxnKcv/6xEtlrO72A8hL9vdu9FE2hBrIZ+1R9U4N5Ax9fC+tIESe1SNfq
RHfTuAANsHf2zZEMuSaenXmfpIRRz8N5a2+FeGr4HP74xAC6Pyf7KExum/ZTvuNT
lFyOQN5icaqhQIKf21Gb7UeB/sFEmIp+b0N7YIjvrhetafu0k7sCK5vdFse4TwLl
JeV6HxHwQOngsffkir7fZ8ZFWle94+lbVM8FSwBMCI7+J7iJLr5q2mOpaEDzyj36
GuWoetZUzzG9wxWdTJ3nqFCKdx+L/cPxA93UVO0cw/A3QiivlcF+oSnVFl8xPGIr
u42pNqscZE+y5uBFeoeJh/J7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfpxEDj
kkFvkBXxeG0JvduozczaMB8GA1UdIwQYMBaAFK9GHVepCjNbL6d6eq7BZzSVSSOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEVGNi84REFFMDVBMEQw
RDQxMUVGQkNENTEyM0VDNEY5QUUwMi9yMFlkVjZrS00xc3ZwM3A2cnNGbk5KVkpJ
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEVGNi84REFFMDVBMEQwRDQxMUVGQkNENTEyM0VDNEY5QUUwMi9yMFlkVjZrS00x
c3ZwM3A2cnNGbk5KVkpJN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA63ptl7IlPt/DOswDOrG+xGP9aRTMqHlnMQ9Bm/T7Na2/NgGmgU+o/
5fQjdmcsh1IPatDXSti1zih8HR1DFJZYdqJCT+6B8OjeMBeaUw5kV8PrQkmzZYrA
PKCvwFMzFf7ZDpKUKJvRZ3fmkm0axJgf7HD9o4D/IQ4nhLT1MWsfAwS/INq6DPrn
xtm9yDKmW9/L7xPobml/cAaxj0jlWJpU4MefNx/nF76hxVKarMmpik6l2sobVjME
8BIIT3JtRbu7nR6mW3jf9I0/2gVgA5vUv2dNNt//2bcp+VutqygxpTEW8PAOVSqm
8Ma48RrOlhezQkCAIy1EGGiSEA6YEAUi
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:03:32 2025 by rpki-client