Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File:                     k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier:          UVVmuuIbAwDzIHliDTfMbz6Nx073Rgq5Cm8jjhlDJ0g=
Subject key identifier:   0F:16:44:53:06:A4:9D:DD:8E:B1:5D:EB:62:C8:9F:A2:10:E1:03:94
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer:       /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number:          0873
Signing time:             Sat 18 Oct 2025 21:46:10 +0000
Manifest this update:     Sat 18 Oct 2025 21:46:09 +0000
Manifest next update:     Sat 25 Oct 2025 21:46:09 +0000
Files and hashes:         1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: a0rr6zO4WsXNUfE/QM4lSF3JEZheqOO5SdAGVBxjmSU=)
                          2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=)
                          3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=)
                          4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
                          rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
        Validity
            Not Before: Oct 18 21:46:09 2025 GMT
            Not After : Oct 25 21:46:09 2025 GMT
        Subject: CN=68f40aa1-4ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:f4:bc:da:27:47:63:e5:ce:0a:76:30:fe:
                    03:0a:d7:6a:3b:ff:ef:4a:bd:35:cc:45:d7:4a:1d:
                    37:9d:71:80:71:67:75:3e:86:a6:46:09:0d:bb:5d:
                    e0:b5:11:75:d8:3f:2a:d9:3d:e1:aa:e7:38:82:90:
                    d8:46:51:95:73:8f:fe:1c:9c:60:50:13:2f:86:d2:
                    97:49:32:17:0b:ec:0d:65:9b:17:9e:a3:bb:a2:b5:
                    14:0c:e7:85:26:fb:1d:69:d6:28:9c:d5:1d:f3:9c:
                    20:6b:64:73:e1:51:33:c4:ed:52:5b:f6:e2:12:4c:
                    48:4f:25:1d:ab:97:13:00:aa:63:6e:77:24:73:38:
                    e4:4b:b6:db:30:87:79:35:3a:bd:19:a3:89:78:61:
                    98:5f:7e:f6:c8:54:be:ee:49:fe:0b:03:19:ec:3f:
                    8a:a6:43:56:c2:aa:73:8c:12:c5:3e:f0:7e:90:e7:
                    f3:34:6b:a8:08:df:fc:53:c3:53:72:d5:d4:4f:ca:
                    b0:5d:1b:dd:2c:ed:7e:e5:1d:e4:e7:c6:cf:92:c6:
                    5e:dd:14:76:48:d0:55:9d:b9:1f:f0:75:f1:bd:e2:
                    75:63:1f:74:21:6a:ba:28:9b:36:7f:58:30:55:fa:
                    11:04:cf:2e:98:67:3d:a1:f6:05:62:59:df:38:62:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:44:53:06:A4:9D:DD:8E:B1:5D:EB:62:C8:9F:A2:10:E1:03:94
            X509v3 Authority Key Identifier:
                keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:e3:04:ae:95:66:89:2f:a5:f9:3a:09:0e:c2:14:c8:fa:
         ef:d3:fc:e7:45:41:cc:c6:55:13:6e:c1:e7:de:f0:8b:ec:96:
         63:37:32:5d:ac:1e:8b:f4:d4:f9:34:02:10:51:cb:ee:49:a9:
         19:83:47:fe:b9:22:4c:db:7d:f5:a9:6b:fb:3a:8c:b6:8d:16:
         ff:24:25:00:35:f0:2b:f5:a6:70:10:fc:f5:f8:f9:df:f3:93:
         48:ba:bd:b1:ac:64:b0:6e:29:9c:b4:a3:e2:48:6b:b1:c9:f4:
         1e:5e:1e:86:14:57:a8:9c:22:a4:8e:06:48:6d:94:c7:7d:0b:
         af:2e:87:b0:3d:2e:10:8c:6b:fa:04:e6:b3:d0:63:86:ba:17:
         64:b1:3c:a0:fa:4c:bd:be:cc:5d:9e:56:5f:d7:cb:50:7f:a7:
         38:23:13:87:c6:d7:23:38:a9:81:51:a0:78:9b:74:3f:19:b6:
         6f:e1:d9:f1:1a:4a:9a:f2:5a:f9:81:49:6f:c9:c3:53:e5:af:
         c5:b0:bf:b7:6e:e2:fd:c2:40:1f:86:69:21:4f:92:bd:b2:fd:
         5b:89:cc:c5:f0:12:db:58:e2:bd:47:91:13:3a:72:17:e8:0a:
         fe:4d:e9:48:76:9c:cb:a3:1f:e4:57:b3:ef:94:11:1e:21:49:
         82:ea:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:40 2025 by rpki-client