Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier:          umlDTL76SzshiIDtTYz+cdV1QyEIQ5FSsFwFkH2ZpNk=
Subject key identifier:   A8:07:B5:B7:D2:47:6C:86:1B:1F:86:DA:73:20:0F:58:A6:28:E0:5C
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer:       /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial:       0B72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number:          0B6A
Signing time:             Sat 18 Oct 2025 19:58:38 +0000
Manifest this update:     Sat 18 Oct 2025 19:58:38 +0000
Manifest next update:     Sat 25 Oct 2025 19:58:38 +0000
Files and hashes:         1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: SOhQdPTZ0kbVT/3cKdparpHxEJh6pL4yCT3IWM8bEP0=)
                          2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
                          rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2930 (0xb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Validity
            Not Before: Oct 18 19:58:38 2025 GMT
            Not After : Oct 25 19:58:38 2025 GMT
        Subject: CN=68f3f16e-beaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:a4:ad:f2:f1:07:08:03:1a:3f:06:6b:d1:
                    50:20:1e:de:c7:c9:b5:9e:15:e9:11:2c:2a:1e:3d:
                    85:97:c3:5b:5d:b2:ba:17:11:f3:7c:ca:d5:64:80:
                    07:33:0d:fc:2d:2f:07:b2:ea:a3:d8:9d:4c:e0:6c:
                    77:00:ca:57:55:9c:db:c3:b5:56:ff:6f:51:8d:c8:
                    7e:aa:e6:e4:a8:3e:77:21:24:05:24:86:77:42:d7:
                    48:bf:e9:28:fe:fb:a8:7b:1a:df:f5:73:5b:0c:24:
                    3a:f1:b6:fd:9c:48:ce:44:bf:2b:58:2d:b1:33:63:
                    3f:02:ab:a9:a2:54:80:3a:0e:05:57:7b:0a:b6:7d:
                    5e:45:5e:83:aa:e8:11:4b:1e:a7:ea:65:ec:9c:80:
                    73:d5:3c:ab:62:d6:2b:a5:44:a1:40:2d:b0:74:04:
                    4c:c8:fe:33:e8:0f:35:e3:c9:86:5c:ff:b8:a4:9f:
                    b7:e5:42:ee:2f:95:ec:30:fb:2b:47:4a:7c:4a:8f:
                    a2:a2:6f:f8:9d:f8:e7:02:a9:90:17:ca:59:ff:6a:
                    2a:d0:3f:93:fc:6c:d9:56:64:2d:f9:c4:c6:a0:5d:
                    64:77:fa:52:68:cf:6c:cd:5a:19:57:bd:02:64:be:
                    34:55:d9:18:2b:43:a4:43:05:42:c9:eb:6f:b2:05:
                    16:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:07:B5:B7:D2:47:6C:86:1B:1F:86:DA:73:20:0F:58:A6:28:E0:5C
            X509v3 Authority Key Identifier:
                keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:e1:dd:ef:3f:79:b8:d5:b0:90:36:9c:fc:6a:f4:70:cd:
         a0:cb:4b:f0:ce:32:91:0f:76:e4:a6:e6:fd:65:62:f3:e8:74:
         6b:6d:1e:89:24:3c:fc:de:38:ab:a4:3c:16:d5:48:52:4c:0c:
         2d:64:50:e9:64:5b:6e:11:cc:f9:d8:db:59:72:04:4e:01:aa:
         b3:2b:74:09:27:58:c7:10:bd:04:fd:5c:4b:12:33:26:56:45:
         e0:32:9c:ba:b5:c4:89:11:f4:1e:50:8e:4f:ce:fb:9f:15:1c:
         b8:77:8b:a4:4c:5c:ad:08:f2:8a:9b:4f:4e:b0:f2:a2:31:11:
         99:96:7e:22:7f:ad:de:16:51:bf:af:42:86:91:27:44:5d:8d:
         27:97:3b:0c:55:b6:51:e9:4a:93:59:42:c8:eb:3c:69:cd:74:
         0e:c6:1f:d8:f0:4e:79:de:9c:cd:d6:38:c3:8a:9f:3e:f0:cb:
         53:4a:06:56:20:07:ff:9f:3b:d6:bd:e4:f9:d2:27:74:8b:37:
         3a:10:09:9f:9d:45:6b:0d:2e:da:03:c2:ff:3a:a6:a7:b9:2c:
         3e:af:60:29:88:97:83:1d:6a:48:5a:eb:77:bf:06:23:75:f3:
         0a:44:c5:38:71:f7:19:44:ac:9e:8b:50:a2:a1:d0:8a:51:42:
         23:0b:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:25 2025 by rpki-client