Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
File:                     XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json)
Hash identifier:          J+P/ZN0GPIO7VJ15BfJ9lfl/BlKm22A23RnbFJGZKp0=
Subject key identifier:   2B:3A:2B:DB:4B:63:CE:CB:D2:53:66:51:0B:77:A3:65:E7:A0:16:32
Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
Certificate issuer:       /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
Manifest number:          0188
Signing time:             Sun 19 Oct 2025 06:09:49 +0000
Manifest this update:     Sun 19 Oct 2025 06:09:48 +0000
Manifest next update:     Sun 26 Oct 2025 06:09:48 +0000
Files and hashes:         1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: DXn6r+vIhI8n3yPFzT3I7J7+nbvP8t1auIvqpglr85k=)
                          2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: Piv7VbbzumwO0tk/ipxojOk8nvFYW+4e20EuzVe+51E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
                          rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
        Validity
            Not Before: Oct 19 06:09:48 2025 GMT
            Not After : Oct 26 06:09:48 2025 GMT
        Subject: CN=68f480ad-9adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:a0:71:75:25:cb:a0:bd:f8:e6:3f:9f:4d:
                    6c:ec:10:2b:47:67:e0:6d:b8:3a:11:4a:d5:e7:99:
                    e2:e0:ae:8b:d0:5c:4f:3f:93:05:94:0d:28:5e:cb:
                    5b:f2:76:77:76:31:3a:69:16:c1:de:b5:6a:72:ea:
                    16:57:68:8e:0a:a2:d2:5c:11:9d:53:f1:cc:3e:fb:
                    6a:7a:97:a8:f6:52:c3:fd:cd:46:f5:fa:f6:8f:a1:
                    bd:9f:84:98:22:5d:5d:5e:a8:ae:1c:ca:8f:bb:18:
                    09:6b:9b:b1:a1:2c:f0:58:5b:8d:31:3d:06:90:24:
                    95:82:8d:a2:b9:84:3d:32:97:d2:9c:2b:45:86:13:
                    9e:7d:4c:e3:06:fb:f6:7d:e2:9b:af:1f:ac:af:5b:
                    ab:ba:92:65:18:4e:c8:19:1a:20:de:a3:5b:30:da:
                    df:d9:56:64:78:cd:c4:c6:2e:96:44:ca:47:00:0e:
                    68:97:d4:29:d4:5f:fe:83:f6:03:16:d5:6e:03:33:
                    9e:e6:37:6f:91:05:e2:89:64:a8:dd:05:42:c9:ce:
                    34:55:12:2a:2c:86:f0:73:c2:bb:83:65:1a:23:91:
                    4f:32:a9:9b:ac:3f:da:cc:93:d0:52:99:94:c4:b2:
                    3a:96:16:29:52:ab:3f:50:39:70:64:8b:69:16:bd:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3A:2B:DB:4B:63:CE:CB:D2:53:66:51:0B:77:A3:65:E7:A0:16:32
            X509v3 Authority Key Identifier:
                keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:09:9d:5a:be:06:11:c2:18:19:3d:ad:81:aa:dd:37:98:85:
         0b:56:d3:1d:3b:be:bb:0c:19:53:00:03:6d:00:ba:bc:0e:2c:
         92:29:22:3c:9c:1b:10:9d:fa:9a:4b:b4:4c:4c:31:59:29:58:
         7d:63:9e:65:2d:b7:2d:f5:da:05:d3:4f:fc:e9:c5:d1:b4:86:
         8b:7c:85:ab:02:01:87:54:3b:e2:16:5c:8e:af:d9:d1:c5:dd:
         b0:57:ba:3c:9f:c3:03:bc:d7:a3:91:e9:ec:fd:e9:66:84:6f:
         c5:24:b0:41:2c:95:31:36:59:7d:dd:3b:c0:c9:71:3e:2f:7c:
         f6:25:47:85:72:27:ca:d2:9c:fb:96:88:79:f9:98:a4:7b:79:
         a0:93:1a:6c:8b:55:ea:e5:df:2e:b1:9b:70:80:fe:e8:15:a1:
         32:42:ac:08:77:b8:ec:72:0e:be:5a:23:05:0b:5f:12:dc:83:
         27:67:d2:d8:91:95:39:99:9d:38:a8:3a:95:94:1c:7c:fe:88:
         4b:82:f5:30:8e:ce:f6:fc:c3:de:25:d5:65:ee:91:78:2e:e3:
         31:8a:44:76:6f:61:6c:08:d0:d0:c0:2c:94:e7:a1:0b:79:04:
         2c:cd:65:58:5f:90:c0:89:c2:f5:aa:31:8d:8d:b0:eb:2d:42:
         09:48:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:15 2025 by rpki-client