Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
File:                     avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json)
Hash identifier:          x2kxpGhm7w85K9H08Bjm88Ig5rimImWUiUJnaPnEBgY=
Subject key identifier:   AD:6F:02:FC:8B:DD:3B:02:C8:83:53:74:87:D6:B2:76:1A:F6:76:99
Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
Certificate issuer:       /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
Manifest number:          80
Signing time:             Sun 19 Oct 2025 10:02:17 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:17 +0000
Manifest next update:     Sun 26 Oct 2025 10:02:17 +0000
Files and hashes:         1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: 5OI6T2WY9ekuZ51iRzbOJ7FfsMsBzHWPg0gKMgmpa3c=)
                          2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: /3sx9qkns8VuuHaAsuXJH8HOSf3Re0TlGJBe6HbkiRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
                          rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
        Validity
            Not Before: Oct 19 10:02:17 2025 GMT
            Not After : Oct 26 10:02:17 2025 GMT
        Subject: CN=68f4b729-de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:f9:70:fa:bd:be:90:b9:79:2a:99:95:ba:
                    15:73:c9:c2:5d:a2:7c:e8:5e:28:38:b1:ca:b2:39:
                    63:d4:5e:c8:ac:42:b3:56:82:55:cd:eb:43:f3:7b:
                    c9:f3:aa:05:4c:4b:07:b3:25:d2:27:41:86:5d:93:
                    91:ea:e7:91:32:e7:de:ac:21:de:cc:7a:09:4c:bd:
                    28:3d:db:7b:e5:02:32:14:04:3a:71:e5:9f:06:e3:
                    43:d1:4e:79:67:2b:74:59:6d:38:50:ce:6e:c8:9a:
                    5f:7e:65:15:b5:29:52:dd:1d:9f:22:e9:33:98:bc:
                    a9:82:0a:4e:08:75:ce:01:6d:03:24:6f:45:61:fd:
                    38:b4:d7:78:21:50:2b:45:6a:48:e0:1e:68:d1:9a:
                    c5:04:d8:aa:15:00:c4:41:ea:2a:16:6e:33:a4:56:
                    d5:88:0a:82:9f:d5:db:cc:02:0b:f2:21:2e:db:5c:
                    7a:69:db:32:9f:86:ef:18:89:bd:14:78:9a:3d:1c:
                    e6:73:79:c1:cc:5a:28:d8:2c:29:8d:23:3b:9c:ad:
                    05:1a:03:6b:4a:e0:5e:6e:39:54:1e:4d:fd:4b:9e:
                    a3:16:f9:4f:07:84:cd:e9:86:6f:aa:10:8d:d4:04:
                    d7:4c:bc:20:9e:fd:77:e8:de:77:32:7c:6f:07:55:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6F:02:FC:8B:DD:3B:02:C8:83:53:74:87:D6:B2:76:1A:F6:76:99
            X509v3 Authority Key Identifier:
                keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:9a:1a:f8:a5:2d:69:dc:f9:f4:a6:2e:0b:0f:89:b5:d1:
         06:76:f1:9a:da:9d:f0:4a:a0:6c:a0:43:dc:e5:4d:64:17:4e:
         35:a1:c8:92:29:f2:73:b1:d0:ea:b4:94:c2:56:29:6d:e9:f3:
         37:61:e0:ea:db:99:c4:61:78:db:2a:40:af:40:da:49:29:fc:
         8e:4d:03:50:b1:a2:38:70:53:8d:25:6b:2e:86:2d:c1:71:c0:
         48:8c:7f:37:e3:71:06:c6:14:7e:bd:7c:1f:3c:76:54:fb:6f:
         34:21:0d:c8:0d:36:ed:c3:cc:cc:9b:c2:ea:29:96:e8:5a:89:
         07:28:72:25:c6:22:ed:0f:4d:dd:94:1f:62:7e:c4:cd:86:1c:
         68:f1:fd:ed:20:f6:17:cf:df:26:39:95:9f:41:f6:87:17:54:
         3f:88:74:f5:e9:d3:21:6f:6c:db:dc:4a:b1:01:cb:4c:cb:49:
         fd:44:59:9b:b8:c8:ca:25:6d:b9:50:d8:44:4e:c5:4f:35:90:
         1f:30:2c:d7:a4:54:fc:a7:5a:a8:72:06:b3:b9:e5:14:a0:09:
         b9:3a:58:8a:b3:71:ea:82:0e:a4:cc:36:66:69:f9:20:4b:16:
         e2:cd:7e:73:18:e7:5b:2a:43:d8:72:b6:c9:25:a3:45:04:92:
         9e:73:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:06 2025 by rpki-client