Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
File:                     fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json)
Hash identifier:          D+VrRQMXJ5zZcMfiatWF3MXvbcPCMPnvcWre+wD0UYU=
Subject key identifier:   E1:63:F6:BD:A4:32:D3:E1:09:77:E0:6E:1E:CF:48:71:EF:01:6F:0B
Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
Certificate issuer:       /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Certificate serial:       0650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
Manifest number:          064B
Signing time:             Sun 19 Oct 2025 00:13:50 +0000
Manifest this update:     Sun 19 Oct 2025 00:13:49 +0000
Manifest next update:     Sun 26 Oct 2025 00:13:49 +0000
Files and hashes:         1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: p/OjgSKLn2zWzOKa2jWM3wN44lNbG2767p3GGpQYqtY=)
                          2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: OhXdNxeZYZKsEh/kQY88PZgh8U46VN9OPBnD0qrSgNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
                          rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
        Validity
            Not Before: Oct 19 00:13:49 2025 GMT
            Not After : Oct 26 00:13:49 2025 GMT
        Subject: CN=68f42d3d-fe19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:63:73:89:8b:50:52:89:a1:32:79:ed:91:
                    4e:48:f9:35:9a:fb:36:2e:a3:e3:f5:87:e5:24:7c:
                    dc:99:98:15:83:86:a1:e7:1a:2f:b4:63:29:3d:2c:
                    90:66:01:da:b4:f9:35:4e:a5:6f:71:6c:da:46:7e:
                    ec:fc:a9:c1:86:ce:c9:3b:13:5e:91:65:63:d1:48:
                    4f:0b:ab:2a:a9:59:70:bb:99:3a:a1:c6:41:cc:c5:
                    3e:64:e7:2d:73:ee:b4:29:a2:c5:11:10:9b:bd:19:
                    a3:c3:8b:f3:42:af:e1:f9:14:ef:4d:d8:cd:e5:dd:
                    71:df:b8:3b:dd:6b:bc:53:77:6a:27:21:f0:82:44:
                    5f:ac:0f:b1:f9:b9:2d:5d:f8:74:e8:1c:6d:a3:5c:
                    44:82:4a:ce:6d:7a:7f:e6:5e:e5:42:fc:b8:5f:37:
                    79:09:62:4c:15:54:28:e2:b6:d3:21:5c:b2:a2:a8:
                    05:77:97:3f:a9:58:f9:31:e7:a3:57:c2:54:c5:eb:
                    2f:4f:1b:48:1d:c3:d0:d1:b1:95:0a:46:9f:f0:61:
                    ca:dd:4b:b9:60:39:58:fb:2d:84:6d:6e:89:5f:a2:
                    09:64:9e:ff:32:93:68:32:6f:1f:e2:03:48:4b:f6:
                    2b:ca:f0:63:aa:16:3e:a7:66:ab:0f:f2:8c:ab:2f:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:F6:BD:A4:32:D3:E1:09:77:E0:6E:1E:CF:48:71:EF:01:6F:0B
            X509v3 Authority Key Identifier:
                keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:80:4c:b4:7b:87:74:52:21:e1:8c:7b:52:18:dd:36:9a:b0:
         ec:93:40:2b:d2:b9:be:59:5b:78:b1:5a:0b:2d:89:5f:dc:0e:
         d1:26:55:5f:a8:d1:1d:08:a6:c8:b0:34:3c:02:d0:23:14:64:
         dd:34:a0:27:28:ac:0a:b1:02:05:3e:a9:4e:33:fe:07:1c:62:
         4e:75:48:dd:44:c8:fe:23:df:9a:fd:cb:da:f6:7e:43:a5:23:
         f4:9f:0a:35:40:82:d2:93:7c:f5:6c:4e:b0:d6:3b:77:9c:c6:
         27:27:2c:21:55:9e:4e:f7:dc:e3:d3:ef:f2:f0:36:c6:39:77:
         01:ac:4a:d7:b8:95:d8:7c:00:89:dc:34:f6:40:87:d4:6a:2b:
         81:23:07:21:35:e1:12:20:f8:53:6f:70:4a:65:75:0a:c2:cf:
         66:b9:a1:3b:1c:cb:08:07:ab:42:4e:20:a8:9b:06:43:42:a1:
         d3:2e:6c:52:40:c0:0e:5c:77:ed:12:e2:85:e3:e5:fa:df:d1:
         2d:5b:9f:f5:02:15:f9:68:56:1a:26:0b:52:6c:0c:dd:a4:28:
         7a:c1:e5:52:0e:f8:4b:da:07:e1:35:72:58:80:f3:03:c5:cf:
         99:1e:fc:d0:65:24:7a:55:14:8e:7f:86:40:78:f2:64:9e:08:
         fb:96:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:46 2025 by rpki-client