Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
File:                     6PktayopMPClvq9TBEyF2OreHro.mft (raw, json)
Hash identifier:          M+YYRaH+0iYB2wqCKebaWqdTbHsJTqPf0EfUVc3f/e8=
Subject key identifier:   09:83:0C:DD:62:60:4B:14:52:3C:08:8C:BF:1D:B5:10:6A:FC:57:77
Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
Certificate issuer:       /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Certificate serial:       047F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
Manifest number:          047B
Signing time:             Sun 19 Oct 2025 01:58:09 +0000
Manifest this update:     Sun 19 Oct 2025 01:58:08 +0000
Manifest next update:     Sun 26 Oct 2025 01:58:08 +0000
Files and hashes:         1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: poXjAydfqB2nQ8Bm58amHFGGj2iNOScf4rAxYGvrhKw=)
                          2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ygV29+CdpRjO1HlIMJ6Gkg3eEGxPeEnonRI3YwMUHgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl
                          rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
        Validity
            Not Before: Oct 19 01:58:08 2025 GMT
            Not After : Oct 26 01:58:08 2025 GMT
        Subject: CN=68f445b0-8ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c4:47:ac:13:cc:ce:3f:21:8a:02:87:05:86:
                    ae:28:83:15:32:70:b7:27:3c:c7:97:45:67:35:79:
                    16:a4:85:71:3b:56:18:67:d1:f7:ef:2d:b1:0c:e4:
                    85:b9:9f:9a:bf:d6:c7:db:43:0a:f0:29:45:f4:cb:
                    35:e8:21:b0:19:70:4f:6c:34:99:75:1b:bc:4f:d1:
                    11:dc:34:4b:cf:c1:6d:1c:ec:95:67:b7:fe:e5:78:
                    eb:cf:7c:c6:cf:e6:e2:3e:d9:00:1f:2a:67:d2:69:
                    fa:92:44:3e:df:fe:61:06:63:d0:cd:bf:71:5d:e3:
                    b0:33:ea:a3:ca:33:5c:29:12:5f:dd:e4:dc:01:ca:
                    3a:cf:69:dc:8a:04:ad:31:8a:7d:23:ed:54:a3:90:
                    f3:b6:04:66:c9:0d:ca:16:d9:4d:d0:ac:74:48:4f:
                    a7:f2:ed:96:dc:eb:89:74:20:b6:a4:08:3b:10:d8:
                    74:19:53:bd:57:3b:c6:9e:19:40:bc:c3:50:b9:cf:
                    01:7a:60:5b:72:3f:cf:eb:5f:2c:48:de:ea:fa:5e:
                    a7:3c:94:5c:0e:e9:97:de:c6:f7:ea:f1:0b:13:2a:
                    c5:91:69:87:bb:ca:7f:5a:a9:1a:23:82:c0:13:40:
                    37:98:70:45:ed:1e:f6:ed:44:11:12:8d:78:53:da:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:0C:DD:62:60:4B:14:52:3C:08:8C:BF:1D:B5:10:6A:FC:57:77
            X509v3 Authority Key Identifier:
                keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:55:65:0d:cc:cb:15:b9:5b:99:fc:04:39:b3:8e:80:26:
         38:89:f7:a4:79:ea:4c:ba:f3:84:21:62:5b:39:44:b5:0b:da:
         95:6f:c2:f2:e5:69:eb:a1:d2:7b:36:c3:0c:d7:95:16:79:ae:
         a7:d3:fa:77:67:d1:47:b3:3b:a4:ca:6d:56:a6:f0:98:f8:83:
         d6:43:c5:f0:d6:1e:8b:81:f4:03:0e:f8:01:6b:85:6f:d4:ed:
         89:39:98:4c:38:1e:cc:b3:90:b8:f8:e8:12:9d:e0:35:48:6b:
         81:63:d8:35:4a:99:cc:1a:24:a9:1b:ae:1c:23:63:00:ba:f2:
         f3:91:fb:24:7d:37:7d:46:3d:d6:8b:6c:78:af:2e:d3:cc:07:
         31:00:ac:95:54:0e:c2:b3:fc:3a:57:3e:07:94:28:2b:f6:69:
         79:63:98:52:0b:fa:3c:d7:4a:6a:e6:06:76:b0:e9:2f:20:b7:
         f3:37:d8:15:c5:25:6e:d2:2e:21:4e:bc:9f:a0:90:64:1f:69:
         ad:27:39:82:e5:82:a3:d8:a1:b3:ed:50:af:71:b2:6d:22:4b:
         4b:ad:72:1e:02:6d:1d:65:b9:95:e8:59:e1:f1:a5:b9:ba:3a:
         79:66:fd:99:34:e7:fe:d3:55:f4:46:b2:a9:42:9e:43:dc:8d:
         3c:ed:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:07 2025 by rpki-client