Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File:                     mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier:          SbvIa6YWA/f3JcdKhwKefCyhv60gW325mZE0WHazaHA=
Subject key identifier:   D7:D8:3D:49:19:79:A1:3E:B7:D5:69:F6:E9:20:E0:A0:CE:0F:FD:BB
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer:       /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number:          0166
Signing time:             Sun 19 Oct 2025 06:38:31 +0000
Manifest this update:     Sun 19 Oct 2025 06:38:30 +0000
Manifest next update:     Sun 26 Oct 2025 06:38:30 +0000
Files and hashes:         1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: RLcte9VpCuubSnYmoWcVeb9InQOohUryaUz05PKfkDA=)
                          2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
        Validity
            Not Before: Oct 19 06:38:30 2025 GMT
            Not After : Oct 26 06:38:30 2025 GMT
        Subject: CN=68f48766-1b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:5d:8c:e7:f0:f8:48:3d:6f:4d:60:99:0d:
                    11:1c:bd:13:9e:7b:54:ca:84:76:f2:b0:6b:ec:c3:
                    77:a8:75:6d:2b:2a:fb:22:12:ee:c7:43:64:a0:27:
                    06:01:d8:ce:e2:f5:23:8c:69:70:06:5b:ed:32:58:
                    cb:6f:dd:4e:e5:9a:7e:17:23:ab:7d:5e:20:e9:a6:
                    f4:09:4e:dd:d0:68:b0:93:7a:0e:25:4a:cc:31:66:
                    91:1d:ec:39:7d:7b:d7:32:d8:62:44:d4:fd:be:0e:
                    9a:b1:3a:e3:da:45:23:70:7a:c9:a0:89:37:98:c6:
                    5d:3c:a9:56:0b:25:2b:21:24:f9:d2:47:4e:f5:9e:
                    86:84:7d:6c:81:06:73:2e:e6:26:b2:93:56:0b:fb:
                    a6:01:02:9e:24:fa:9a:7a:64:01:17:d3:98:fd:df:
                    9a:5d:2c:24:ac:5a:33:f5:04:34:0e:b5:13:ba:fb:
                    a8:39:3a:72:e6:6f:7e:e1:b2:5c:7f:d9:74:bd:57:
                    e9:e5:b0:a5:c9:5b:c1:32:48:ff:1b:f8:39:25:55:
                    c6:48:cd:c8:93:6b:f5:02:57:5c:4c:75:b9:cc:d1:
                    c9:6f:ed:09:a2:f8:fb:ca:43:dc:37:bf:00:71:65:
                    07:6e:bb:d7:d1:34:cd:09:07:f0:38:fa:07:d2:d7:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:3D:49:19:79:A1:3E:B7:D5:69:F6:E9:20:E0:A0:CE:0F:FD:BB
            X509v3 Authority Key Identifier:
                keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:ab:62:0b:71:ff:26:f8:f1:69:0d:a4:37:d7:8e:f2:c5:
         c9:f4:49:4f:ac:60:8a:df:e0:7a:09:7d:07:4f:e2:1b:17:31:
         d2:5c:79:b5:62:d3:6c:38:e4:7b:12:d2:53:25:45:f6:67:c2:
         9d:66:dc:12:12:ac:a4:b5:f3:be:c6:24:ab:7d:58:2d:86:40:
         d7:62:53:c0:ed:1e:d8:76:5c:25:09:10:b6:07:38:85:a2:a2:
         0d:9f:97:4b:a5:d6:46:6f:1d:62:47:e4:b6:37:6c:b8:e9:03:
         7f:b4:bf:07:2c:42:71:5a:e1:72:46:b6:74:7a:0c:2d:28:25:
         b0:b6:78:86:21:07:31:40:44:53:91:ec:d1:1b:bc:b7:65:1f:
         43:70:f1:e2:96:3b:80:1e:aa:50:32:7c:63:79:f1:97:4f:3f:
         b0:bd:ae:88:a7:91:7e:24:d6:44:45:ef:76:11:b8:0f:d3:50:
         d2:e1:1c:55:8d:0c:49:ed:19:fa:b0:f3:33:ba:7b:48:dd:62:
         49:96:17:9a:3a:5d:b1:7e:73:b4:4b:dd:2d:f6:10:d4:ef:5f:
         10:72:77:b4:55:36:69:4e:ac:06:b2:9c:35:0c:b4:bf:5e:66:
         fd:63:4e:79:0d:53:d9:aa:4f:cb:9c:a1:b9:f4:fd:22:8a:67:
         e2:29:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:06 2025 by rpki-client