Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          OP+7YQV6oHY7eXcZyE9RicZ9O/kuSsNFLGMC9DhnEtQ=
Subject key identifier:   F6:CD:69:1B:62:82:B4:C1:8C:B3:52:C0:C7:6F:64:A3:FC:C1:1E:AD
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          060C
Signing time:             Sun 19 Oct 2025 00:27:53 +0000
Manifest this update:     Sun 19 Oct 2025 00:27:52 +0000
Manifest next update:     Sun 26 Oct 2025 00:27:52 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: D3mraab5gpLondc4XyAhqyrlX6H+zECE+wRw0NmfBaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Oct 19 00:27:52 2025 GMT
            Not After : Oct 26 00:27:52 2025 GMT
        Subject: CN=68f43089-c1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:0a:37:fb:4a:2d:f1:87:05:b0:1c:51:9c:
                    c7:c9:dc:01:5b:a2:0f:f5:fd:86:7f:22:f7:af:44:
                    2f:b4:8c:03:53:35:25:61:be:a6:1d:05:92:d6:7e:
                    c3:e9:d6:9b:66:bd:ba:51:e1:a8:57:52:ea:e5:68:
                    6a:a0:09:6d:8f:9e:be:30:57:f6:6f:96:8f:89:51:
                    d4:65:96:a6:10:23:5b:ff:de:a9:d4:95:e1:56:6c:
                    37:1a:5d:87:4d:55:41:00:aa:1a:9b:46:2c:5d:66:
                    cb:de:fd:89:04:54:00:9d:44:fe:01:37:1d:4f:e5:
                    5b:2c:7f:c0:de:f3:18:0b:c4:e4:fc:a6:c1:61:07:
                    54:7e:56:20:79:ed:9c:5c:a2:8f:3e:33:7c:b0:c0:
                    e0:95:b5:85:a3:7d:5c:9d:0c:09:9e:4b:67:ed:0c:
                    96:0d:ef:4b:64:4c:cf:7f:b7:dd:86:a8:e8:d1:dd:
                    44:f6:8a:04:39:b6:79:4d:0e:07:05:c1:9d:39:d7:
                    96:a6:34:90:c6:52:fd:1b:d7:a0:4a:ad:54:6a:c5:
                    bc:a9:03:73:5f:91:24:65:7b:90:95:00:61:9f:bf:
                    41:45:e1:35:78:65:87:26:b2:c3:1a:3d:f1:a9:d2:
                    26:05:96:28:78:04:86:68:28:3b:28:81:53:30:9f:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:69:1B:62:82:B4:C1:8C:B3:52:C0:C7:6F:64:A3:FC:C1:1E:AD
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:76:3d:88:ed:28:e3:77:bf:39:fb:b6:fd:b2:53:e9:53:
         ef:4c:ad:68:66:6a:8e:93:6b:24:25:6e:63:ac:18:97:4d:a5:
         ba:93:cb:23:ec:e8:6b:fa:10:38:c4:1f:5d:0e:56:6c:e6:ce:
         b3:03:89:b4:9d:01:23:9a:01:0d:48:f4:42:cd:7d:12:7a:b5:
         f7:81:54:bc:2a:d2:56:e5:85:6b:19:03:d4:19:89:65:dc:81:
         35:46:ec:bf:6d:d0:f1:97:15:f0:7a:96:e9:72:58:76:00:24:
         e1:5b:6d:07:13:02:d9:1a:96:1e:15:73:bb:ef:5b:d4:1d:8d:
         b8:36:a4:65:73:03:d2:a4:ae:13:7a:50:be:89:c3:06:98:66:
         f4:c9:93:cd:fe:fe:fa:35:27:14:06:f2:68:1f:b7:b9:93:a5:
         a1:b2:ce:e1:5e:66:41:10:9a:fb:69:20:3b:86:dc:62:0f:cd:
         a9:f0:e7:09:38:21:a4:4a:2e:fc:cd:8d:ca:a7:a1:15:ce:1c:
         75:bb:4c:b0:81:c3:56:5f:e8:99:08:1d:6f:ef:40:95:db:32:
         e9:a9:f6:c9:43:d8:7f:a6:3e:39:b7:37:bb:f5:1f:56:c4:f9:
         65:c8:fc:72:ca:3e:07:11:67:f2:8a:36:42:0e:2c:92:a1:56:
         b7:26:84:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx
RkQxRENFQTgwHhcNMjUxMDE5MDAyNzUyWhcNMjUxMDI2MDAyNzUyWjAYMRYwFAYD
VQQDEw02OGY0MzA4OS1jMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8gKN/tKLfGHBbAcUZzHydwBW6IP9f2GfyL3r0QvtIwDUzUlYb6mHQWS1n7D
6dabZr26UeGoV1Lq5WhqoAltj56+MFf2b5aPiVHUZZamECNb/96p1JXhVmw3Gl2H
TVVBAKoam0YsXWbL3v2JBFQAnUT+ATcdT+VbLH/A3vMYC8Tk/KbBYQdUflYgee2c
XKKPPjN8sMDglbWFo31cnQwJnktn7QyWDe9LZEzPf7fdhqjo0d1E9ooEObZ5TQ4H
BcGdOdeWpjSQxlL9G9egSq1UasW8qQNzX5EkZXuQlQBhn79BReE1eGWHJrLDGj3x
qdImBZYoeASGaCg7KIFTMJ/R7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbNaRti
grTBjLNSwMdvZKP8wR6tMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG
NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi
cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfenY9iO0o43e/Ofu2/bJT6VPvTK1oZmqOk2skJW5jrBiXTaW6k8sj
7Ohr+hA4xB9dDlZs5s6zA4m0nQEjmgENSPRCzX0SerX3gVS8KtJW5YVrGQPUGYll
3IE1Ruy/bdDxlxXwepbpclh2ACThW20HEwLZGpYeFXO771vUHY24NqRlcwPSpK4T
elC+icMGmGb0yZPN/v76NScUBvJoH7e5k6Whss7hXmZBEJr7aSA7htxiD82p8OcJ
OCGkSi78zY3Kp6EVzhx1u0ywgcNWX+iZCB1v70CV2zLpqfbJQ9h/pj45tze79R9W
xPllyPxyyj4HEWfyijZCDiySoVa3JoT6
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:22:28 2025 by rpki-client