Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File:                     4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier:          LU4hvGbw1Hk7T0PCEFdgEW4IqP4el4ozobpZcdOo0zM=
Subject key identifier:   BF:E9:AC:EF:BC:F2:9E:7F:DE:66:CF:56:8C:79:A0:58:3C:0D:97:13
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number:          021B
Signing time:             Sun 19 Oct 2025 04:28:31 +0000
Manifest this update:     Sun 19 Oct 2025 04:28:30 +0000
Manifest next update:     Sun 26 Oct 2025 04:28:30 +0000
Files and hashes:         1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: ZZprvV/zHB9MR+zQV7vey9DogoSH8AZEe6gllZma0/I=)
                          2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: qDV9QCi5HkxixaBFK8kj0xBTXurODiSoIKzsQFF1+SQ=)
                          3: 2D4C6B20AAF411F08D7D0B81C4F9AE02.roa (hash: hFKZKQB631IA4WIKA1wYkvNhSl9oz6iCSmNpqayClro=)
                          4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: H4ZiNqnOQ9SeXj19JFNgIsK4CCAguZ6MrEtJQSUxrHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Oct 19 04:28:30 2025 GMT
            Not After : Oct 26 04:28:30 2025 GMT
        Subject: CN=68f468ee-fbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:fe:9f:0c:ec:a1:dd:91:12:cc:df:9d:17:
                    76:33:63:65:d8:84:0a:83:43:2c:b5:41:d2:f0:d2:
                    72:a1:f5:fe:fd:81:89:fa:e7:a1:a2:37:d4:15:ea:
                    a0:72:2b:17:1b:74:9f:6f:58:7a:42:31:85:ff:32:
                    f0:c6:82:1c:b4:09:c8:0b:ff:72:5c:b0:d8:f8:59:
                    0c:d1:32:55:0a:1e:b5:22:6f:c0:f7:f2:e3:c3:6b:
                    98:0d:3b:a3:b5:ea:2a:31:08:91:b9:3b:ae:60:ff:
                    4a:1c:79:41:55:d0:f2:c7:73:9d:0a:c5:4e:46:29:
                    b3:95:14:b1:23:ba:58:2f:71:72:d3:8f:d5:4a:37:
                    bd:46:6e:e5:b4:72:25:f6:51:15:c0:ba:b0:ba:1f:
                    e5:91:f7:6f:e8:a4:89:43:38:65:8f:4e:95:8d:33:
                    95:25:cb:c5:9c:8f:5f:3f:3d:45:f5:fc:da:d7:9f:
                    d4:13:6d:e4:d9:5f:00:b7:cc:1c:f1:64:06:ac:f4:
                    b2:7f:5c:cb:2b:ac:1c:6e:d5:24:40:19:3b:7c:bb:
                    0f:43:20:b7:ef:6e:bc:46:d6:29:50:9e:47:42:8c:
                    c1:17:5e:7f:f5:c2:a6:4c:c5:54:f6:9c:da:84:14:
                    d4:98:0b:5d:58:fa:b0:e6:a0:3d:71:79:37:09:0e:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:AC:EF:BC:F2:9E:7F:DE:66:CF:56:8C:79:A0:58:3C:0D:97:13
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3b:db:22:cc:cb:cb:ad:63:aa:11:c3:88:9b:d5:eb:ff:bd:
         a0:31:e9:7e:82:6d:e2:c8:21:ef:bf:7d:7e:f5:74:99:9d:42:
         51:a6:c1:ea:cd:7e:c7:11:d9:ab:84:35:a3:42:62:cd:44:c1:
         1e:ea:85:fb:e1:7b:f8:bc:f1:f5:78:f4:bb:7b:e4:96:c3:c2:
         7a:ae:21:7a:58:89:2a:86:f3:46:b5:87:c1:94:5d:fb:fb:8e:
         3f:29:22:7d:16:33:83:2a:73:60:d5:0c:80:6a:a4:0b:ab:05:
         f5:89:a5:0c:66:be:5b:31:93:2d:a3:7f:07:bd:6b:8a:2a:13:
         80:55:b8:be:7a:5b:df:24:39:e8:3b:17:f0:00:19:77:20:ba:
         b7:1d:81:3c:ec:67:84:c2:4c:54:e0:42:16:2c:39:d7:50:89:
         b9:0c:21:ac:75:04:2c:9d:ff:72:f5:5f:f1:e1:95:51:06:8a:
         61:71:5d:6e:ba:5c:92:d4:84:da:a1:73:c2:c0:de:bf:9a:1a:
         70:1c:ee:8e:21:29:6e:bd:2a:d7:bd:b1:82:9c:5c:46:6e:d9:
         83:27:dd:ae:a9:90:b1:1f:9d:31:01:e6:c7:30:4d:29:c7:9f:
         9e:5f:23:5b:93:0e:e9:e6:63:12:c0:29:75:0c:97:20:43:64:
         07:98:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:23 2025 by rpki-client