Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File:                     Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier:          8vg6Y7snvmFegr91V0yohVVJUwXZlqv2Kv4wmPZFUtU=
Subject key identifier:   0E:0B:4E:4F:B7:42:29:7B:6A:72:52:58:8E:D9:41:B1:24:15:F9:C6
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer:       /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial:       04F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number:          04F4
Signing time:             Sun 19 Oct 2025 01:29:59 +0000
Manifest this update:     Sun 19 Oct 2025 01:29:58 +0000
Manifest next update:     Sun 26 Oct 2025 01:29:58 +0000
Files and hashes:         1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: yhkPua4t7iIr8fz2e7zkFsTSvEVjeYA+R73NcjZszRk=)
                          2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: CoT7676o1FhYn/hTok256b21HFRTMynmtKsMLIXyZyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
                          rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
        Validity
            Not Before: Oct 19 01:29:58 2025 GMT
            Not After : Oct 26 01:29:58 2025 GMT
        Subject: CN=68f43f17-c3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:7a:87:9d:1f:5e:15:50:1d:04:83:86:18:
                    31:54:07:64:22:97:98:04:50:e5:ba:94:12:0e:a4:
                    95:bf:23:fb:9e:e5:a6:e1:d2:d5:ce:1d:2c:a8:de:
                    77:9a:8e:4f:d4:bf:cd:2e:36:85:4a:d0:91:66:ae:
                    ab:b5:41:88:62:31:9d:04:3e:cf:3a:c5:02:d3:a7:
                    19:be:46:39:cb:40:92:89:ec:cb:00:94:17:6b:ba:
                    60:89:ce:e9:74:a2:a7:8d:ac:55:a2:9d:28:94:2f:
                    d4:cb:64:bf:da:a0:b0:17:08:54:48:f7:7b:e5:31:
                    54:df:96:dd:5e:1b:63:61:49:58:29:cb:79:82:fa:
                    97:e4:1e:bd:d6:2a:2f:2e:12:9d:6c:f0:e3:ba:03:
                    8f:59:9e:3e:4e:4a:0a:09:df:a0:8b:00:be:35:d2:
                    55:62:30:8b:fc:d5:9d:fa:0e:8b:66:3d:32:9a:e9:
                    5e:79:8e:9b:87:92:35:67:fc:a1:36:ee:83:af:f6:
                    1c:0b:53:07:3c:02:55:46:6e:ef:ca:3e:70:36:00:
                    a6:00:60:47:ec:30:f8:b3:7b:db:63:45:51:eb:e3:
                    58:e0:41:ce:95:43:01:78:bf:73:75:30:4a:28:32:
                    d7:b2:ea:28:79:2f:ea:60:ad:11:dc:1c:e4:73:c5:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0B:4E:4F:B7:42:29:7B:6A:72:52:58:8E:D9:41:B1:24:15:F9:C6
            X509v3 Authority Key Identifier:
                keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:d7:b1:33:db:da:ee:44:91:a2:1f:d8:f3:27:ce:6a:43:
         a1:d0:ec:4b:b2:de:c1:90:b0:75:ad:c6:0f:9c:c3:cc:31:08:
         d3:ec:25:fd:7a:16:91:d0:1f:9e:cb:61:ce:75:ab:b6:aa:01:
         96:4d:1a:c5:36:c8:49:59:f6:d8:1b:88:86:fb:7a:4c:31:19:
         0d:32:56:90:79:33:42:48:45:8d:ba:79:0d:86:de:f7:7d:5f:
         03:10:63:2a:8f:ff:fe:c2:93:60:c6:1a:4b:8a:cf:78:04:20:
         3b:b4:1b:09:b5:62:d1:ae:a0:d5:01:6d:8d:46:a4:f2:4d:93:
         bc:5c:5d:5b:6a:0d:ee:5f:4a:98:42:22:8d:88:ac:c8:28:5f:
         e7:a2:8f:1a:a0:f9:de:2c:9e:ae:71:92:cd:db:55:93:38:43:
         8e:dd:04:b4:6a:6e:c6:b9:93:e8:31:ac:f5:5e:79:b6:44:a3:
         aa:b4:28:24:85:9e:7b:e7:60:a6:28:88:8a:4d:36:b6:bd:1d:
         bc:dd:bf:40:73:7b:96:7c:f3:c5:b3:9d:1c:e1:76:65:74:bf:
         95:d6:4a:74:36:51:1f:08:02:0b:9d:13:4a:d7:14:f9:e5:55:
         c0:4d:0a:a9:5b:be:a8:0d:0b:a2:88:33:7b:ce:7e:8e:b1:1a:
         5f:d4:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:39:30 2025 by rpki-client