Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File:                     ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier:          4+9+PMEDXI3CzCQax92as0kSCU1mIsEUA/WuzukxYN0=
Subject key identifier:   F7:8A:24:A4:5D:81:80:B9:61:F7:9A:6B:4D:5C:BC:39:13:F8:35:91
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer:       /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number:          09BD
Signing time:             Sat 18 Oct 2025 21:03:41 +0000
Manifest this update:     Sat 18 Oct 2025 21:03:40 +0000
Manifest next update:     Sat 25 Oct 2025 21:03:40 +0000
Files and hashes:         1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: rtcnjFSFZt1ip5PF/BXFub+b78V4a/QCpPCIvLO/emw=)
                          2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: h/RxqPeNlZHrrroyidunxTzpRf8yC4MSHRaPkbI0Oxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
        Validity
            Not Before: Oct 18 21:03:40 2025 GMT
            Not After : Oct 25 21:03:40 2025 GMT
        Subject: CN=68f400ac-f322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:82:7b:28:ea:ec:04:74:5c:c3:8e:15:a2:
                    b5:e8:19:fb:75:4c:83:0a:bd:5d:07:b5:db:7e:dc:
                    ba:24:74:d1:4b:12:8a:ad:12:de:29:36:78:73:4f:
                    7f:b1:88:15:01:50:a0:34:b7:36:1b:4f:ed:e3:dd:
                    73:48:c9:4e:99:54:5a:39:46:93:84:74:28:52:12:
                    f0:7e:26:77:b6:56:af:fe:76:6c:52:56:29:0f:76:
                    37:75:d4:ff:4d:f3:f9:0b:99:dd:e2:47:2c:41:0b:
                    dc:e5:5e:ef:8e:82:36:14:fb:80:86:45:53:6f:3a:
                    24:51:3e:db:79:a2:ce:9c:63:57:00:06:b9:55:57:
                    b0:ff:e0:67:7f:fb:0e:79:16:f5:2f:bd:1f:3c:83:
                    e8:48:16:c7:28:d5:ad:1a:ae:f6:b0:3e:e7:ab:19:
                    3f:ce:db:0d:8d:cb:50:78:43:02:a7:86:d8:95:93:
                    b8:d9:61:d5:94:ae:70:9b:d3:13:9d:3d:fb:22:ba:
                    1d:ec:96:24:e8:4c:da:6d:dc:3c:10:4a:fd:b3:a2:
                    04:13:cf:63:32:86:0c:37:0f:13:89:07:13:ab:29:
                    10:51:e5:9c:c3:62:27:97:cd:e6:a3:6f:d1:96:8e:
                    71:b6:fd:56:5e:52:0e:12:60:dd:24:05:99:da:5d:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8A:24:A4:5D:81:80:B9:61:F7:9A:6B:4D:5C:BC:39:13:F8:35:91
            X509v3 Authority Key Identifier:
                keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:52:d3:eb:24:27:8d:e2:2d:5e:67:8b:02:2b:dd:cb:f1:a1:
         fa:55:96:03:80:b7:82:44:2a:9e:87:64:88:78:94:da:1c:5f:
         d1:22:5d:f5:cb:6d:a1:1e:8d:f3:76:d2:6c:b3:d9:79:4c:e6:
         a0:89:be:60:01:d9:28:4e:3c:5c:e0:77:ea:54:c4:36:a2:04:
         2e:bc:df:09:58:de:36:23:56:99:db:22:3c:fb:32:b6:94:ad:
         eb:f8:53:31:ee:38:47:a5:2d:6b:d4:d8:33:12:72:4e:3d:83:
         39:53:90:a0:a5:26:dc:3d:a2:02:e9:5d:48:b0:74:f7:44:e2:
         0f:c8:6a:42:3f:a4:fb:40:f2:96:dd:c3:bf:8c:2d:7e:3d:0c:
         75:d5:9c:4f:f8:58:f2:ee:ef:c7:84:8c:ee:56:d8:8b:26:45:
         f6:64:aa:37:93:fc:a4:b5:7e:a6:f5:dd:e3:09:ad:3e:33:9c:
         54:f0:94:66:77:21:bc:d2:ce:bf:e0:21:bc:a5:6f:4f:71:06:
         f0:1f:4e:ff:70:d9:e1:57:d4:6e:7d:31:59:33:f5:6d:3c:d2:
         08:b9:23:f1:4a:0c:42:57:dc:3f:82:39:db:6d:92:e1:11:7d:
         77:21:b4:3d:ff:ae:aa:f5:30:03:84:2c:48:bd:09:f9:26:a7:
         7b:14:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:24 2025 by rpki-client