Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          YrH5jWxszfKm9sqImYfwJMs15hO3umnHEoQnHXeVmuU=
Subject key identifier:   95:E4:55:6C:A3:AF:F9:32:6A:68:D4:6D:B6:0F:F3:B1:C0:B2:08:4A
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          0126
Signing time:             Sun 19 Oct 2025 07:32:07 +0000
Manifest this update:     Sun 19 Oct 2025 07:32:06 +0000
Manifest next update:     Sun 26 Oct 2025 07:32:06 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: YX/L7w4k65vzD7OartYtOd0rJgJtpe9tUc6nyyz5Z70=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Oct 19 07:32:06 2025 GMT
            Not After : Oct 26 07:32:06 2025 GMT
        Subject: CN=68f493f7-dc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:ed:ca:50:65:59:c5:b4:a2:1e:65:25:18:
                    6e:30:ab:2c:62:78:45:85:61:0f:74:62:df:03:25:
                    37:0b:9d:80:f9:ac:c4:99:5c:93:ed:80:68:dc:a4:
                    94:53:ec:6a:f9:ee:14:b6:62:30:ad:63:91:b8:92:
                    f4:b6:45:6b:a0:85:00:22:58:86:c0:7c:e5:03:25:
                    66:4e:7a:3b:25:4a:84:5a:b4:13:55:57:19:f1:d3:
                    2d:b2:f8:36:63:98:05:3b:1b:1d:21:8f:f3:c0:21:
                    8f:5b:21:82:4c:e4:95:88:b9:b2:cf:09:b9:f1:30:
                    63:dc:22:e5:c9:ee:81:e5:85:19:c8:16:db:81:ce:
                    d3:12:f1:fe:a5:30:43:dd:a6:4e:db:13:1f:97:be:
                    e7:9c:b0:e8:91:3e:3a:51:09:90:f6:4b:09:80:45:
                    00:b6:fd:56:31:94:43:de:0c:5e:20:14:6e:88:ec:
                    78:d9:bc:b2:0b:7f:6b:9d:be:5a:9d:a8:79:57:0a:
                    68:ae:eb:71:80:c1:be:13:cf:06:64:2c:7b:ac:b2:
                    69:68:09:46:a6:8d:31:0b:d4:37:71:d8:e8:ff:55:
                    9e:96:07:aa:57:a7:92:2c:4d:00:2d:9c:70:a6:1e:
                    71:bb:e7:31:3d:2b:41:a2:08:87:28:e3:ab:5a:e4:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E4:55:6C:A3:AF:F9:32:6A:68:D4:6D:B6:0F:F3:B1:C0:B2:08:4A
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:20:f7:a4:0c:97:0a:f1:35:82:3d:cc:b8:60:5c:56:b5:8e:
         75:d6:ae:5d:30:dc:e7:14:02:a7:ca:2e:7b:4f:0e:21:7f:fe:
         70:20:fe:c0:6e:27:f8:cd:98:26:bf:86:ef:f4:1b:43:d1:ff:
         04:c0:bb:e4:b2:07:7c:d4:68:a2:74:d1:5a:92:dc:90:38:5d:
         ea:db:54:3e:61:26:fc:aa:c8:ad:6e:6a:b3:fc:09:1a:1e:27:
         3b:e7:47:78:bb:1c:92:89:0c:a2:cb:9d:fd:20:68:6e:e8:31:
         d1:6e:98:6b:e5:03:02:4b:c2:cc:2d:2a:e5:e9:ec:9f:85:8c:
         3e:35:50:4e:c5:55:a6:f6:2b:d5:a3:57:15:ae:88:1a:d7:10:
         9c:aa:5f:08:0d:b3:04:81:3a:3e:b0:f7:a2:75:b9:3a:44:1b:
         20:5b:dc:d8:75:cb:65:c6:69:4e:ca:1c:64:bc:00:6a:11:6d:
         31:9c:6e:bc:d6:1e:c8:15:e8:99:c7:c9:71:43:5d:ad:65:9f:
         08:0d:bd:52:7e:1e:f2:9a:cd:a8:0f:64:eb:22:18:db:8c:ca:
         bb:ea:34:56:41:75:62:8d:f7:b9:d4:fd:d4:23:dd:ba:ef:1d:
         a9:2d:31:0c:9e:48:73:f3:04:3c:51:37:e2:22:7f:f7:db:df:
         dc:2b:b1:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY1MTQxMTAvBgNVBAUTKDRBNEQ3RjU4RUZCRDQ4Qjg2MzZEQjZBMEJGN0MyREU1
MEYwNDM2MjEwHhcNMjUxMDE5MDczMjA2WhcNMjUxMDI2MDczMjA2WjAYMRYwFAYD
VQQDEw02OGY0OTNmNy1kYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAohztylBlWcW0oh5lJRhuMKssYnhFhWEPdGLfAyU3C52A+azEmVyT7YBo3KSU
U+xq+e4UtmIwrWORuJL0tkVroIUAIliGwHzlAyVmTno7JUqEWrQTVVcZ8dMtsvg2
Y5gFOxsdIY/zwCGPWyGCTOSViLmyzwm58TBj3CLlye6B5YUZyBbbgc7TEvH+pTBD
3aZO2xMfl77nnLDokT46UQmQ9ksJgEUAtv1WMZRD3gxeIBRuiOx42byyC39rnb5a
nah5VwporutxgMG+E88GZCx7rLJpaAlGpo0xC9Q3cdjo/1WelgeqV6eSLE0ALZxw
ph5xu+cxPStBogiHKOOrWuSv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXkVWyj
r/kyamjUbbYP87HAsghKMB8GA1UdIwQYMBaAFEpNf1jvvUi4Y222oL98LeUPBDYh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUxNC9CNzczQTE2NEVC
QzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNMaGpiYmFndjN3dDVROEVO
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrMV9XTy05U0xoamJiYWd2M3d0NVE4RU5pRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjUxNC9CNzczQTE2NEVCQzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNM
aGpiYmFndjN3dDVROEVOaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUIPekDJcK8TWCPcy4YFxWtY511q5dMNznFAKnyi57Tw4hf/5wIP7A
bif4zZgmv4bv9BtD0f8EwLvksgd81GiidNFaktyQOF3q21Q+YSb8qsitbmqz/Aka
Hic750d4uxySiQyiy539IGhu6DHRbphr5QMCS8LMLSrl6eyfhYw+NVBOxVWm9ivV
o1cVroga1xCcql8IDbMEgTo+sPeidbk6RBsgW9zYdctlxmlOyhxkvABqEW0xnG68
1h7IFeiZx8lxQ12tZZ8IDb1Sfh7yms2oD2TrIhjbjMq76jRWQXVijfe51P3UI926
7x2pLTEMnkhz8wQ8UTfiIn/329/cK7Fg
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:57 2025 by rpki-client