Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File:                     gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier:          5KpAaE3UzfshJQWGq5ACK/PAwadZvxXqPe2ZHIdpC2o=
Subject key identifier:   1E:C2:7C:16:07:5F:AA:80:7E:D7:0D:B8:87:16:36:7D:CB:53:C4:28
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number:          01A9
Signing time:             Sun 19 Oct 2025 05:51:42 +0000
Manifest this update:     Sun 19 Oct 2025 05:51:41 +0000
Manifest next update:     Sun 26 Oct 2025 05:51:41 +0000
Files and hashes:         1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: HEV/Skz7AQyvytRP4cRlf4vgiwAruPA0S4rEVr1LE/U=)
                          2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: mj1/gGJTxf89h4qoy3LQ2MkBeHSgOkUv4tA5AfZK7Do=)
                          3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: tUVxJzysiR6t8MLO9ai96JsdVfMvMqOUKe7eGXkeEqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Oct 19 05:51:41 2025 GMT
            Not After : Oct 26 05:51:41 2025 GMT
        Subject: CN=68f47c6d-ce1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:07:6e:ee:89:fe:ec:ac:27:95:ca:b0:59:
                    11:d2:80:c5:87:d4:31:df:4c:c8:0c:5e:b7:1e:09:
                    8c:85:88:85:59:56:84:48:8e:4a:d9:a6:58:f2:c8:
                    42:77:d7:26:26:1c:c3:d5:14:66:60:20:9d:f7:8e:
                    3b:d4:1e:be:6b:47:8c:5d:99:49:ec:e4:35:f5:04:
                    01:b5:46:1b:fd:c9:95:90:f5:6b:78:8f:0c:a1:5d:
                    6b:a7:17:c7:6a:ff:28:eb:fc:d1:9d:ec:44:28:75:
                    c2:26:d9:58:7d:f1:3d:c1:01:c4:da:ab:06:4f:c3:
                    8c:7c:d6:66:12:cc:ee:f8:a1:8f:35:d7:17:53:b1:
                    70:04:b0:df:bc:0b:b4:17:29:5b:e2:16:c1:f3:e1:
                    e8:de:c1:e3:03:ef:c7:23:9a:95:0c:d6:40:ec:81:
                    e6:6a:17:dd:16:75:34:f9:53:df:66:16:47:f7:a0:
                    7c:cd:9e:9e:06:3e:84:4d:4e:62:07:8d:81:08:c9:
                    26:b3:72:db:68:7e:5b:45:b4:4b:c8:f3:bb:db:d0:
                    76:1b:f3:dd:06:23:05:52:86:1f:53:7e:92:72:3c:
                    14:fb:b0:ef:ba:cc:f5:5f:56:57:76:75:81:0b:c6:
                    dd:e7:f9:83:90:c5:c2:b0:da:45:4e:59:b6:d2:d5:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C2:7C:16:07:5F:AA:80:7E:D7:0D:B8:87:16:36:7D:CB:53:C4:28
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:92:9e:b4:02:1c:5c:1e:8f:20:41:60:9a:c5:0e:12:23:5f:
         82:25:fe:a7:db:ef:11:0a:57:1a:99:48:60:38:b6:d7:42:6f:
         77:c6:c4:09:cf:11:73:56:10:0c:68:c4:52:7f:fd:39:fa:06:
         b3:32:6f:eb:d2:45:28:e2:94:82:d1:a1:6e:ce:b6:ae:e2:86:
         18:f0:e8:78:97:09:54:9c:8a:97:0b:38:64:ca:80:c3:6d:5c:
         95:f3:d8:36:12:29:4a:a3:05:50:00:74:8c:0c:d0:95:f5:77:
         90:ac:1d:b0:d0:59:c1:a1:e8:66:d5:1b:18:9e:f9:f2:c3:fa:
         d6:d4:49:93:b3:e1:a1:95:0e:a6:3c:54:35:b3:a8:b6:d3:5c:
         eb:47:e3:52:1f:ff:95:03:c7:a3:7d:24:f2:c0:ea:88:95:3e:
         79:a1:45:bc:44:07:62:2c:8a:20:e1:c4:6c:f5:9f:94:95:d7:
         24:bc:93:17:ed:13:c5:6e:30:24:22:f9:ac:99:48:77:cf:96:
         b3:2c:c8:94:26:2a:f1:f0:56:ad:88:4a:3f:f4:18:b5:56:b8:
         c3:3c:6c:e9:43:8d:e8:7b:e8:1d:22:02:ec:6b:8f:38:c2:4e:
         91:4e:49:8a:65:62:00:2e:fd:45:02:b4:94:12:ab:e4:a5:2f:
         ff:04:8e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:28 2025 by rpki-client