Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
File:                     DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json)
Hash identifier:          s7C8RxLK3ZgXpK9ixF044sofOwP5wNC+x2Lr71n/Ho4=
Subject key identifier:   B3:B6:6A:22:B5:3A:82:AD:6F:F3:C4:99:AA:6A:97:43:12:4E:58:81
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Certificate issuer:       /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
Manifest number:          94
Signing time:             Sun 19 Oct 2025 09:42:22 +0000
Manifest this update:     Sun 19 Oct 2025 09:42:21 +0000
Manifest next update:     Sun 26 Oct 2025 09:42:21 +0000
Files and hashes:         1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: z4oSiuMm4B8KFglEunbj19y3RbwrojzNi5cWFtZ5BFo=)
                          2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
                          rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
        Validity
            Not Before: Oct 19 09:42:21 2025 GMT
            Not After : Oct 26 09:42:21 2025 GMT
        Subject: CN=68f4b27e-7e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:89:92:71:e0:d1:75:66:9e:a7:d6:3b:2d:
                    9a:90:e5:a5:31:b0:68:2a:e3:d1:4a:32:39:37:4b:
                    53:d4:dd:c4:b5:51:f5:e2:19:3c:6b:3f:4e:22:bc:
                    29:83:79:c5:e0:8e:a2:21:3b:dd:41:20:ca:ce:60:
                    a9:91:29:63:03:ef:a4:e2:89:e7:2a:0b:ff:20:98:
                    6b:b8:34:aa:7b:91:97:e7:59:a9:df:d4:03:46:58:
                    98:88:93:9e:a1:71:c4:3c:7a:8f:0f:62:53:be:f2:
                    8c:e3:27:cd:a9:3f:60:83:0d:66:fe:f3:ca:93:2c:
                    f8:b4:70:9b:51:a8:ed:59:e7:ff:45:f5:c6:c5:c0:
                    9a:8f:2a:b0:28:c0:84:fd:be:ff:96:01:dd:87:cb:
                    7d:58:44:55:d5:e5:71:8c:8d:78:09:98:bd:79:75:
                    17:ad:24:47:f2:8d:22:dd:58:82:83:54:35:05:9c:
                    41:20:0f:ed:de:30:8f:3e:02:8a:56:fb:3d:33:d1:
                    ca:d8:09:25:96:56:af:23:53:41:13:65:1e:4e:dd:
                    1e:6f:1d:0a:c5:e6:0e:e0:21:7e:cd:51:1c:87:db:
                    6e:5b:e4:11:d9:88:4f:48:99:ce:98:b4:95:68:1c:
                    84:e1:b3:3d:f2:f0:b2:01:7b:44:e4:00:82:65:77:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B6:6A:22:B5:3A:82:AD:6F:F3:C4:99:AA:6A:97:43:12:4E:58:81
            X509v3 Authority Key Identifier:
                keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:cb:2f:0d:d4:2d:81:8f:ba:d6:bc:98:20:a2:d2:c7:69:
         55:84:15:55:b9:aa:75:0c:20:c3:7c:1d:14:9a:47:70:2f:e0:
         44:1a:49:29:16:8a:a8:62:46:e3:16:17:cf:fc:3c:0a:ea:84:
         3d:eb:30:93:9c:5d:ab:e8:a3:7e:0c:38:1b:d0:30:b7:95:34:
         9f:c7:43:f2:c6:3f:65:d6:ef:a9:81:ad:4f:f9:2b:1a:74:1b:
         a1:f0:69:b1:cc:70:1e:e9:e7:f5:3e:75:4d:29:26:ef:f0:40:
         87:74:fc:84:20:7d:a0:cf:65:55:bc:a6:53:23:dc:44:1b:b5:
         e6:14:5e:74:63:71:68:4b:db:7a:09:ca:d1:55:55:91:9c:45:
         9d:d7:3a:ed:1a:15:39:73:52:aa:ef:df:65:00:07:3a:9c:19:
         f3:9e:3e:1d:fa:e9:84:65:e6:25:63:f1:8a:61:3d:f2:58:77:
         ee:be:4c:69:af:68:d5:45:be:1a:95:2e:31:7d:3e:ba:02:26:
         4d:b5:4f:8e:f4:8d:c3:61:42:30:68:b8:1a:fb:61:bc:a4:c1:
         5d:92:3a:f7:d6:28:85:83:78:f0:0d:05:45:16:35:5f:1d:a6:
         e7:86:a8:ac:26:29:e7:e1:05:50:5c:e8:48:ae:2f:d6:55:ff:
         72:33:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:57 2025 by rpki-client