Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
File:                     m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json)
Hash identifier:          QkXNt5yXgcR6YucDlLw19TzWwumfh+RQY4vN5mPUjY8=
Subject key identifier:   11:C9:8D:0A:EA:D5:48:85:53:C2:49:15:1C:D2:94:18:AF:BA:02:78
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Certificate issuer:       /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial:       09C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
Manifest number:          09C0
Signing time:             Sat 18 Oct 2025 21:02:17 +0000
Manifest this update:     Sat 18 Oct 2025 21:02:17 +0000
Manifest next update:     Sat 25 Oct 2025 21:02:17 +0000
Files and hashes:         1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: GzivSzAYaymkQYKp0mlLwUrvtDF0pHW9THAVMjjvh/A=)
                          2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
                          rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2502 (0x9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
        Validity
            Not Before: Oct 18 21:02:17 2025 GMT
            Not After : Oct 25 21:02:17 2025 GMT
        Subject: CN=68f40059-a662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:5d:d0:fa:38:1f:a2:05:cb:bd:07:8c:3c:
                    ab:4e:f5:b8:72:88:00:53:a7:e5:38:69:c1:ea:21:
                    bd:87:30:dc:c2:c2:a6:a4:58:90:db:e1:90:27:51:
                    04:13:95:33:ee:d3:e6:49:d8:8e:c7:50:e7:d6:19:
                    2a:2b:2a:92:f4:09:7a:6b:72:31:41:7a:72:f0:fe:
                    e7:36:19:c1:40:e1:65:37:a3:27:40:07:2e:c6:0d:
                    f0:a1:f2:a0:14:b7:6a:3e:9e:72:ca:6c:6f:4e:39:
                    b4:e9:d4:ee:8f:35:74:50:98:d3:b9:c0:a7:cd:b1:
                    a9:1f:ec:76:41:15:81:b7:ef:da:99:47:77:69:1d:
                    c4:4e:aa:d8:24:b9:97:13:4d:d0:66:69:43:8a:ec:
                    af:04:f9:46:a3:48:a1:3b:7e:94:0d:04:09:5c:36:
                    c2:58:2b:27:93:4e:3a:af:7a:74:33:74:9d:b7:74:
                    6f:2d:3e:b9:a0:8b:a6:39:61:f9:32:70:ef:ba:54:
                    7f:ac:7d:e2:45:67:30:74:c2:3f:84:25:f7:c6:c1:
                    23:1c:83:5a:11:98:58:4b:b6:75:cc:6a:6a:d5:c9:
                    51:25:4c:88:75:8a:51:2d:21:d7:8e:cc:1b:36:8b:
                    82:51:ad:bc:2b:08:79:0e:ba:c7:6f:fb:24:c7:d1:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:8D:0A:EA:D5:48:85:53:C2:49:15:1C:D2:94:18:AF:BA:02:78
            X509v3 Authority Key Identifier:
                keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:24:b8:9f:09:64:76:6b:5c:87:5b:4e:90:ea:e7:6d:0a:
         98:fc:9a:5f:00:8d:4b:18:f5:ee:00:42:e9:3b:5b:30:34:a3:
         e0:49:e3:02:ad:5f:fe:75:dc:cf:6c:da:77:72:f2:4f:88:79:
         da:7d:5a:bd:44:6d:22:21:f6:d0:9b:5b:17:22:45:95:db:71:
         e6:48:dd:f4:37:e9:95:22:5e:42:55:6f:d3:a7:43:2f:d4:13:
         bd:08:c5:27:dc:82:7e:48:bb:0e:8b:2f:f8:e8:ba:b9:4b:d3:
         c1:7a:98:04:24:e4:48:60:8b:93:ac:5d:97:21:02:66:d5:49:
         bb:2b:db:13:97:76:44:f5:e2:27:a5:b4:7e:7c:eb:45:bc:f9:
         89:61:a6:9c:77:91:f8:ed:75:9b:94:a3:9e:42:c3:17:23:fc:
         1c:5c:0c:05:d7:f5:e0:40:6a:b6:9d:c1:c6:b4:3f:b3:b2:f8:
         bc:5d:4a:84:f0:53:0f:c9:b1:27:5e:19:e6:63:37:76:05:8d:
         c2:bb:00:7c:64:fa:14:25:24:1d:51:ba:39:1a:ef:34:b7:2e:
         4e:68:ab:43:17:11:89:8c:76:1e:08:6a:11:78:51:3a:00:b9:
         65:c0:d3:c0:c9:78:9b:fb:65:02:5f:26:11:a5:4a:b7:c8:aa:
         e7:87:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:44 2025 by rpki-client