Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
File:                     s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json)
Hash identifier:          eXWKA2ufs8H397RnS/up3MYJlVp/LdoJ8HbXYKts0K8=
Subject key identifier:   1D:C9:3B:49:59:4F:EB:FF:95:46:29:86:0C:78:DC:A9:E1:F6:4F:36
Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06
Certificate issuer:       /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
Manifest number:          069A
Signing time:             Sat 18 Oct 2025 14:57:17 +0000
Manifest this update:     Sat 18 Oct 2025 14:57:16 +0000
Manifest next update:     Sat 25 Oct 2025 14:57:16 +0000
Files and hashes:         1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: 6znvJEgg8YrnB2dK3sVRBxzkqryKVq7cuM5SdDroKy4=)
                          2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl
                          rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06
        Validity
            Not Before: Oct 18 14:57:16 2025 GMT
            Not After : Oct 25 14:57:16 2025 GMT
        Subject: CN=68f3aacc-c7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:7a:db:b2:9f:39:58:aa:a1:71:5c:4b:91:
                    ef:f0:b5:45:15:f1:fc:1b:35:03:72:1f:3c:09:a1:
                    b6:0d:5d:05:6c:01:72:1e:4e:72:7d:f1:fd:1f:5f:
                    9c:e3:a6:f0:1f:1f:0f:6f:51:1f:64:cc:61:93:df:
                    d9:af:17:4e:ed:2a:21:82:67:13:8b:fc:d8:4e:a1:
                    a0:59:f5:24:39:91:cd:f0:1f:0d:7e:f7:d5:97:1a:
                    35:84:49:d9:10:c2:56:bc:6a:88:e6:46:ef:bc:83:
                    9e:a9:fd:2e:c5:88:6d:4b:76:7d:0b:24:b0:bc:e7:
                    21:25:e6:05:86:b6:00:38:79:c6:98:4c:23:75:fe:
                    3c:03:fc:63:b7:bf:e2:96:a7:a8:76:d9:76:57:e5:
                    43:32:72:01:a0:06:71:d4:6b:56:88:a0:d3:3c:bd:
                    6b:b5:1b:88:2f:a9:61:c4:1e:2f:a4:2c:1b:c3:bf:
                    5b:3e:4f:64:0f:82:96:bf:0c:01:36:b6:42:4b:03:
                    bc:62:ec:be:52:bc:10:88:5d:23:97:94:45:81:8f:
                    44:35:7f:13:ea:fd:4d:bd:c2:85:8e:b9:b5:0e:38:
                    3d:7f:6f:48:1b:29:34:f1:61:eb:6e:cd:99:e4:44:
                    60:1e:af:0f:4e:ca:b3:22:c9:f8:28:ca:20:d9:00:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C9:3B:49:59:4F:EB:FF:95:46:29:86:0C:78:DC:A9:E1:F6:4F:36
            X509v3 Authority Key Identifier:
                keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f6:d6:9c:dd:35:84:a3:e0:dd:43:0d:fa:c6:fb:34:97:ff:
         de:44:5a:f9:37:22:3b:5f:37:1d:a0:1c:3d:84:93:8e:60:bf:
         f7:9f:2f:43:e2:ff:c8:93:0b:1b:7c:78:8f:84:42:9a:b5:d4:
         48:08:f6:08:22:57:a8:ea:a2:6a:ab:82:f3:f1:aa:5e:18:c3:
         c8:2f:ce:3b:bd:77:f4:80:ee:53:82:7c:4c:f6:50:ad:58:0c:
         4e:ee:f9:ca:54:bb:15:f1:08:8e:da:f0:08:88:2b:2e:76:56:
         be:39:ec:dd:10:11:61:fe:af:bf:8c:24:11:3e:8b:47:3b:b4:
         d1:13:6e:81:4f:5b:0d:6e:c1:5b:35:76:69:68:47:68:f3:87:
         3c:82:b8:68:bf:d3:fe:fb:1e:74:52:2c:77:a5:82:09:0a:a9:
         33:d1:68:d5:b2:83:9f:a4:17:6e:9f:c1:4c:80:8f:ba:1e:ff:
         4a:8e:07:ba:53:2e:2d:14:e3:06:6b:4f:3e:44:2d:bd:45:9c:
         73:87:0a:82:82:f3:14:ed:ae:fa:1d:96:3b:b6:39:c5:37:26:
         c1:a4:aa:28:fb:e2:34:21:c2:2e:d9:ef:89:32:08:f0:9f:58:
         e3:71:2f:78:0a:05:1b:69:92:ac:e0:f9:9c:2a:fd:30:3e:74:
         82:fb:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:14 2025 by rpki-client