Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          RSTkj7SzVgTNcxMu1TXR0+oyZdlya7WbDfhFqyHDK3s=
Subject key identifier:   84:EC:70:B4:50:4C:9E:EA:30:CD:AD:0E:78:53:23:7F:41:CD:F8:A4
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       1959
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          1929
Signing time:             Sat 18 Oct 2025 16:49:50 +0000
Manifest this update:     Sat 18 Oct 2025 16:49:49 +0000
Manifest next update:     Sat 25 Oct 2025 16:49:49 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: muhBTc6fJ7vDdVb/j0kBeFyvG/3CTmEeMGyOm032Qjk=)
                          2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: afMkh+nThhAtZWr5uZa/M537SW67iX+SaWwO2XmeAUU=)
                          3: D3FDB470817311EFA6D1742FC4F9AE02.roa (hash: 4G7ZYo5KeEtsAfgPO4X6TXioM+QJOrK11Ezfknn68Qk=)
                          4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: M+kVidWeNxQJxyYqpjX+UThdH/HC0I70LM24xp9pvfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6489 (0x1959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: Oct 18 16:49:49 2025 GMT
            Not After : Oct 25 16:49:49 2025 GMT
        Subject: CN=68f3c52e-c085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:d5:3a:03:ed:96:c2:31:43:3b:2c:ce:f6:
                    ee:36:ce:fd:77:ef:80:d0:81:59:1c:e3:c7:5a:b5:
                    d5:bf:fe:46:01:40:3d:f4:b7:a7:5a:48:36:63:5e:
                    2c:a7:18:d8:0b:18:89:fa:f4:f1:19:24:b7:76:78:
                    0c:cd:44:6c:30:43:b9:a4:95:16:d4:7e:27:d1:74:
                    47:c8:25:c7:d8:47:8f:dc:ae:88:7d:8e:97:65:e8:
                    fb:2b:56:e1:c1:ce:db:6d:1a:e1:84:8b:80:4b:3f:
                    5a:95:b4:3c:d6:01:c2:70:6f:cd:ca:97:e6:f7:3d:
                    26:11:d5:08:8b:8d:8b:cd:c5:9a:1d:93:8d:1e:31:
                    2b:11:b7:bc:ce:29:c8:68:a5:54:97:9f:23:da:7e:
                    6f:a8:33:ba:50:10:5d:6a:de:36:e2:be:44:1d:f0:
                    00:23:80:2d:ad:3b:45:d5:19:72:9c:28:55:c4:bd:
                    cc:2c:6d:42:af:68:4e:6d:ba:68:36:4f:6b:39:4c:
                    e0:3a:2b:d5:d4:98:2d:e2:d6:a0:cb:e6:05:f7:6e:
                    76:08:ae:ee:df:23:b7:2f:0d:1a:26:b1:fa:e0:9a:
                    d3:fe:0b:ac:85:4e:fb:d3:a7:00:a9:8e:a2:41:70:
                    8f:b6:eb:3d:5e:f5:51:d2:06:f7:62:27:35:b4:bf:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:70:B4:50:4C:9E:EA:30:CD:AD:0E:78:53:23:7F:41:CD:F8:A4
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ab:7c:50:b4:60:72:ac:87:25:fc:a6:da:bb:a1:a1:31:cc:
         41:b8:da:de:31:03:90:71:cc:31:93:c7:9d:95:6e:7a:ef:8c:
         60:59:34:81:1d:36:bf:33:f8:3b:30:f5:14:91:ec:f4:9f:67:
         02:d6:ce:8a:e2:e4:f6:42:4a:c5:c1:1a:c0:00:f6:e7:79:54:
         51:cb:67:89:1e:4a:aa:89:c4:1b:d1:09:6d:52:81:a1:94:a5:
         c0:fe:ae:7c:a6:8d:d5:69:7b:6f:b4:cf:ab:9b:60:67:dd:66:
         da:f5:dd:5e:c8:fd:68:03:3e:f1:a7:85:46:67:b4:ee:ba:6b:
         17:bf:bb:59:88:ed:2b:6c:e0:45:13:1d:99:06:ea:08:82:25:
         56:d0:c2:51:a5:16:b1:e4:b5:92:26:fc:44:e2:6c:d3:cd:bd:
         95:da:29:fd:cb:1b:0b:a2:9c:30:76:2e:95:01:e0:65:c8:f5:
         b8:bf:f1:f2:05:13:7b:a9:58:1b:38:f0:b7:36:1f:f9:b3:cd:
         39:01:72:3d:50:8c:a8:46:ce:da:27:2c:b1:57:cf:9f:f2:4e:
         3f:10:e4:21:d3:b0:c6:bc:59:42:1b:6f:48:51:34:45:9a:f1:
         bb:c0:2c:dc:21:d6:ce:dd:ad:57:25:e0:c5:23:6f:61:b1:0c:
         d3:84:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:14 2025 by rpki-client