Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File:                     mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier:          eUm9K9vQ4lVaV2FYZAtja8iZHu9wuzS9Xf3YBesjS0M=
Subject key identifier:   CE:66:6C:69:28:5B:79:2C:F2:C7:C1:BD:8D:F6:0A:26:9C:C7:AB:C1
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       0417
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number:          040F
Signing time:             Sun 19 Oct 2025 02:20:27 +0000
Manifest this update:     Sun 19 Oct 2025 02:20:26 +0000
Manifest next update:     Sun 26 Oct 2025 02:20:26 +0000
Files and hashes:         1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: UWxP5wLYOBKkdCmzjis9PCXEwroZhG4NJ0JdLuYZ1qU=)
                          2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=)
                          3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Oct 19 02:20:26 2025 GMT
            Not After : Oct 26 02:20:26 2025 GMT
        Subject: CN=68f44aeb-424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:0d:b0:c0:73:66:20:7b:ed:0a:13:49:c0:
                    3c:24:f7:bb:b8:3d:1f:6b:21:06:e2:62:c9:2a:df:
                    c8:dd:9e:d3:69:f4:4c:1c:79:04:2f:8a:78:b8:c8:
                    3f:76:a4:1e:a2:2e:59:6e:bb:b1:61:a0:34:af:90:
                    bb:86:35:19:6b:cc:95:12:1d:bd:d3:de:28:c0:f3:
                    16:65:58:bd:2a:6c:4e:29:9f:07:5a:93:cc:2c:a9:
                    1d:8e:ce:70:a0:90:b4:d1:5e:65:97:4b:ae:9b:6c:
                    8c:26:86:5c:66:50:e2:87:75:66:d8:18:64:74:2d:
                    36:0c:8d:a6:83:9a:f0:57:ce:5e:9f:cb:2f:a8:80:
                    3d:00:c6:6d:ae:83:9d:84:58:dd:c4:a3:20:36:47:
                    f4:81:af:21:62:1c:10:9a:0e:8c:c9:18:ee:8c:22:
                    ef:c8:13:68:19:91:62:6e:9b:8d:54:44:bc:ca:26:
                    a4:99:a2:55:bb:3d:c2:17:1e:3d:62:2d:ed:08:7a:
                    3c:c2:fa:e0:55:ce:96:08:cc:2f:ef:ef:ef:36:4a:
                    2e:f3:64:21:7f:e5:7a:12:c0:a4:49:3c:14:7c:a5:
                    bd:1e:f1:b3:89:45:06:6d:7c:a2:6b:55:3e:83:bb:
                    eb:38:ba:ed:09:4c:c3:e0:04:c2:e0:a4:cd:2c:04:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:66:6C:69:28:5B:79:2C:F2:C7:C1:BD:8D:F6:0A:26:9C:C7:AB:C1
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:63:eb:9e:30:35:18:b0:83:03:33:2e:08:95:ea:1d:2c:68:
         79:dd:67:3c:08:ac:8b:4c:32:f0:68:9f:6e:10:f9:d1:1f:ce:
         a4:c2:3b:7c:e1:33:76:2b:bc:14:ec:80:60:09:c5:47:6c:88:
         78:fc:ae:44:34:ce:e5:83:a3:29:a1:7f:71:e0:e2:2f:d5:58:
         a9:71:5a:5f:fd:43:10:05:0e:28:ee:8b:4d:20:ac:1e:fb:13:
         82:4a:b7:38:a1:29:35:8d:ad:40:eb:55:8e:84:f3:b1:14:13:
         a6:da:1d:c5:c9:a2:33:fe:1b:9d:02:64:b7:40:a0:ab:b4:4c:
         bf:90:02:6c:3c:99:2e:c2:a5:7b:35:cf:a1:83:af:c3:f8:e9:
         14:b3:9f:26:bd:5d:8d:10:23:67:6a:51:cd:7d:87:5a:23:bd:
         42:d7:25:e7:c5:7c:8c:d2:91:2b:62:3f:50:87:f0:61:92:99:
         62:3f:54:32:33:50:8f:00:88:b6:b0:71:3f:1c:e1:92:59:c0:
         43:e7:94:5a:3d:87:c2:54:32:33:f7:10:65:08:c2:97:f8:7e:
         08:55:5d:cf:a0:23:d8:05:14:d1:26:f9:8b:ea:0d:55:b1:ef:
         3c:4f:e3:fe:d0:32:8f:83:0b:93:80:42:f2:7a:f2:4d:05:43:
         54:e2:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:16 2025 by rpki-client