Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File:                     SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier:          EPpiZd1W5EgpWJvaGkYr8RDOIhsBUZGdOdkCcOwzu7U=
Subject key identifier:   C5:B6:F9:5C:EE:23:EF:D4:EC:98:FD:0B:5B:6F:22:D3:4E:80:32:E2
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer:       /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number:          24
Signing time:             Sun 19 Oct 2025 11:18:27 +0000
Manifest this update:     Sun 19 Oct 2025 11:18:26 +0000
Manifest next update:     Sun 26 Oct 2025 11:18:26 +0000
Files and hashes:         1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: wHFzgfPdpqMfA1fx9EDeNntvPJLYd1TzaE4MRhzrGWw=)
                          2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
                          rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
        Validity
            Not Before: Oct 19 11:18:26 2025 GMT
            Not After : Oct 26 11:18:26 2025 GMT
        Subject: CN=68f4c902-7245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:83:1f:3a:32:df:0a:5a:f3:03:a8:9d:f7:
                    e7:90:86:6c:fc:c8:89:ba:43:0b:0e:27:5f:f7:1d:
                    d6:f6:da:85:86:c3:d6:fb:68:3b:43:b9:ec:4b:ca:
                    27:b1:c7:44:f3:7c:d0:9e:53:1c:b5:6a:52:41:0a:
                    01:86:97:a1:27:7e:b9:17:bd:a6:af:03:ce:b2:3e:
                    b3:a5:4e:81:73:51:ba:cd:dc:6b:30:35:ed:d6:d7:
                    68:ab:37:fc:0c:99:61:4e:ef:0d:6a:b7:85:37:15:
                    38:73:39:b1:4b:80:a1:f1:04:b5:10:98:e0:2c:53:
                    5a:a5:ba:2c:97:de:f3:71:c4:de:f4:5f:c4:f8:e4:
                    80:03:2f:cd:98:8f:ea:bd:e3:85:76:27:e2:8f:f2:
                    58:df:d7:83:da:7e:f7:33:a0:4d:93:6c:dd:fd:20:
                    15:47:4c:cf:75:72:c0:2e:eb:c3:b0:f9:23:99:18:
                    19:c4:48:5e:8a:e5:24:ba:58:8b:78:47:f1:9e:b7:
                    87:ba:62:4d:03:66:7f:33:da:d0:fb:80:d5:30:87:
                    bd:61:ea:67:68:5b:1e:7e:1d:a1:ac:90:1c:57:3c:
                    09:94:26:24:84:ee:69:96:0b:08:34:a1:b3:50:e8:
                    f1:52:a0:e0:a5:68:d2:58:08:83:e2:66:8d:fa:b5:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:F9:5C:EE:23:EF:D4:EC:98:FD:0B:5B:6F:22:D3:4E:80:32:E2
            X509v3 Authority Key Identifier:
                keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:13:b0:d4:13:c0:cd:22:3a:10:d5:af:d9:a2:3a:32:26:
         0b:09:7a:e7:6f:14:b4:bd:2d:8e:12:a8:3f:5f:29:19:32:85:
         4c:70:5f:7a:b6:fc:b2:dc:15:17:97:6a:0b:3a:a3:c4:e6:5d:
         fd:d0:d5:0d:c0:7c:3f:2b:0d:7d:8c:6c:31:76:7c:44:fb:2e:
         59:6f:fa:ad:bd:4c:f7:75:f7:36:93:4b:c2:a8:ac:91:44:28:
         d1:78:d0:f9:c3:16:8d:22:5d:d9:b3:0a:1e:c0:92:e3:7e:cb:
         49:30:5d:af:61:29:a5:4e:72:85:1e:c0:c7:c1:fe:6a:a0:e3:
         7a:ef:78:c8:09:9b:e9:4b:fc:5b:f6:0b:17:53:c9:45:bd:74:
         25:36:c8:c2:0e:f9:f9:bc:a0:e6:20:74:69:4a:83:08:d9:86:
         05:55:a2:e0:82:20:19:b4:2a:3d:f6:32:78:d9:09:61:2b:80:
         cf:a0:13:8d:36:db:ff:f0:93:74:b0:87:be:ac:a5:2a:bb:4e:
         00:9b:30:ce:ed:7a:82:16:4f:e4:25:39:50:36:5d:2c:fd:0e:
         d0:45:5e:35:23:bb:e9:9e:e7:eb:ef:76:ed:85:ac:34:18:07:
         b0:83:4e:d9:04:5b:ce:42:02:8c:1f:b4:81:b8:32:34:43:15:
         da:61:92:28
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3
RjQ0RTdBQTAeFw0yNTEwMTkxMTE4MjZaFw0yNTEwMjYxMTE4MjZaMBgxFjAUBgNV
BAMTDTY4ZjRjOTAyLTcyNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQn4MfOjLfClrzA6id9+eQhmz8yIm6QwsOJ1/3Hdb22oWGw9b7aDtDuexLyiex
x0TzfNCeUxy1alJBCgGGl6EnfrkXvaavA86yPrOlToFzUbrN3GswNe3W12irN/wM
mWFO7w1qt4U3FThzObFLgKHxBLUQmOAsU1qluiyX3vNxxN70X8T45IADL82Yj+q9
44V2J+KP8ljf14PafvczoE2TbN39IBVHTM91csAu68Ow+SOZGBnESF6K5SS6WIt4
R/Get4e6Yk0DZn8z2tD7gNUwh71h6mdoWx5+HaGskBxXPAmUJiSE7mmWCwg0obNQ
6PFSoOClaNJYCIPiZo36tYS3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxbb5XO4j
79TsmP0LW28i006AMuIwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG
NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz
MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6
SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ9gE7DUE8DNIjoQ1a/ZojoyJgsJeudvFLS9LY4SqD9fKRkyhUxwX3q2
/LLcFReXags6o8TmXf3Q1Q3AfD8rDX2MbDF2fET7Lllv+q29TPd19zaTS8KorJFE
KNF40PnDFo0iXdmzCh7AkuN+y0kwXa9hKaVOcoUewMfB/mqg43rveMgJm+lL/Fv2
CxdTyUW9dCU2yMIO+fm8oOYgdGlKgwjZhgVVouCCIBm0Kj32MnjZCWErgM+gE402
2//wk3Swh76spSq7TgCbMM7teoIWT+QlOVA2XSz9DtBFXjUju+me5+vvdu2FrDQY
B7CDTtkEW85CAowftIG4MjRDFdphkig=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:39 2025 by rpki-client