Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
File:                     S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json)
Hash identifier:          acMkygO8utfyi4CW1rVsQGTj91h6/KXsdUufhZ7bpx4=
Subject key identifier:   7B:9D:7C:EE:46:4E:9D:7B:51:91:C1:40:12:0F:AE:D2:14:A0:9A:0C
Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7
Certificate issuer:       /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
Manifest number:          4E
Signing time:             Sun 19 Oct 2025 10:45:15 +0000
Manifest this update:     Sun 19 Oct 2025 10:45:14 +0000
Manifest next update:     Sun 26 Oct 2025 10:45:14 +0000
Files and hashes:         1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: kzWHBk8++0MmMAkeZWDihoQVIMY2LrcyCtFZRcInulM=)
                          2: FB24C32041DC11F091D21255C4F9AE02.roa (hash: YkPIdT5pU6s6PBK/cXBQwdkKPPO1WquYP5q3kmQJuaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl
                          rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
        Validity
            Not Before: Oct 19 10:45:14 2025 GMT
            Not After : Oct 26 10:45:14 2025 GMT
        Subject: CN=68f4c13b-be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:80:85:9f:a2:64:f4:45:22:e0:55:fb:b3:
                    49:29:3f:da:96:68:ba:13:b9:a9:c8:b5:5b:1e:d7:
                    02:87:5e:dc:8e:2e:02:25:27:7d:d2:0e:96:21:41:
                    50:33:ca:d2:19:a8:89:a1:a7:fd:37:b9:62:31:96:
                    ee:29:08:58:fb:96:a6:1e:3b:ed:79:1d:1d:05:f6:
                    26:93:38:dc:67:1a:ab:3b:4c:14:c7:c5:37:c8:6f:
                    e2:a7:1b:43:ea:ff:17:3f:ff:c2:4f:26:da:5d:a5:
                    5a:69:eb:c1:92:8d:4e:d0:8a:86:e8:13:a0:5b:06:
                    20:c5:d5:8b:64:5e:65:3e:35:83:5f:2c:08:1e:37:
                    f2:c2:3d:53:ef:3c:75:e4:12:a8:da:86:a8:ce:a2:
                    fb:e3:40:16:d6:30:46:6f:b3:0d:9a:e8:a7:cc:45:
                    aa:aa:0d:b6:f1:2e:c9:1e:42:5c:b2:87:6b:b7:6f:
                    ed:77:32:88:78:f1:d0:79:ee:b0:40:b0:6d:4d:7a:
                    9d:54:55:bd:ce:73:d0:d1:d4:12:12:9f:93:bf:c8:
                    86:6f:72:4e:de:40:63:b6:d8:68:bb:e3:2e:e1:ec:
                    92:fb:e4:5a:0b:10:ca:8a:b9:ac:c5:df:9c:8f:3e:
                    16:e1:2f:8d:48:28:95:43:e4:d6:93:f1:57:d8:8b:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:7C:EE:46:4E:9D:7B:51:91:C1:40:12:0F:AE:D2:14:A0:9A:0C
            X509v3 Authority Key Identifier:
                keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:d6:ff:54:1f:67:fd:04:88:99:6e:b7:bf:c8:79:06:0e:
         df:b0:44:13:60:76:1b:a1:26:b2:03:6d:5c:82:8e:31:11:5a:
         c5:e0:eb:26:fd:fa:18:5d:70:01:ad:50:a9:18:5f:95:e6:27:
         61:e2:60:0f:bb:c1:68:8d:a1:90:54:d4:eb:30:1d:f3:58:3b:
         38:d7:2d:d8:1c:26:5e:4e:62:65:0b:ae:09:8b:d6:ad:83:50:
         de:a4:e2:e1:73:08:10:a4:c1:d8:eb:39:4a:ba:44:e2:2c:42:
         a4:40:51:95:4c:7b:af:c7:1b:26:74:ac:2e:ab:a4:65:3e:99:
         fc:23:82:41:7b:70:d3:d7:11:67:5d:7b:75:8d:80:94:30:f4:
         4c:9e:7a:6e:43:4b:b5:2e:60:fd:16:16:79:ca:b4:63:7c:52:
         8b:34:13:f1:dd:93:e2:96:68:eb:26:25:6c:5c:96:16:09:21:
         b5:a8:b6:a8:00:04:82:f3:25:a6:96:8e:9c:81:4a:60:fa:93:
         1b:75:ae:b2:7c:a7:3c:95:78:aa:37:97:56:c6:85:b0:61:54:
         dc:39:b8:9f:d6:71:f1:c6:e3:f9:7e:31:c9:bf:85:51:1c:ef:
         a8:f2:64:34:90:a9:ee:6b:71:21:41:b4:dc:43:ce:86:5f:a0:
         79:64:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:15:22 2025 by rpki-client