Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File:                     9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier:          b+69rc9s5EYN5UiQo0X5BOhcb3aAqNpFeE03Rtn52g8=
Subject key identifier:   B9:A1:36:BA:8B:91:BB:29:B2:FF:3C:D4:AA:6C:72:CD:2B:10:42:E0
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer:       /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number:          E2
Signing time:             Sun 19 Oct 2025 08:27:21 +0000
Manifest this update:     Sun 19 Oct 2025 08:27:20 +0000
Manifest next update:     Sun 26 Oct 2025 08:27:20 +0000
Files and hashes:         1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: S6mp2mlavDHkkvrffq7SX2XGp3kVYHooZ940xA8UEpc=)
                          2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
                          rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
        Validity
            Not Before: Oct 19 08:27:20 2025 GMT
            Not After : Oct 26 08:27:20 2025 GMT
        Subject: CN=68f4a0e8-de39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:39:44:47:ab:85:16:0b:58:13:fc:b8:d8:ab:
                    52:8a:15:19:ff:bc:a9:cb:de:20:87:ac:4e:62:0d:
                    29:db:f5:9f:f3:bc:44:60:95:64:7a:14:98:1e:69:
                    40:58:1c:94:ad:89:0f:b7:b4:75:c4:df:35:00:74:
                    b6:47:bd:f0:66:06:18:4f:c7:c8:eb:3c:f6:6e:92:
                    aa:81:07:16:6b:c4:7e:36:11:84:8d:4e:d1:18:98:
                    ca:e6:11:6a:7f:30:33:02:06:8b:f7:30:d3:de:63:
                    c2:9a:b1:17:ff:d4:37:ee:e6:eb:2b:af:87:4a:d6:
                    65:8f:81:11:1c:38:eb:46:02:fa:f8:b3:b8:be:a4:
                    a0:92:49:2f:6f:bf:f9:57:40:25:79:fd:fd:53:12:
                    46:c1:c2:24:80:5c:c5:c6:e3:73:45:ef:af:9f:f3:
                    36:3f:eb:1f:8e:1d:9e:3d:11:cf:8d:90:c6:d0:da:
                    f5:60:6d:cd:d8:36:93:90:30:e1:1b:d8:53:48:07:
                    ed:23:3f:2c:8f:3a:40:fd:7e:a1:4e:66:a2:f2:1a:
                    e7:41:5e:58:45:85:48:6b:76:15:09:a9:c8:00:46:
                    03:5c:60:a7:46:26:99:19:aa:a7:55:6e:51:04:96:
                    4f:59:c4:ce:18:8a:b9:7f:d0:ba:d3:ac:b2:10:61:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:36:BA:8B:91:BB:29:B2:FF:3C:D4:AA:6C:72:CD:2B:10:42:E0
            X509v3 Authority Key Identifier:
                keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:c5:71:1c:d0:78:c5:51:41:0e:4c:f7:84:be:80:3f:fd:
         1f:5a:e3:a3:cb:21:b0:b0:a0:35:ce:bb:64:a4:c1:45:2e:bf:
         9f:d2:53:8e:14:d1:e0:dd:66:fb:35:7a:2a:92:2b:a0:1e:f5:
         95:20:11:53:53:22:83:e7:66:2c:c6:7b:2d:36:7a:85:50:a3:
         9d:65:0a:56:d2:b2:f5:33:4b:44:85:83:c2:16:6f:4f:2a:3d:
         59:0a:2f:0b:90:34:a9:41:ec:a0:bb:5a:cc:12:74:6d:d5:a2:
         b5:97:8c:8c:3c:45:7c:dc:e5:0e:96:94:b1:d7:a2:2e:94:08:
         51:9c:db:9c:eb:c1:02:c6:ed:a1:5c:5b:5d:bc:91:a5:5f:65:
         2e:d4:80:77:73:be:a8:bb:d7:0c:50:f2:84:ec:24:97:ae:35:
         47:50:91:14:a4:62:36:15:e4:9d:e7:7b:c3:93:7f:93:38:54:
         fd:36:c1:c5:8f:38:d1:83:93:43:19:c2:98:c9:a5:e1:32:fe:
         df:94:36:9c:3d:76:42:5a:64:2f:6d:00:39:34:cd:4a:ab:13:
         27:6a:e0:45:66:37:68:f2:73:94:0d:1e:38:dc:90:03:87:57:
         31:43:78:0f:0e:cf:d9:2a:e6:a9:2f:ce:0a:13:bf:e5:e9:83:
         6f:0f:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:44:57 2025 by rpki-client