Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File:                     b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier:          GFgQzhtXuWrJHZLEmWzWQcedggKnfeu7jRj7vqG4958=
Subject key identifier:   1A:66:42:62:0B:91:A5:98:18:F2:65:3A:46:C9:3C:EB:2D:16:A4:FB
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0CB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number:          0C9E
Signing time:             Sat 18 Oct 2025 19:08:01 +0000
Manifest this update:     Sat 18 Oct 2025 19:08:01 +0000
Manifest next update:     Sat 25 Oct 2025 19:08:01 +0000
Files and hashes:         1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: 5qgI7RFd2fJzgVNxXC9v7IP3zp+gtxTXeFPy3j20Rg0=)
                          2: 6D8B82D0D6D811EE8BBA8938C4F9AE02.roa (hash: 1cMybGIbvpxyTUqlwMM8pDEltG6qbjXuctF+adjG4sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
                          rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Oct 18 19:08:01 2025 GMT
            Not After : Oct 25 19:08:01 2025 GMT
        Subject: CN=68f3e591-ba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:6c:76:a2:0b:44:ff:3c:da:d6:69:9f:c1:
                    40:97:2c:17:54:c8:d6:bf:16:e2:8c:30:c9:64:ed:
                    94:fc:8d:41:8c:7e:e4:c9:c4:c3:2b:d2:de:4a:a3:
                    69:95:81:30:81:a6:c1:71:ea:be:fe:22:05:c7:15:
                    91:96:26:c1:07:38:c1:db:d6:5d:fc:bd:88:69:36:
                    fe:b9:93:41:79:1f:2c:7d:a0:55:22:c0:f1:2a:c6:
                    58:08:69:96:d3:1b:09:01:b9:0a:64:95:7e:de:35:
                    73:b4:e3:e7:d5:4b:d5:b3:22:15:90:1a:2f:4f:cc:
                    d3:0f:e4:a7:82:50:f8:bc:c3:25:59:e8:5c:a7:b6:
                    54:56:86:a3:16:63:68:0a:11:d0:76:90:4e:3e:f2:
                    0b:e3:d8:21:82:a5:36:98:7e:2d:0c:d5:f4:03:d2:
                    65:11:ec:5f:74:48:ff:cc:71:ee:f3:22:59:87:20:
                    d3:c0:16:45:ea:9e:62:f7:6a:04:da:f6:30:9a:d3:
                    28:a8:ab:e7:bf:f5:14:f8:e4:77:a1:7f:b9:55:0c:
                    8a:ce:fe:37:4e:41:12:01:64:9b:94:1f:d6:06:3f:
                    45:25:70:cb:3d:5b:51:60:de:d0:44:84:df:00:36:
                    e8:cf:33:1f:c6:1a:a3:d6:33:ff:cc:a2:1f:54:af:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:42:62:0B:91:A5:98:18:F2:65:3A:46:C9:3C:EB:2D:16:A4:FB
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:c1:7d:e7:07:8c:0c:08:85:02:37:af:c0:b8:67:36:ad:
         eb:4a:2a:dd:8e:23:95:89:ed:58:ff:d2:48:55:d0:7c:01:9e:
         e9:9e:6b:9e:9a:6c:ba:5a:21:9d:65:49:ab:a9:bd:e9:e9:0c:
         33:2e:64:c3:4d:35:9a:a9:46:7f:07:ed:c3:8a:38:34:bf:c2:
         be:c5:dc:f7:ea:39:4e:10:2c:7c:9a:aa:97:ef:e9:c2:13:8c:
         fe:7d:9d:53:13:ff:4f:51:df:f2:d2:f4:ed:c3:c6:68:25:f4:
         96:c2:75:e8:ae:c9:20:d6:f3:e0:b3:54:65:b8:73:ee:2a:81:
         8c:6c:07:9f:4a:0c:0c:12:22:a1:69:28:63:5a:14:b2:3f:02:
         8d:35:68:b0:bb:87:83:de:a9:7e:95:e2:2e:cb:e7:8c:48:06:
         ee:c8:6c:0f:e1:74:97:d4:a6:35:96:5b:b5:8f:13:a2:39:69:
         f4:27:f2:77:93:8d:23:9a:04:e1:dd:45:e4:c0:67:35:01:03:
         e2:c6:64:82:14:85:ba:8a:87:bf:51:63:28:1f:11:9a:f6:06:
         4e:f5:f3:38:87:05:0a:27:25:f4:a5:c7:9a:57:00:93:fd:70:
         68:90:e2:80:60:cc:f4:35:73:31:a2:2c:b3:91:3a:55:ef:50:
         06:a7:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:19 2025 by rpki-client