Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
File:                     u82QAyNOsUDtDYm7OwH7bEY_XK8.mft (raw, json)
Hash identifier:          WA59aCMxcFEviwDuq5PcqLvb00vX2q8blwFGFTdi/hU=
Subject key identifier:   1D:93:46:D3:F3:48:AE:6C:6B:12:B7:DB:77:96:2D:CD:F2:DE:AC:4F
Authority key identifier: BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF
Certificate issuer:       /CN=A9136F4F/serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
Manifest number:          08
Signing time:             Sun 19 Oct 2025 11:38:58 +0000
Manifest this update:     Sun 19 Oct 2025 11:38:57 +0000
Manifest next update:     Sun 26 Oct 2025 11:38:57 +0000
Files and hashes:         1: u82QAyNOsUDtDYm7OwH7bEY_XK8.crl (hash: 6NK7Ij72e5zRDRcZQ19jx66O375VeAFspNXVgMa/2vM=)
                          2: BF6469FCA41611F0A6E79C33C4F9AE02.roa (hash: Iw9hs9kJZjRvU/kjqQsF9fh7P0eDr0FwCz9e/iK74jQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl
                          rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136F4F, serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF
        Validity
            Not Before: Oct 19 11:38:57 2025 GMT
            Not After : Oct 26 11:38:57 2025 GMT
        Subject: CN=68f4cdd2-c7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:3a:43:28:1a:d5:cd:4b:7e:fe:50:11:1d:
                    fe:61:4b:ac:6f:55:bc:8d:8f:95:0b:a1:ae:d0:a3:
                    59:f5:37:2f:17:a0:b0:19:3c:fa:16:39:a3:a3:29:
                    dc:13:9e:3e:df:0e:8e:57:42:1a:35:4e:d5:6c:4b:
                    89:a8:6d:17:51:b5:34:dd:0c:81:0e:44:fb:ed:f4:
                    2c:18:fc:7b:65:83:78:60:39:5d:57:d9:04:7c:6f:
                    64:97:58:9b:e5:bc:de:99:fa:bf:b6:08:36:72:b0:
                    eb:cc:36:9c:78:fd:88:40:cf:cd:23:3c:9f:79:a6:
                    20:61:c7:56:1b:ab:49:3c:2b:11:b8:3f:0a:39:79:
                    54:e2:bc:c5:7a:61:3e:06:c0:4e:dd:25:1a:a8:5a:
                    1c:1d:15:42:35:79:0c:b7:f8:43:77:78:3d:b2:37:
                    92:58:81:c3:f3:91:40:c5:82:fc:f8:d1:9d:07:1d:
                    b3:af:db:af:81:c1:68:e9:55:89:79:4d:70:62:b8:
                    91:2b:f6:ff:9c:94:39:bc:97:4e:9e:b1:e6:eb:cf:
                    c6:c5:48:7a:00:a8:ab:4f:d4:71:aa:a6:32:c4:fb:
                    9b:00:05:c0:d6:1e:01:0d:b7:18:22:ac:36:99:75:
                    40:b0:a8:4a:bd:6a:3b:e6:9c:86:9d:f3:e0:15:b7:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:93:46:D3:F3:48:AE:6C:6B:12:B7:DB:77:96:2D:CD:F2:DE:AC:4F
            X509v3 Authority Key Identifier:
                keyid:BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4b:35:9f:0e:ae:bf:34:a0:01:08:57:71:b1:ba:71:b2:ed:
         42:79:17:71:7b:17:d4:e8:0e:7b:9f:e8:b9:c9:17:b6:79:66:
         e2:7a:96:3a:01:d6:8f:16:69:29:92:b0:b8:99:20:1c:bf:19:
         25:2b:26:2b:39:f5:49:d0:3d:b6:78:d3:d9:7c:3b:f5:ac:c9:
         09:5c:95:08:dc:aa:eb:81:98:0c:27:ee:47:68:fb:3e:fb:6f:
         1e:c4:c7:33:a0:eb:cf:78:f7:15:c9:1a:24:33:f3:a7:46:07:
         97:de:b8:69:87:da:82:ac:52:0c:aa:8e:6b:c4:4b:11:b7:0b:
         d4:1f:c0:8f:5d:df:61:d5:45:42:0e:62:97:08:86:6f:04:dd:
         de:0c:a9:d0:40:fd:56:96:0d:68:6f:fa:cb:b7:2f:c1:70:00:
         91:57:92:35:39:6a:e7:73:0e:96:20:66:15:24:c9:f5:fa:a6:
         86:36:ac:3a:af:b0:01:4f:d1:02:e4:ba:e2:17:0e:e6:0f:30:
         5f:49:4e:44:87:f5:6f:4c:12:c8:bc:e5:37:a9:76:11:7b:a9:
         72:36:88:b5:6a:9d:14:a2:7d:e3:de:ea:8f:d8:66:7f:29:78:
         a7:d7:2a:ef:bb:7a:1d:b4:7d:0a:3c:5b:fd:09:10:f2:16:ab:
         d2:82:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:40 2025 by rpki-client