Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          6tKdNOK1OnSVKjo6ZYinFxUQkybdOcjxHVF8roa1bpQ=
Subject key identifier:   96:F2:92:09:9A:41:D8:51:9F:BB:61:77:D6:A1:7B:BD:66:EB:99:75
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          013F
Signing time:             Sun 19 Oct 2025 07:11:04 +0000
Manifest this update:     Sun 19 Oct 2025 07:11:03 +0000
Manifest next update:     Sun 26 Oct 2025 07:11:03 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: GSujMs37MdtrelJ6mtCaySoedt10Xrtkeh1dSpeK58E=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Oct 19 07:11:03 2025 GMT
            Not After : Oct 26 07:11:03 2025 GMT
        Subject: CN=68f48f07-4af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:44:b6:2f:91:21:51:3d:53:ca:fb:13:58:88:
                    23:28:5f:7e:44:5b:78:aa:30:c9:04:e0:bf:78:94:
                    1e:73:77:b3:f2:fa:38:ae:7d:f4:74:6c:71:0a:07:
                    7b:94:f7:b9:93:19:80:1e:01:e5:17:ab:17:33:fb:
                    9e:47:e9:f3:92:03:93:6b:6c:5a:b0:36:6b:f6:b3:
                    6e:45:06:cc:d5:81:3d:ae:1e:10:41:65:a7:4d:d8:
                    77:f0:53:78:89:49:16:6a:fc:1f:2b:d4:9c:28:f2:
                    29:d7:ba:be:1e:c1:17:43:9b:52:b4:e2:a4:a1:62:
                    25:8d:ca:2e:05:0d:f4:ee:10:d6:94:38:37:6f:cf:
                    5a:e8:20:78:64:9e:43:79:68:61:fa:64:06:fc:9f:
                    a3:86:fa:d0:4d:7d:8e:1a:01:e1:ad:86:df:31:d7:
                    11:5c:b9:4e:b0:2e:d0:1f:af:41:c5:55:d3:f1:72:
                    32:46:08:34:da:8d:91:04:ab:d9:90:01:74:2b:70:
                    33:35:e2:df:76:03:85:0e:f0:98:9b:79:04:84:e6:
                    44:43:2a:d2:8b:27:77:f1:c9:12:ad:d4:b5:80:32:
                    e5:2d:45:96:fc:ff:0f:84:9b:1a:49:b4:48:2b:55:
                    88:4d:47:73:24:d5:e3:e7:09:64:02:74:95:04:91:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F2:92:09:9A:41:D8:51:9F:BB:61:77:D6:A1:7B:BD:66:EB:99:75
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1c:a4:d5:f1:64:ae:32:a5:c8:8f:84:96:cd:40:ec:cc:a4:
         f3:9c:58:dc:01:40:a1:61:9c:59:28:81:a2:e7:14:ec:c9:4c:
         32:de:c2:e8:15:24:9e:9a:15:42:1f:48:ea:38:8b:d4:33:4b:
         dd:2a:7c:b3:41:d8:bb:75:84:27:0d:de:df:ea:9c:9f:8e:c1:
         5d:c2:4d:9b:29:cc:cf:82:f5:4b:82:48:28:66:3f:de:4b:90:
         c1:46:15:64:8b:91:51:c0:aa:f0:35:c0:12:b7:72:34:9c:2b:
         fd:32:da:82:11:9f:c6:69:a9:2e:81:0c:ec:0f:a7:79:88:63:
         9a:f2:eb:94:f2:d1:4a:1f:cf:7e:ce:b6:7e:31:dd:4f:d8:a3:
         f4:a3:8e:a1:dc:32:86:5f:67:11:2b:a3:70:be:02:e1:70:e1:
         40:10:d8:b4:b7:e3:48:e9:62:70:de:e9:3e:c4:77:8b:34:bf:
         03:f3:cc:08:9c:61:d2:27:9f:2d:21:4f:6a:00:97:a7:e5:9c:
         80:4b:15:b7:79:d3:b4:4e:a6:9a:e1:c0:68:c0:15:b3:99:9b:
         b9:45:0c:87:48:29:13:1e:c1:af:b2:63:9c:42:df:25:20:ae:
         bf:20:ac:7e:34:0d:a9:94:e8:7d:7a:85:ae:85:a5:09:56:30:
         63:ec:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:47 2025 by rpki-client