Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
File:                     nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json)
Hash identifier:          lidDVzdyMiv7wiLJ2jepOhWtOfrB0eJ2L0S8p5v2cMI=
Subject key identifier:   C1:85:B4:EE:AD:CE:87:62:7F:71:9C:3A:4E:C4:6A:04:DB:EA:A1:60
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Certificate issuer:       /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
Manifest number:          B1
Signing time:             Sun 19 Oct 2025 09:15:07 +0000
Manifest this update:     Sun 19 Oct 2025 09:15:07 +0000
Manifest next update:     Sun 26 Oct 2025 09:15:06 +0000
Files and hashes:         1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: XBTlGnrubqK2q08tb15/9FGZXn9525TWROJZ+xMcUNg=)
                          2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: 7w0AxBMbVoZTjF5sqspQh7z8UimR5szml+niNPnLbps=)
                          3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: 5T5IW/urFKGSR1rD4ZpAxg1/U5kVp7QebPXagPruk4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
                          rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
        Validity
            Not Before: Oct 19 09:15:07 2025 GMT
            Not After : Oct 26 09:15:06 2025 GMT
        Subject: CN=68f4ac1b-3981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:5a:8a:4f:fb:29:ed:17:22:fb:d2:8b:50:
                    5d:b2:ca:4f:d7:06:5b:9a:f7:2e:ca:bc:ec:6a:37:
                    b2:f3:d7:69:77:ae:a0:cf:5b:27:4e:5d:f0:40:ac:
                    2e:a5:60:69:27:2e:7f:3e:0f:6a:3f:12:6b:64:c8:
                    af:a3:1f:74:b0:b9:28:15:17:ac:61:f0:67:4c:68:
                    6a:6d:63:34:9c:8d:0d:57:10:22:bc:43:02:03:f2:
                    fa:5a:6c:dd:b2:ad:7d:a3:f6:46:47:d3:78:66:f4:
                    41:9a:26:a7:20:d9:6f:8d:f9:bf:c5:86:29:df:57:
                    38:9c:78:1a:d3:fe:b2:e3:20:7f:e3:00:e4:78:aa:
                    4b:ed:9e:ef:12:20:ea:d1:ef:12:15:d0:47:0b:c1:
                    ab:b0:94:72:b0:c2:4e:88:e2:ba:a6:58:91:dd:c2:
                    fd:02:f8:69:a5:1c:21:5f:fa:6f:fc:4d:7f:77:aa:
                    80:a4:4c:16:46:a6:7a:80:6a:e6:e7:cd:85:02:d3:
                    ba:19:f2:65:3b:60:0a:a5:2c:93:e3:08:6d:81:e1:
                    da:18:f8:b0:25:78:62:98:fc:45:68:67:42:4c:0f:
                    52:e2:fd:b4:4e:09:2a:d7:e7:ac:cb:79:35:81:4a:
                    4c:19:0b:ad:c4:0b:81:32:a5:eb:02:73:93:13:6d:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:85:B4:EE:AD:CE:87:62:7F:71:9C:3A:4E:C4:6A:04:DB:EA:A1:60
            X509v3 Authority Key Identifier:
                keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6f:df:f4:b6:14:5f:eb:5e:bc:95:00:c7:ac:83:25:d9:29:
         36:0a:30:7d:5b:ae:28:0c:bb:db:1b:e4:d2:f6:af:b9:c3:c5:
         24:fd:0c:52:b8:2f:f0:56:d1:0a:9d:6f:db:49:80:bf:e4:cc:
         25:c4:e5:b4:80:33:10:96:f3:e2:ff:00:ba:af:5d:7d:18:65:
         da:cb:d0:98:55:f9:75:b3:75:9d:bc:cf:d3:dc:06:c3:6e:2b:
         cf:c4:a6:d6:72:ef:74:92:48:bf:ba:3b:a2:1f:4b:6f:c8:e9:
         4a:e4:53:d9:3f:aa:bb:7b:66:75:b8:c2:33:9c:d5:8b:b8:cd:
         22:66:d4:9a:1b:db:5e:90:69:3f:07:cb:f4:a1:2a:6d:02:2f:
         31:ce:31:32:74:5b:9d:72:be:64:9e:d6:5a:83:d1:8d:38:4b:
         8c:ee:61:1b:59:0b:bc:73:9f:c7:e4:2a:bc:4b:ec:16:8e:3b:
         03:08:a7:4d:d5:41:72:27:3c:69:62:b6:f3:fb:5d:48:5f:3b:
         36:2d:ef:c2:de:cb:3f:a8:1c:54:84:a1:8f:69:9f:0a:c5:5b:
         3e:2a:a6:a7:83:fe:31:3f:a9:9c:cf:e0:48:61:e7:df:a1:8d:
         6a:4c:08:39:6d:72:75:a9:f9:c3:b3:14:12:80:6b:d6:95:74:
         38:b7:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:19 2025 by rpki-client