Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
File:                     VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json)
Hash identifier:          F6fK6ns+COaXBrq8Q+lPnBOZdOEIX7bhme7ljfL6VfE=
Subject key identifier:   D3:A8:18:28:87:DD:98:BB:1D:50:27:2C:A6:E8:DE:8D:4F:34:EF:74
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       09A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
Manifest number:          09A0
Signing time:             Sat 18 Oct 2025 21:05:32 +0000
Manifest this update:     Sat 18 Oct 2025 21:05:31 +0000
Manifest next update:     Sat 25 Oct 2025 21:05:31 +0000
Files and hashes:         1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: T0x3n1cUVuBboHed0jfgNeP9I3ukhQipx6zkMioA+R8=)
                          2: 8247E286967711EA81018623C4F9AE02.roa (hash: y10qCt7Fl6t2oez7PlUi3bvenEnmvPzgsBbQMTuv47I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Oct 18 21:05:31 2025 GMT
            Not After : Oct 25 21:05:31 2025 GMT
        Subject: CN=68f4011c-2898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:d8:a0:54:af:99:a9:7b:99:bd:d1:25:cb:
                    dc:46:f3:b4:3e:4e:c1:b0:89:6a:0c:91:66:04:c2:
                    df:35:b3:f7:2b:21:31:d8:2a:78:c6:9c:88:c1:31:
                    c8:27:38:15:33:bc:f2:2d:76:e6:f7:52:5e:d3:0e:
                    ef:0b:24:80:1f:98:cc:28:06:75:d8:74:e4:5b:5b:
                    25:b0:a5:32:c4:19:27:b2:e6:93:2c:e5:62:96:8b:
                    2c:03:71:05:ee:62:cb:88:0f:ea:d6:0a:a9:44:ba:
                    ee:be:39:43:d3:c2:d5:60:12:95:ec:d8:54:63:c2:
                    c7:93:f8:f4:29:12:50:95:cc:d5:3a:88:68:58:4c:
                    d3:da:c3:13:7c:e9:c0:62:89:73:2f:4e:7d:9b:0d:
                    d3:cb:40:4a:fb:20:72:45:9c:e7:c3:f4:82:26:5b:
                    3c:6f:10:fe:4c:5d:59:52:21:2f:15:ae:58:8a:6b:
                    c8:f3:37:b3:5a:fc:dc:16:3d:5c:15:b5:4d:94:2a:
                    a2:fb:ea:70:1c:cc:e7:7c:2b:c1:13:0f:e0:1d:2a:
                    51:df:2a:26:30:87:1a:2d:f9:d5:36:57:eb:18:e5:
                    55:85:78:1d:21:b4:f7:0e:13:17:dc:da:3c:71:fe:
                    0d:9d:5a:c9:17:1e:1a:20:d1:ee:07:aa:e3:b3:d0:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:18:28:87:DD:98:BB:1D:50:27:2C:A6:E8:DE:8D:4F:34:EF:74
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:f0:0b:a6:8d:bb:34:76:e9:b8:7d:55:c9:db:67:96:30:
         02:83:f2:2f:57:f6:96:8b:1b:20:f6:75:cd:1b:5b:64:2a:3f:
         45:14:cc:86:03:19:1a:03:fa:cf:b7:8e:e1:cb:3b:ca:83:09:
         92:29:c0:58:d5:f6:b1:2d:4b:ad:c3:a6:17:62:75:6a:7c:01:
         17:0c:81:8e:dc:d0:31:be:7c:85:0e:c6:ef:f2:01:a2:19:52:
         d4:0a:a7:a1:a7:7b:12:d1:29:5f:02:6b:7c:82:2f:91:5a:05:
         ff:76:6d:3e:40:27:ee:9c:b4:59:7e:62:cb:52:03:ba:c6:37:
         56:a7:f2:bd:c6:38:0c:ff:7b:41:4f:28:c5:5e:8f:d4:e7:7d:
         fd:b7:0b:12:43:d3:93:f5:bf:27:e6:62:0e:eb:7e:02:e3:06:
         39:31:d9:0f:a6:17:85:ef:1c:6f:0c:ed:bc:86:7a:d3:95:a1:
         e4:59:65:30:eb:34:21:49:6c:7e:36:a3:f9:bc:ab:d7:63:08:
         d4:90:e5:d1:70:6f:42:3f:22:ff:ff:43:97:30:20:de:f2:d5:
         9f:aa:01:71:ca:e3:f8:84:2a:f1:9f:6b:69:11:99:e9:9f:c5:
         42:b9:5d:ab:1f:5d:c3:41:18:87:f8:a8:39:b0:4d:85:e4:ad:
         54:cc:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:50 2025 by rpki-client