Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
File:                     0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json)
Hash identifier:          8rMwjKtco64Yty0hwK5Jgpl4zatgOivffEIOHZH4mS8=
Subject key identifier:   17:F2:DD:FD:B8:DC:A6:11:41:1C:AE:59:51:91:72:25:99:DF:74:A0
Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
Certificate issuer:       /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
Certificate serial:       3255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
Manifest number:          3243
Signing time:             Sat 18 Oct 2025 15:35:36 +0000
Manifest this update:     Sat 18 Oct 2025 15:35:35 +0000
Manifest next update:     Sat 25 Oct 2025 15:35:35 +0000
Files and hashes:         1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: skpSW+k9J+TIekBnX6hD3JJWpxLtujVew9wObAScDk8=)
                          2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl
                          rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12885 (0x3255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
        Validity
            Not Before: Oct 18 15:35:35 2025 GMT
            Not After : Oct 25 15:35:35 2025 GMT
        Subject: CN=68f3b3c7-713f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:8a:42:8c:3b:93:2c:85:e8:93:92:55:7d:
                    88:cf:5e:4d:01:3c:93:64:bc:b7:f5:dc:1b:20:d4:
                    48:d4:9a:c1:a1:06:83:26:7f:c2:94:19:bd:30:ec:
                    3f:64:a9:7e:d7:5a:4d:5e:6e:1e:a8:80:5d:99:c6:
                    1b:60:16:a1:63:2d:d4:d1:6d:da:e1:02:2c:19:92:
                    09:aa:a0:76:21:d6:1a:18:69:ca:42:55:cc:eb:59:
                    8b:27:45:91:7a:37:5d:3a:e3:a9:a1:60:3a:f9:af:
                    c5:57:71:6f:54:06:8e:7d:c8:d4:4b:72:fa:d1:80:
                    b0:c6:87:5f:85:0d:34:90:92:c1:13:dd:bf:33:c6:
                    0d:15:7d:30:e0:0b:ff:df:ef:20:83:06:90:b1:e1:
                    76:88:13:a7:f8:76:47:7e:e5:4b:5c:01:eb:d3:0c:
                    7f:f8:f9:04:f3:52:66:36:ea:85:d3:10:41:a4:5d:
                    84:76:69:e0:95:32:df:7e:a8:9e:02:35:85:e2:71:
                    31:fb:52:52:74:b5:b2:a8:eb:d0:d3:6f:ec:60:43:
                    74:d7:f6:0f:d0:a7:28:36:b4:17:14:fe:ca:2a:be:
                    b7:b9:30:f8:7e:93:af:a8:8a:41:56:a3:50:fa:16:
                    9b:14:a1:49:cf:e8:b6:ee:47:d9:48:3c:6e:d8:26:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:DD:FD:B8:DC:A6:11:41:1C:AE:59:51:91:72:25:99:DF:74:A0
            X509v3 Authority Key Identifier:
                keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:03:3b:6f:06:1f:d8:54:53:b7:32:db:e0:b1:1c:d2:91:37:
         75:17:4f:3a:90:5c:d6:62:47:72:e8:3e:ce:8c:ae:d0:88:8a:
         69:3b:a6:67:b1:0d:38:25:0d:88:52:f8:84:8e:cf:e8:b9:59:
         53:59:69:ce:f0:e7:0f:f5:74:c1:43:2b:86:ea:c2:47:79:74:
         7d:db:f5:08:4a:71:7b:e1:99:a6:07:99:45:7e:a0:64:72:b3:
         d5:9f:75:19:62:7b:d7:72:ba:e3:4c:0f:52:f2:27:db:7c:4b:
         a1:7e:ef:31:fd:07:5b:46:eb:7d:be:cf:25:21:ef:e9:c2:9b:
         4a:8d:93:60:36:e1:22:6a:07:7b:39:f3:22:3c:7f:df:a4:ee:
         da:27:9a:16:65:51:73:17:8d:99:03:6c:a8:76:50:93:ed:42:
         ad:ce:26:ec:34:64:db:96:51:bf:78:27:8f:65:3d:07:25:20:
         f7:56:b8:e0:a9:d9:5d:62:5e:1d:33:a8:9b:48:1d:bb:e8:54:
         57:22:f2:6c:7b:3f:d8:7b:70:46:aa:e4:37:92:49:0f:5d:fa:
         7b:31:5d:05:7f:02:d9:83:d9:9e:8c:04:c5:e3:c4:48:38:fc:
         02:78:17:9b:40:e5:90:f9:19:62:ca:68:f8:8e:40:e7:61:09:
         48:1e:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:29 2025 by rpki-client