Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
File:                     t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft (raw, json)
Hash identifier:          lT/LEllN4RuJ5hgEnTKHOJCXrrgEXKCcjr+88XLl3nY=
Subject key identifier:   9B:D8:D3:F1:E0:DE:E3:72:28:9D:0B:18:22:10:C9:C3:D1:6E:B1:B2
Authority key identifier: B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF
Certificate issuer:       /CN=A911EE4C/serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
Manifest number:          09
Signing time:             Sun 19 Oct 2025 11:37:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:37:24 +0000
Manifest next update:     Sun 26 Oct 2025 11:37:24 +0000
Files and hashes:         1: t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl (hash: Kh8Ozr95SIY3E3LuWwEM9w3/fnS7dv0aOTWs5J9Vv48=)
                          2: 8D06A40AA1DE11F0A041111BC4F9AE02.roa (hash: CtuQzwGllfJ59SjM+rzLZycPJacOoACuk/ktiuBDrZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl
                          rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EE4C, serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
        Validity
            Not Before: Oct 19 11:37:24 2025 GMT
            Not After : Oct 26 11:37:24 2025 GMT
        Subject: CN=68f4cd74-0608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:df:dc:85:8d:56:ff:e5:89:56:34:40:59:
                    ff:27:ff:f6:ef:37:8f:1b:cc:42:23:f8:49:ee:7a:
                    80:63:9b:d7:f1:3c:1b:22:10:a7:ff:bd:3b:95:d6:
                    c9:27:0e:2b:c8:2e:ac:fd:dd:69:1a:00:d9:64:be:
                    23:08:5a:1c:9a:fa:c7:64:2a:70:1c:4a:c8:ab:db:
                    7e:ff:8d:10:ac:ad:d4:59:8f:fc:f1:79:2a:a5:1f:
                    89:e2:61:e0:e9:ef:56:22:b5:e5:92:60:f3:15:4a:
                    73:35:0a:37:ab:9e:ea:29:6c:c9:ef:07:3f:3a:08:
                    bb:60:b6:17:64:2c:ab:5a:84:21:5d:89:a4:87:14:
                    e9:83:14:05:b1:da:52:00:9d:2e:cf:33:b9:48:b5:
                    09:ca:db:91:6d:c9:c6:8d:61:6e:f4:82:6f:ba:89:
                    80:69:3f:b6:56:38:13:7b:d4:29:15:d8:79:ae:e1:
                    39:f8:23:42:fa:31:d0:2c:a5:a8:ce:8b:86:c1:4a:
                    ae:89:e4:1d:5f:50:9c:60:5d:bc:36:52:c7:ec:ce:
                    e3:ac:d6:80:ee:5f:6d:51:e2:b8:6d:0d:aa:46:fe:
                    49:dc:e5:65:1e:71:f7:f5:c1:c9:b4:af:e2:30:fe:
                    c5:6b:7c:ea:8c:6b:24:a8:eb:5a:5f:9d:05:0c:e5:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:D3:F1:E0:DE:E3:72:28:9D:0B:18:22:10:C9:C3:D1:6E:B1:B2
            X509v3 Authority Key Identifier:
                keyid:B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:5b:d0:6a:91:e3:db:f5:eb:91:7f:1b:af:e2:24:a0:a2:
         ad:66:2e:b7:5e:3e:2a:00:42:c5:d2:9a:73:5e:37:c7:38:a9:
         e3:3e:a4:98:cf:8e:f1:5d:0e:87:b1:ec:1b:56:ff:77:7a:40:
         3b:c3:53:2f:ba:44:ce:71:d7:9f:36:aa:44:ba:a3:4e:2e:81:
         50:6f:38:bf:90:19:99:f1:f9:1b:79:74:f5:49:0d:4a:2f:b5:
         69:ec:1b:93:e4:5a:d7:6d:4e:27:07:95:a9:31:1c:ea:fa:02:
         35:b8:2e:90:4e:f1:12:18:55:7c:91:5a:6a:f7:c0:80:f4:89:
         5d:b6:25:bf:e9:3d:3b:af:d5:ac:71:dd:c6:2e:a9:89:27:fd:
         ed:24:9c:79:ce:e5:b9:4e:dc:5e:5b:34:cc:69:08:47:4a:89:
         15:d4:cd:84:4d:92:ef:87:1a:63:36:e1:6c:70:6d:de:6c:12:
         10:d9:f4:ac:fe:e0:d7:36:56:55:b1:dd:1c:84:8c:d5:38:4c:
         12:e5:37:cc:99:47:64:58:45:c8:bb:8c:31:6f:03:ee:04:35:
         b1:00:86:63:58:a7:31:2d:a8:74:09:36:3d:6c:cb:34:a5:a7:
         af:93:e1:46:db:20:40:7b:f3:0e:57:46:86:eb:cc:c0:76:19:
         5a:1f:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:46 2025 by rpki-client