Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          1PdBeKp237Ib8wVw5SJBHR5zk2l2AozX+HwfCorQVDM=
Subject key identifier:   71:51:79:18:D5:7C:97:56:EE:39:D9:86:7C:6B:3E:22:C2:83:28:82
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          0F
Signing time:             Sun 19 Oct 2025 11:32:55 +0000
Manifest this update:     Sun 19 Oct 2025 11:32:54 +0000
Manifest next update:     Sun 26 Oct 2025 11:32:54 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: Ll3t2ZxinZfJJabLLmyALbtNQPcC3Db14lVKD9tOTTo=)
                          2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: QZBBJswmtfML9Fm1aFeXD8xHRfCOkYwNOZHzKQQJ01Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Oct 19 11:32:54 2025 GMT
            Not After : Oct 26 11:32:54 2025 GMT
        Subject: CN=68f4cc66-e6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:d2:fe:14:12:b6:48:62:3c:ce:c6:84:7b:
                    dd:90:c8:81:70:ef:de:31:75:38:d0:41:cf:b9:28:
                    cd:1b:02:38:09:f7:ef:d6:c0:a6:69:a9:af:0c:0e:
                    3d:41:73:d1:a1:f7:da:26:62:c6:e5:d5:b2:1a:a6:
                    af:88:98:ca:57:13:c3:20:1f:11:48:10:fc:a5:fc:
                    c1:86:a9:8c:e7:93:9f:d5:22:0a:69:4a:03:40:d1:
                    c5:12:b2:59:bd:f1:bc:cc:74:07:5f:e6:c0:26:a6:
                    09:29:2e:c6:6c:c1:0c:38:9d:93:4b:00:c6:2a:da:
                    49:c8:77:f8:e6:0c:d6:33:3b:65:54:fd:cb:f8:60:
                    5e:d6:aa:12:7e:07:cd:d6:46:54:99:23:13:82:c4:
                    24:09:12:b1:63:37:de:91:c7:28:33:67:a7:f9:fd:
                    6f:13:56:84:01:eb:a1:03:8f:e7:2e:db:e9:c5:7b:
                    ca:42:94:cc:b1:ed:b1:c6:da:75:1f:e2:0a:f5:79:
                    1b:69:e8:32:01:9b:a3:32:b1:36:2b:22:85:1f:95:
                    fe:32:7d:ba:ba:c2:98:bd:d9:e3:ff:ee:ae:e5:62:
                    b2:d9:c2:4f:8a:84:05:77:eb:ab:79:b2:e4:09:34:
                    f5:e8:f3:3c:f6:4b:d3:2c:13:33:07:80:ac:ee:60:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:79:18:D5:7C:97:56:EE:39:D9:86:7C:6B:3E:22:C2:83:28:82
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:b0:c6:a7:0c:05:3e:b9:e4:67:28:bd:b6:8e:ed:1f:fd:
         9d:e2:32:f2:39:1a:bc:30:da:97:fe:a8:99:58:4d:98:0c:9c:
         38:26:71:19:e2:03:e2:4d:93:d6:ce:7c:34:80:28:3d:48:d7:
         60:a4:75:ef:8e:2d:9f:e4:6e:57:7f:54:da:aa:4a:a7:22:1f:
         45:46:82:3f:83:e4:b8:46:73:17:e9:76:44:84:4b:95:60:73:
         4b:cc:11:88:a5:b8:4a:16:53:ae:1d:e8:b0:66:6c:1e:bb:e5:
         cf:27:fe:70:35:ff:28:b9:34:e7:d2:99:4a:a4:3b:79:4d:2b:
         24:38:7c:0a:e2:3d:59:b1:81:4d:6c:4c:2f:63:52:14:54:bd:
         72:cd:e2:fb:41:0f:53:f0:cd:af:da:4a:36:43:36:e2:1b:8c:
         f1:2d:68:ef:1c:96:7a:0b:7d:52:24:21:dd:ff:f4:55:18:e9:
         ec:24:ae:e5:bd:f3:a5:30:fe:62:df:ca:0d:74:96:76:fb:ee:
         be:e7:d7:1d:c1:db:25:c5:50:64:a2:0f:80:69:10:b2:f6:1f:
         bc:33:4a:b4:49:56:30:3f:95:f4:c4:11:f0:f1:d4:47:19:27:
         ee:31:d9:21:3c:8a:ee:92:f8:8c:c5:58:0c:5a:9a:85:db:f4:
         6d:6b:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:24 2025 by rpki-client