Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          vFbYD6HzSH+LzIThHAjKiuazabSLym5avH4an8n7UmM=
Subject key identifier:   C4:FF:D0:80:AF:90:51:07:A5:F4:EC:DE:4B:EA:37:3C:AE:0E:8E:69
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       02A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          0272
Signing time:             Sun 19 Oct 2025 04:10:30 +0000
Manifest this update:     Sun 19 Oct 2025 04:10:30 +0000
Manifest next update:     Sun 26 Oct 2025 04:10:30 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: lZdxjrz1Vj802wXGD0BqkbMWBMFo6p/I42ye6AZwkkQ=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: Oct 19 04:10:30 2025 GMT
            Not After : Oct 26 04:10:30 2025 GMT
        Subject: CN=68f464b6-4352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:d7:d4:b7:e6:84:de:de:3c:7b:a7:68:52:
                    ea:29:44:c6:50:1c:6c:c2:47:ca:59:ce:6e:2d:bf:
                    e1:b0:35:e7:75:19:6a:cd:6d:28:4c:01:a4:76:80:
                    42:09:51:2a:77:ce:df:68:4c:68:1b:12:82:97:77:
                    26:b6:60:8a:cf:25:47:7e:fe:a3:32:df:2c:a7:27:
                    4a:59:6b:c2:53:69:57:c0:58:db:3b:66:90:a5:1d:
                    9d:bb:60:29:2b:04:08:a1:fe:2e:01:6e:82:6d:0e:
                    12:59:8b:70:fa:02:2c:4f:49:12:32:4c:53:6d:4b:
                    42:af:b4:0d:c5:0d:20:01:7e:0a:35:d1:bf:2a:4f:
                    f8:3f:16:e9:bc:1f:e8:e2:da:8e:b8:e3:0d:95:06:
                    6e:25:51:b8:c2:a5:fe:d0:70:b3:1c:97:da:4e:27:
                    7d:c8:80:1f:e9:eb:8d:23:26:b3:37:2a:7e:2c:03:
                    a7:a0:1c:ad:96:62:10:e4:21:36:7c:4e:1e:7d:07:
                    32:98:b4:05:57:ad:12:a1:40:bd:75:54:66:bf:32:
                    70:ce:96:34:a7:25:1c:47:f4:c4:72:cd:8d:06:82:
                    0b:f1:1a:5c:63:84:1f:7c:fd:4c:0d:b3:5d:7d:4a:
                    05:da:5b:5e:d3:d1:3e:97:62:8b:3a:43:4a:05:86:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FF:D0:80:AF:90:51:07:A5:F4:EC:DE:4B:EA:37:3C:AE:0E:8E:69
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:89:3d:eb:85:14:8d:a1:60:a8:69:62:d1:e7:a9:13:d3:51:
         1c:ff:04:31:51:79:63:de:6c:63:55:2c:80:3e:e7:27:0c:44:
         0d:6c:bd:f6:0b:34:94:35:f8:51:75:0d:88:06:0f:92:77:93:
         ca:96:af:b4:0f:23:bf:e7:0b:0c:2f:d6:5a:15:98:24:b8:d4:
         4d:0e:36:af:49:7d:16:80:8b:7c:d9:45:38:99:be:75:cb:42:
         ed:01:c7:c4:c9:17:b1:88:4f:f3:41:87:b0:17:da:e2:19:e8:
         d7:ab:5f:a3:31:59:23:05:66:a8:7b:f6:ea:cf:61:54:ae:2c:
         5e:90:17:11:d4:6d:23:9b:1e:d8:12:1e:5a:85:d0:b8:11:59:
         2e:d6:0a:fd:6f:ea:30:87:4d:7a:fe:50:78:4e:ad:d7:a2:75:
         f3:68:69:b0:c2:be:11:61:9a:59:7a:83:03:6c:97:2b:f8:70:
         e9:83:12:6c:c5:c2:d7:33:2a:05:ec:8a:12:e4:fd:83:b2:2e:
         7d:5b:ff:75:bd:67:f5:93:7a:d9:a2:18:96:9e:f1:f2:f2:e2:
         6f:51:8f:b3:87:e5:48:66:9a:05:69:3e:35:66:63:5d:2b:e6:
         5d:1c:7f:1a:00:e5:4c:33:a0:64:93:0d:14:07:d7:ee:d4:8d:
         41:d8:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:01 2025 by rpki-client