Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
File:                     -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json)
Hash identifier:          8UMPvzIqxfNyF5N2Jex1DTm5OdgrufDTl4VLywPxsJ4=
Subject key identifier:   74:C2:0D:AD:A4:77:3B:74:5F:D3:D8:38:4B:AC:B5:29:55:3F:9D:C9
Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Certificate issuer:       /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Certificate serial:       0BCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
Manifest number:          0BC9
Signing time:             Sat 18 Oct 2025 19:44:27 +0000
Manifest this update:     Sat 18 Oct 2025 19:44:27 +0000
Manifest next update:     Sat 25 Oct 2025 19:44:27 +0000
Files and hashes:         1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: ugF0J68fbbI56S5PTrBgFL7eBE5RzMqf5NL/wyr2GLM=)
                          2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
                          rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3023 (0xbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
        Validity
            Not Before: Oct 18 19:44:27 2025 GMT
            Not After : Oct 25 19:44:27 2025 GMT
        Subject: CN=68f3ee1b-7fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:85:f0:d0:4f:e0:f4:2e:67:fe:e7:04:87:
                    4b:d6:da:22:f7:31:73:99:bb:27:b1:0f:fe:94:ba:
                    4b:11:63:db:30:83:7e:b3:38:97:8b:de:df:b9:08:
                    f2:43:ff:c9:f8:ce:7a:b6:ae:48:be:d4:e0:e5:f4:
                    06:b7:df:ee:87:3d:81:36:df:a0:45:20:96:06:02:
                    81:57:60:16:5e:b6:26:ec:94:02:b8:bc:b0:be:82:
                    35:e9:64:8d:90:37:a4:66:bb:6b:03:e6:6e:9c:a8:
                    e9:39:bf:a1:14:8f:b6:46:8b:bf:f9:b2:69:87:b9:
                    97:ed:9d:7e:7e:68:ab:a1:28:58:dd:dc:33:6b:5b:
                    23:61:e3:95:83:1c:fe:6f:94:1d:c1:2f:ab:0d:28:
                    79:7e:c3:7f:84:35:78:0b:25:23:73:2c:60:ea:e3:
                    dd:5b:d5:1e:91:51:30:aa:89:b2:34:cf:ec:75:e6:
                    be:d6:9a:f4:bd:67:f3:df:75:ab:15:3f:1e:ae:f7:
                    b3:5c:84:07:b6:1a:74:9a:74:c9:05:25:6a:54:64:
                    95:91:99:a0:2c:e0:a4:b9:ee:a9:d2:3f:b7:24:c9:
                    e9:ad:ce:17:2c:06:93:f5:e1:8e:fe:cc:28:cb:c0:
                    22:93:9c:8c:b4:29:0f:b7:9c:23:d7:41:84:c4:2f:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C2:0D:AD:A4:77:3B:74:5F:D3:D8:38:4B:AC:B5:29:55:3F:9D:C9
            X509v3 Authority Key Identifier:
                keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:8a:a1:21:3d:45:d3:ea:22:4d:b7:0e:17:47:b6:7f:2c:cc:
         94:80:cb:32:1a:6c:c8:d2:8d:4c:ac:77:c1:cc:65:fa:8b:77:
         da:af:7a:88:a4:27:ea:5b:a1:ca:32:dc:b6:35:9b:4a:c9:d9:
         5f:6e:dd:db:cb:a8:42:b5:0b:53:56:3b:91:47:7f:59:cc:56:
         6b:bd:e7:e0:b2:3e:f8:9c:81:94:c3:38:d4:aa:13:7c:b4:c5:
         c9:85:ee:6a:56:91:86:82:53:b7:45:59:bb:79:83:53:4c:e3:
         e1:81:33:c1:cb:80:41:10:e9:e2:d1:66:ed:9a:8c:fc:e5:c7:
         b5:a7:c1:3f:c4:67:89:8a:9a:6e:37:fa:c4:ef:a1:f4:e0:d0:
         88:e2:62:2c:0a:b3:6f:87:dc:95:01:43:88:6b:af:95:5f:7a:
         7e:be:68:d9:c0:d6:bd:9d:37:68:37:81:6c:04:0c:a1:bc:4b:
         f9:40:73:a3:8a:50:c5:1c:fb:3d:2c:e1:2c:05:6e:23:d1:b4:
         c9:f5:db:14:17:3b:b6:33:43:fc:03:34:27:6c:08:35:dc:f3:
         81:95:bd:e8:08:2b:65:bf:56:c4:2c:18:c8:cd:47:7b:75:47:
         09:f6:db:4c:4e:32:bf:33:10:f4:72:6f:08:6d:42:f9:10:67:
         41:68:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:18 2025 by rpki-client