Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
File:                     9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json)
Hash identifier:          gr4oifewOWGgbgNJjJ1oOvwSZd6yB96VMlUHxXWo5Bg=
Subject key identifier:   5C:21:D7:5C:2D:39:E1:16:20:2E:A5:F2:2D:94:5C:3A:EA:61:A7:23
Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Certificate issuer:       /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
Certificate serial:       186C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
Manifest number:          185E
Signing time:             Sat 18 Oct 2025 16:53:29 +0000
Manifest this update:     Sat 18 Oct 2025 16:53:29 +0000
Manifest next update:     Sat 25 Oct 2025 16:53:29 +0000
Files and hashes:         1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: k/pNTnYpnEA6LrD+Nd4yjo8Y/1bWlsOmRWZt5qCg65U=)
                          2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: 12/YQGKh2uNHDbW3TNnX9cKDq/H76Hjbaf684uCZbYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl
                          rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6252 (0x186c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
        Validity
            Not Before: Oct 18 16:53:29 2025 GMT
            Not After : Oct 25 16:53:29 2025 GMT
        Subject: CN=68f3c609-6f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:71:f4:82:29:aa:19:10:f2:2a:2a:a0:4d:
                    14:fe:c5:ac:9a:a3:67:26:4c:80:ae:95:a6:6d:5a:
                    5c:7b:26:11:80:50:82:08:6f:43:d5:85:5a:3b:a0:
                    a3:a9:2d:c7:2f:fc:9e:ae:e4:d3:2c:03:b9:ef:5f:
                    6e:a8:9a:7c:8e:fe:13:8c:9f:f7:be:ed:d0:b4:22:
                    1d:a5:d8:88:99:d8:9b:dc:2c:91:3e:98:18:6a:70:
                    ac:9d:77:00:6e:fd:b6:25:a3:02:25:91:96:75:1f:
                    86:d7:10:4b:64:37:e4:6b:8f:05:8b:8b:77:5c:37:
                    62:4a:02:e3:27:ac:61:e6:07:0c:12:b1:c7:6d:e3:
                    aa:32:61:f6:65:7a:bd:26:83:22:64:a2:3c:f1:39:
                    13:e4:ce:d0:ae:f7:5f:b8:46:0f:13:fc:41:50:0e:
                    ce:14:dd:e7:8f:58:97:55:02:84:00:13:ca:67:48:
                    74:ad:1f:36:c9:1a:52:ee:82:61:4c:87:9a:75:f3:
                    87:6a:08:66:9e:bd:2d:f8:fa:6d:79:d1:70:32:13:
                    8c:c0:59:2f:d9:b8:4e:c4:1f:d4:64:34:e8:7f:cc:
                    20:93:4f:ba:8b:5d:02:f7:4d:4b:7b:b9:4e:db:3b:
                    2c:ca:5a:01:09:f5:b9:0f:42:94:99:e1:2c:4b:a4:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:D7:5C:2D:39:E1:16:20:2E:A5:F2:2D:94:5C:3A:EA:61:A7:23
            X509v3 Authority Key Identifier:
                keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:59:0e:6b:68:d3:e9:d6:64:69:91:b8:bf:86:b0:eb:87:7f:
         2b:42:06:4d:32:c5:c0:e8:1c:5a:2b:3d:fb:c5:25:84:41:f0:
         58:e7:ad:0e:0f:28:3b:4c:07:62:6f:de:d3:cc:77:36:72:36:
         26:f2:ec:ff:26:c9:aa:95:82:02:e4:09:ef:d8:be:4c:b8:41:
         9c:d1:84:39:e0:25:d6:ee:5f:ed:c8:b4:ca:19:18:46:55:33:
         95:f4:5e:00:6b:4a:9e:ae:6a:4a:33:f7:1a:1d:df:77:b4:0a:
         42:93:7e:b1:98:f2:39:14:da:d7:d7:fe:ea:dd:8c:f5:4b:de:
         99:3e:89:4e:a4:79:3e:c7:21:8b:19:b2:01:67:c9:19:8b:92:
         6a:af:c4:2c:0e:a1:5f:81:b6:4f:ec:7b:9b:78:ba:df:21:16:
         ee:5e:79:de:9d:c7:ca:12:7c:e2:72:ea:73:5b:be:26:fe:79:
         e1:b8:bd:11:9e:f0:9f:da:3b:5c:2d:7c:8b:4d:db:fd:d1:b2:
         16:2f:a2:e9:7d:f2:1e:2d:16:db:24:12:46:8e:a0:43:d8:c4:
         3c:d8:21:f1:a5:54:0c:e4:f9:0e:41:65:47:34:69:2c:73:1f:
         3b:27:19:27:8a:a3:b8:c3:5e:22:dd:ec:83:eb:27:b4:72:9b:
         7d:17:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:42 2025 by rpki-client