Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
File:                     l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json)
Hash identifier:          a4DfPm7VqVwd8anAvlmr+keNkiE0UlpccGJ4Y3w9i8c=
Subject key identifier:   66:D3:39:C1:19:E2:82:EC:E0:37:AD:F0:0B:F3:11:51:D8:3E:42:96
Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
Certificate issuer:       /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
Manifest number:          F3
Signing time:             Sun 19 Oct 2025 08:10:46 +0000
Manifest this update:     Sun 19 Oct 2025 08:10:45 +0000
Manifest next update:     Sun 26 Oct 2025 08:10:45 +0000
Files and hashes:         1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: pHGVhXkmTZxsZvDypcQ2RMHllMsXGKH9PybSYZQf5JI=)
                          2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: N6wnq+SiTT7KZAm9ihuMhFBquoYx3YiKfww2FuMhesA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691
        Validity
            Not Before: Oct 19 08:10:45 2025 GMT
            Not After : Oct 26 08:10:45 2025 GMT
        Subject: CN=68f49d05-fd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:0a:24:67:1f:54:bd:ec:6a:dd:6f:a8:7b:
                    dc:1f:50:c2:19:63:a3:72:81:5a:b5:14:b1:1e:a4:
                    52:ae:60:06:91:2d:62:ec:0a:fc:d2:57:67:54:3b:
                    e2:58:2a:e8:19:fd:20:d1:cc:08:0c:f0:26:9d:54:
                    14:61:38:33:84:76:fa:8b:62:08:cc:63:1f:98:30:
                    4f:cc:9d:65:b5:28:89:67:ed:a2:b0:b9:04:48:fb:
                    0e:c0:32:55:86:10:32:a8:00:4d:fa:c7:0c:c6:0d:
                    de:f6:30:13:f1:39:cb:bb:d9:56:3a:5e:fc:75:5a:
                    29:d7:c5:92:aa:e6:6f:a1:35:df:87:27:33:58:b9:
                    23:4a:48:7b:1d:2c:56:2c:5e:c8:8b:79:ac:a0:ed:
                    be:27:34:10:d2:8b:f7:67:0e:82:48:cd:63:f9:b6:
                    3a:88:1e:03:c8:30:3d:df:cd:ec:3e:d7:67:92:f8:
                    14:ca:91:41:56:39:62:1b:eb:74:dd:90:4e:12:c1:
                    3d:86:17:dd:89:ff:d1:d3:57:20:4c:4e:de:60:37:
                    83:80:d8:0d:93:81:90:4c:dc:6c:46:fa:ea:3c:e7:
                    2b:a9:6f:c6:bd:06:64:87:e1:d7:c3:d9:66:be:42:
                    dd:27:c9:14:82:e3:86:b1:ff:89:c8:57:5a:1f:77:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D3:39:C1:19:E2:82:EC:E0:37:AD:F0:0B:F3:11:51:D8:3E:42:96
            X509v3 Authority Key Identifier:
                keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:79:ff:8d:cb:c6:d6:6b:f2:9c:c2:22:c6:18:21:ef:69:3b:
         8e:a8:fd:a1:c4:71:2b:db:bf:70:1a:b0:bf:8c:71:f0:34:6b:
         79:55:12:11:26:0a:76:50:01:f1:e8:eb:53:8e:df:4f:fb:bd:
         df:6f:e4:48:9d:c5:50:45:cb:44:fe:61:c4:8f:97:5d:01:f1:
         ee:3f:1e:7d:c3:77:f3:27:fc:55:f7:4b:4f:fd:fd:de:e7:d9:
         6f:95:f1:4e:91:3d:ef:aa:50:39:d8:79:1c:7e:1b:02:60:e5:
         69:c7:3e:74:0c:bf:bc:0c:6d:44:80:a1:91:c9:62:30:b6:aa:
         9b:e2:42:7f:1f:c5:0f:2a:a8:df:cb:1f:dc:76:11:d2:f2:f8:
         ca:d9:16:9b:c4:53:9d:0c:3d:d0:60:7c:07:8b:b2:8f:5f:bb:
         a6:98:3e:89:95:86:94:34:6e:74:28:7d:ae:a0:78:1e:3d:d0:
         4a:87:ab:8b:a8:59:dd:cf:3e:7b:2d:68:41:d5:21:3c:60:91:
         2f:22:9c:ae:d1:f3:5d:dc:d1:d2:d5:e3:1c:f1:7e:a9:f7:fa:
         4a:06:29:32:c4:f9:ae:39:bc:f2:20:88:39:7f:06:46:a0:39:
         d1:38:ad:35:ce:6c:9b:32:a8:ed:03:5c:80:64:e0:63:5d:75:
         70:6e:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:49 2025 by rpki-client