Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File:                     B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier:          1j2+xy4SFNYRj54E9vNBzuek+HLbbOf5pjB9q8gcuYQ=
Subject key identifier:   35:72:9E:24:DF:E7:82:0C:1A:52:01:A0:F3:21:67:0C:AB:B7:68:F6
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       09F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number:          09E4
Signing time:             Sat 18 Oct 2025 20:58:10 +0000
Manifest this update:     Sat 18 Oct 2025 20:58:09 +0000
Manifest next update:     Sat 25 Oct 2025 20:58:09 +0000
Files and hashes:         1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: ZAeOU3FfgXKoDkp5Qwj23zqL4WO/43ysDWp+RTryHJ0=)
                          2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
                          rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546 (0x9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Oct 18 20:58:09 2025 GMT
            Not After : Oct 25 20:58:09 2025 GMT
        Subject: CN=68f3ff62-4643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:22:34:f2:c6:6c:a4:02:6e:0e:f8:11:b6:
                    b0:34:ff:58:d4:0d:b4:9f:ed:53:37:f7:27:b6:22:
                    16:a7:43:2d:86:7f:06:f5:e5:f2:48:f2:85:2e:ec:
                    9b:1a:04:ec:03:c3:4d:b5:d2:77:e9:e0:a1:d6:e3:
                    bc:bc:df:6e:d1:2b:46:94:1e:db:d6:18:01:41:f1:
                    38:20:94:59:d7:52:10:b8:95:69:4f:7c:e4:47:81:
                    5f:79:6d:b0:c7:13:ef:91:f1:7c:c0:13:e4:7e:17:
                    36:57:2a:01:f0:4b:38:47:93:ab:5a:52:bb:36:d7:
                    ee:0b:6c:e4:ba:65:93:b4:f2:d3:68:34:b2:7d:10:
                    fd:44:ed:60:a3:be:be:e8:1d:c5:f1:39:14:1f:25:
                    1b:b7:ae:ed:3b:64:30:8f:f1:44:d0:f3:d4:60:dc:
                    2e:8a:80:b3:c3:1f:a1:c4:14:a0:eb:db:7a:4c:f0:
                    71:a0:89:4e:24:52:e4:5b:d6:52:f9:30:b4:1e:d1:
                    cc:59:7b:d7:94:ca:83:9d:34:5f:ec:84:fe:6d:1f:
                    6c:1c:0e:f2:46:81:3f:da:be:dd:2d:11:e1:53:91:
                    da:8e:a4:ba:1f:74:27:5b:ba:da:9b:1f:2c:08:ba:
                    89:02:e2:42:06:6c:c8:36:20:1e:7a:bf:5a:1c:18:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:72:9E:24:DF:E7:82:0C:1A:52:01:A0:F3:21:67:0C:AB:B7:68:F6
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:1d:af:40:0e:ab:c2:30:87:70:2a:f9:eb:3a:66:23:16:
         16:33:94:25:a9:57:fb:0b:0e:06:7d:c5:aa:be:22:c0:54:47:
         bc:0b:fb:6d:da:61:dd:d3:7a:e3:b3:87:b4:ae:7e:e6:4b:07:
         ed:89:dc:b5:ce:21:e8:b6:5a:e4:7b:57:64:fb:3b:fd:50:b2:
         f9:34:a9:be:a0:f2:a9:79:31:41:56:fa:b0:92:28:c8:a7:a5:
         d3:92:d0:02:e3:66:56:07:61:6b:bf:49:3b:f6:9e:ea:b1:3b:
         82:21:0b:18:e5:a8:f0:a3:4b:04:db:f8:f7:d9:80:96:c8:a7:
         83:96:a1:1f:bf:2e:d9:4f:ae:32:27:f7:39:bf:79:e7:af:12:
         80:6f:de:19:82:af:7f:95:75:96:3e:f6:56:c0:e9:2c:7b:0c:
         72:67:f5:88:31:0c:08:d5:2f:39:50:54:de:a6:c3:8e:5f:33:
         5e:99:bd:fa:2c:12:f6:4b:1b:17:01:4f:8d:53:96:f8:00:23:
         28:7f:2e:2c:8f:2f:07:70:ad:a1:38:68:f2:db:d5:f2:ca:d2:
         4d:7e:42:90:39:30:dc:b7:63:20:de:93:43:66:14:6e:76:b7:
         08:d0:1a:12:f6:12:e9:ed:ae:6c:96:65:c6:82:d5:25:0b:08:
         ac:c9:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:12 2025 by rpki-client