Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
File:                     iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json)
Hash identifier:          t8gK1hOeLeBU0ZJhsfUv6lvj6AaTyEDSQo09mtstnPk=
Subject key identifier:   5F:C1:6F:4F:E9:74:BF:24:9C:38:31:3E:A1:AC:27:61:4D:EB:F1:7A
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Certificate issuer:       /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
Manifest number:          0106
Signing time:             Sun 19 Oct 2025 07:58:48 +0000
Manifest this update:     Sun 19 Oct 2025 07:58:48 +0000
Manifest next update:     Sun 26 Oct 2025 07:58:48 +0000
Files and hashes:         1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: vpUJnCq5NzF6WasRCDUi3IhrtC0jZc5GkWqVbVrFoxU=)
                          2: DC857BE8843111F09719836AC4F9AE02.roa (hash: qHV4LLtdLNsakUr43NtlwblQMKyqVyTmPBHeJjQSZeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
                          rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
        Validity
            Not Before: Oct 19 07:58:48 2025 GMT
            Not After : Oct 26 07:58:48 2025 GMT
        Subject: CN=68f49a38-2997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:55:1a:b1:9f:77:5c:2b:14:bd:15:c8:78:
                    95:52:d2:3c:ff:bb:75:21:26:ac:c9:f5:da:1b:71:
                    cc:b5:29:ad:7b:27:8e:ce:19:78:88:de:ce:1a:61:
                    0a:60:87:1b:d6:86:d3:33:db:20:3d:d1:7c:5f:32:
                    5f:d5:71:3f:db:ad:c0:7c:6c:e7:85:ab:b1:37:cc:
                    a2:b9:2c:62:fc:39:98:5b:10:3f:9d:31:d7:8a:9c:
                    a9:eb:0f:c2:ad:2c:5e:69:7b:90:02:a9:fc:ce:a3:
                    df:11:be:dd:ce:a0:a3:37:b0:ef:fa:cf:33:02:ab:
                    c9:e1:04:ad:34:40:05:a1:6d:a2:dd:f3:f2:21:a2:
                    83:9f:cc:b2:2b:3c:79:b6:f9:8f:5a:32:bc:e9:63:
                    03:ee:b5:7c:44:95:e8:32:0a:d0:9d:20:bb:66:79:
                    c4:42:4f:66:d2:71:34:d4:27:4f:e2:af:25:03:17:
                    33:30:8b:9d:68:61:15:a1:2d:c4:16:b4:b8:a3:4e:
                    d8:5a:aa:7c:d2:08:12:9b:a8:15:40:fa:67:0b:4e:
                    19:ba:cb:33:ab:09:59:74:46:4a:69:ac:a4:aa:52:
                    d1:38:f7:0c:45:aa:fb:66:ff:f7:cd:fe:54:19:66:
                    51:78:cd:7b:8f:fa:05:d1:f9:6c:ee:0a:8d:d2:a6:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:6F:4F:E9:74:BF:24:9C:38:31:3E:A1:AC:27:61:4D:EB:F1:7A
            X509v3 Authority Key Identifier:
                keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d6:e9:7d:8d:b7:ce:3b:86:03:1d:89:45:99:ab:76:d4:9f:
         45:dd:a7:6d:0f:4c:d8:21:d9:17:c3:0a:ff:17:cd:56:b4:38:
         e4:3e:8f:55:5f:eb:ec:21:84:70:63:c5:8d:f9:51:c7:b5:2d:
         82:ad:14:b0:f7:79:f8:7e:6e:56:73:c8:ae:32:f0:7a:c5:35:
         69:25:31:01:ed:9e:16:3a:38:84:9e:de:52:ed:12:bf:17:47:
         b5:a3:12:5e:16:4c:4d:10:10:90:f2:70:9b:48:a9:64:02:03:
         66:ee:6a:62:d1:68:50:1e:6c:7e:45:83:08:bb:9f:fa:dc:a9:
         d4:56:a4:67:26:83:6c:b8:9f:3f:36:ad:9e:32:7a:59:ca:5d:
         ae:78:72:56:be:4f:ba:cc:38:17:bd:fd:0f:39:08:12:73:cf:
         84:94:d3:d3:51:b9:a9:66:26:6c:03:92:fd:c0:7a:c7:24:7d:
         0e:3b:fb:08:8a:c3:ee:6c:22:19:f4:9f:18:cd:49:a8:7c:24:
         7c:ed:a6:3b:f3:0b:4b:97:4b:f7:7f:96:05:d3:4d:bf:11:00:
         c2:bf:ba:bf:8f:6c:49:3c:44:3c:72:99:54:83:f7:18:d8:af:
         ac:7c:fe:6b:5c:c9:4b:76:3f:75:dd:66:b1:f9:ad:41:88:9e:
         83:a0:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:15 2025 by rpki-client