Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File:                     nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier:          8zhoWjMSA1ojBpkdsOrFVsuRBP7lJmA8hpVQpumx54g=
Subject key identifier:   B0:07:04:61:E9:33:39:DE:7B:29:37:9C:F8:FB:8F:A2:CE:23:B6:FE
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer:       /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number:          08
Signing time:             Sun 19 Oct 2025 11:39:31 +0000
Manifest this update:     Sun 19 Oct 2025 11:39:31 +0000
Manifest next update:     Sun 26 Oct 2025 11:39:31 +0000
Files and hashes:         1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: mI2YBqblNc5IPOBCQXujxlAbKzocW3zEjZTHc6Qh/No=)
                          2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: MhcPpDX0ybNW5suRVqJQ8Y/zpF6Sqp1SAZfBtZfMNRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
                          rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
        Validity
            Not Before: Oct 19 11:39:31 2025 GMT
            Not After : Oct 26 11:39:31 2025 GMT
        Subject: CN=68f4cdf3-ed05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:8d:5c:4c:28:78:c8:78:24:d0:64:df:c1:
                    fe:2c:58:28:88:28:88:ee:02:af:96:c4:2a:f7:16:
                    3b:b4:f8:7d:9e:c6:ea:0e:b1:db:c9:27:47:5b:f0:
                    22:71:75:fa:b3:d2:4e:41:6e:cb:1d:46:27:e7:55:
                    06:2f:4d:8d:ec:76:3f:5a:0e:ae:32:c6:38:92:41:
                    e7:e8:1d:d5:fa:7e:d7:bb:1e:10:56:f8:5a:94:18:
                    fe:b3:b8:e4:92:33:30:c9:06:a6:dd:94:6a:e8:45:
                    6a:97:9e:80:bb:5f:14:47:e5:a3:57:41:27:2e:0c:
                    46:1d:73:58:d6:27:53:a7:d9:bc:7a:71:b9:da:1e:
                    fd:03:7c:f2:4b:65:5f:d0:a4:ba:ea:6c:3d:5a:ed:
                    80:e8:0a:af:91:9b:9f:3f:c5:0f:c6:88:b8:49:84:
                    17:01:94:c6:2b:17:9c:67:43:39:27:e3:ea:8f:d5:
                    38:71:1f:f6:af:d2:9b:ba:20:39:bd:e3:25:c1:82:
                    af:f8:0b:3b:7c:28:ee:e8:f9:64:66:a8:19:00:b7:
                    8e:49:b5:80:51:f7:45:67:6f:21:0f:72:ef:97:56:
                    d1:26:46:c1:91:b8:6c:5f:22:18:d1:23:32:e9:51:
                    89:e4:ea:25:9c:36:47:e5:87:c2:94:95:66:91:64:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:07:04:61:E9:33:39:DE:7B:29:37:9C:F8:FB:8F:A2:CE:23:B6:FE
            X509v3 Authority Key Identifier:
                keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:37:20:ea:dd:ef:3d:20:73:53:75:78:91:05:10:b1:54:54:
         f1:db:6e:bf:b9:09:bd:de:41:75:83:ab:1a:f7:f2:c4:fe:40:
         91:05:0f:da:88:1b:0d:5f:0e:03:da:cc:9a:6b:61:15:44:4b:
         55:f5:83:06:16:b8:45:8e:4f:fc:07:87:26:e6:3f:8d:0d:c6:
         9b:e9:26:24:dd:5c:03:db:95:7a:0d:8c:80:bd:db:be:78:83:
         9d:d2:69:03:51:eb:fa:42:b8:da:6f:2c:9e:be:00:b4:1f:95:
         d2:d7:e6:d3:fb:96:5d:07:3f:68:57:0b:42:c3:1b:e0:2f:c7:
         2f:e3:ea:e0:82:29:47:d3:4e:12:97:5c:03:5c:30:e5:02:e6:
         cb:4a:02:b4:2f:6d:65:fe:7f:79:3c:22:e0:8e:87:4b:dd:28:
         91:ab:4a:d4:02:bc:c6:b8:84:67:e5:ff:22:c9:84:ae:5f:8a:
         5b:43:53:d2:c0:1b:45:80:8e:97:53:da:ad:4e:2d:4a:70:25:
         af:07:a5:1a:79:b4:ff:ee:99:7c:ed:c1:78:0c:6a:78:61:ca:
         df:9d:2a:5c:f7:2b:6a:68:79:7f:de:0a:27:95:08:7e:7f:74:
         8b:1f:ca:44:98:25:78:b6:8f:a7:14:9e:c5:05:91:cc:51:5e:
         53:3d:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:29:56 2025 by rpki-client