Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          0VFzHpjldrxB8PM73wI/b9aRNli69Tkluwh9DxdAfA8=
Subject key identifier:   0A:F0:BA:59:4A:58:8F:F4:C7:6C:17:DE:7F:70:6B:0F:09:EB:1D:AC
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       0FCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          0FB9
Signing time:             Sat 18 Oct 2025 18:06:00 +0000
Manifest this update:     Sat 18 Oct 2025 18:06:00 +0000
Manifest next update:     Sat 25 Oct 2025 18:06:00 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: //aLJh5UVKUKMn01O0LRAgVqm1DsDB4sjb8Z9iUTnxg=)
                          2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: E66SV6WNRD5ULWCmhiJGOhN+NZfmVirzyRoB4Hy/u4Q=)
                          3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: i8fQntshSNYD8zDT2wDiHtaQKzGJtDGb0egHvcZuXHs=)
                          4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: UGdOvww/zqYEiJCbgpSOvpp5LjsG3mU+jjIktHieTx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4047 (0xfcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Oct 18 18:06:00 2025 GMT
            Not After : Oct 25 18:06:00 2025 GMT
        Subject: CN=68f3d708-181a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:32:da:82:2a:f5:6c:e8:d4:ab:5c:46:65:
                    e2:9c:0f:80:cd:d8:28:05:6d:1f:ce:63:dd:d0:90:
                    46:86:39:22:59:45:d1:77:6c:40:ad:87:1d:e6:9d:
                    4b:3d:6c:75:fb:90:d9:de:ad:11:25:7d:da:b8:09:
                    11:4b:1e:45:ad:15:3f:ce:a1:dd:54:d2:6a:f9:0b:
                    92:dc:c7:0c:40:8f:41:c9:6d:4c:99:fa:56:d3:c0:
                    2b:c8:fe:af:7d:9c:1e:79:b6:c0:fd:67:66:aa:8a:
                    88:ef:8f:6b:f6:25:0a:b1:96:12:88:b6:d1:7a:0d:
                    a3:10:56:bc:fe:68:4f:c0:06:9b:90:9f:64:a4:b6:
                    7f:a6:c6:08:5b:34:6d:ad:01:a3:1d:4d:8d:77:90:
                    85:74:b6:84:58:fe:82:e9:01:e6:e1:da:b3:bd:5e:
                    17:df:a6:e5:5b:46:27:f6:68:5c:4b:cb:e5:d2:7b:
                    ed:35:2d:57:c4:b9:35:bf:08:e7:36:59:22:19:64:
                    3c:42:ba:b8:01:4a:c6:57:63:77:fe:57:32:11:ac:
                    4f:75:5e:80:8e:58:6f:56:6f:86:e3:5a:4e:94:1c:
                    9f:c0:d3:4d:01:4e:f0:cd:01:01:e8:91:56:b4:c5:
                    39:c4:6b:9d:ba:69:2e:e0:8c:76:b2:3f:5a:e4:ea:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:BA:59:4A:58:8F:F4:C7:6C:17:DE:7F:70:6B:0F:09:EB:1D:AC
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:60:0d:65:d6:1c:c4:d8:9b:fd:9f:df:a4:37:70:1b:ab:
         c3:f0:ab:00:66:f2:51:25:64:36:0e:ac:ad:13:3a:f1:e3:57:
         7f:af:f0:1d:ad:a6:0c:b4:27:26:65:11:e9:b3:87:9f:62:82:
         ae:84:65:04:c5:87:e0:8c:04:da:52:c0:64:dd:c2:2f:e2:f4:
         59:e0:2c:ab:5a:c7:52:f8:9a:89:57:52:a3:a7:89:37:54:e9:
         d8:c2:31:9c:43:42:98:2c:15:f0:8d:5b:29:12:37:24:b1:1a:
         0b:e7:d6:59:0c:1a:a6:65:6d:49:aa:d1:06:1e:d7:28:ab:8f:
         e2:15:0a:a2:83:6a:c5:1f:a1:42:8b:54:81:99:e8:ff:47:f8:
         e5:bf:67:5a:68:9c:63:9b:bb:e5:c2:f3:8a:74:df:0a:04:2d:
         9d:37:f9:07:99:53:a7:f2:83:13:8b:cb:85:da:23:98:08:5d:
         6e:b8:b4:7c:46:b9:9c:b5:a0:92:4d:49:4e:d3:70:3b:d5:a7:
         8f:56:b8:3c:28:f9:72:c0:f6:00:5a:d2:8a:a3:f6:b5:a5:4c:
         5e:9a:ec:ae:98:4c:79:3b:58:23:29:a6:ef:36:65:ee:40:3b:
         7b:ab:03:59:16:5d:3f:6b:35:fa:97:f7:52:0e:73:2e:a9:b8:
         4c:28:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:44 2025 by rpki-client