Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File:                     svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier:          F3E2sUl15/e2RfF7guuHP8qeF4Viz1KVAvqPRLF4ZSo=
Subject key identifier:   52:06:54:06:59:FE:93:D3:88:CE:52:91:F4:6A:55:2F:E6:9E:A0:AE
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer:       /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial:       03FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number:          03F9
Signing time:             Sun 19 Oct 2025 02:24:58 +0000
Manifest this update:     Sun 19 Oct 2025 02:24:58 +0000
Manifest next update:     Sun 26 Oct 2025 02:24:58 +0000
Files and hashes:         1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: D28xkwlWV6EQI1BAIj6eGQKrVprvoQLK1tN2tFm3PdQ=)
                          2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ICtN0AhdlHgfYIx82KgCcqvbtFC2Nt85yrH3EgkUFWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
                          rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
        Validity
            Not Before: Oct 19 02:24:58 2025 GMT
            Not After : Oct 26 02:24:58 2025 GMT
        Subject: CN=68f44bfa-7e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:aa:79:16:6f:4d:f8:f0:35:bd:97:a2:99:
                    c8:42:f8:25:bb:bf:84:dd:d8:b8:d0:0c:90:70:6b:
                    26:f0:64:f4:7a:cf:12:f7:a0:53:d5:37:51:4d:21:
                    eb:f2:80:09:e6:bf:78:d5:0e:83:14:eb:64:f5:15:
                    73:36:a0:6d:c4:e1:e2:d6:9d:91:ed:97:e8:e1:89:
                    f3:2f:95:6c:f4:15:52:06:8e:fa:f7:d4:a0:6e:09:
                    69:32:43:96:a6:47:2f:b6:02:5b:d0:b6:82:ba:41:
                    10:ef:0d:a0:75:ed:36:7f:09:08:a3:e5:b6:34:2f:
                    02:2e:64:c0:7e:b2:66:8c:fd:c3:75:6d:14:aa:76:
                    84:f9:ee:9f:99:0b:a4:1c:48:61:98:cc:30:57:4a:
                    b5:e6:4d:ef:27:36:76:10:e3:1c:a2:81:0e:b1:81:
                    cc:b8:d3:47:51:85:14:3c:fe:6f:84:04:6e:44:ef:
                    5a:bd:9b:12:aa:ee:f2:3a:31:82:d6:df:ce:a0:ad:
                    d6:69:e1:e5:a2:94:52:29:f2:b1:da:0a:15:67:8b:
                    29:99:34:dd:90:8f:74:39:b4:b1:a0:63:ff:80:af:
                    cd:3a:45:6f:b4:2e:30:36:b8:e4:89:b7:3f:3d:59:
                    8f:c3:dd:e9:fd:3e:e7:4c:35:5e:35:81:e4:6a:c5:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:54:06:59:FE:93:D3:88:CE:52:91:F4:6A:55:2F:E6:9E:A0:AE
            X509v3 Authority Key Identifier:
                keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:04:ec:16:7e:33:e8:4a:c3:75:81:1d:a8:71:23:09:c5:
         82:f8:3b:e2:01:74:3c:37:4e:af:7b:65:2e:3d:ab:8c:e5:fe:
         be:02:2c:06:d9:d8:1b:aa:5a:2c:b3:04:37:c0:4e:65:51:c4:
         b5:ce:fb:8e:ec:21:1f:81:42:80:61:77:25:59:80:0b:d9:c4:
         4d:14:b8:9b:10:30:ed:76:02:da:07:4c:4f:bb:ef:0a:cb:62:
         cd:eb:45:16:65:59:88:e2:f3:72:26:8f:14:80:95:e2:e9:37:
         b1:75:48:fe:68:58:dd:34:34:f8:4d:50:16:56:99:95:9a:94:
         27:d5:c1:c5:5c:d9:b6:a5:53:06:97:57:d8:18:7a:94:31:cf:
         39:e8:4e:29:5b:6c:36:35:d7:c8:3b:6d:d4:48:40:bf:e0:d8:
         d9:c1:1e:40:ee:1a:2f:b2:38:d8:e9:ff:b9:6a:46:9f:2b:fa:
         5e:7c:cc:45:8a:5e:41:fd:ae:57:30:45:2c:92:dd:44:81:cf:
         70:e1:f5:a7:28:e7:ca:88:b4:ee:01:c2:7d:87:a8:72:ef:ec:
         86:de:05:e7:60:47:c8:ee:52:1e:d7:f9:c4:93:de:70:12:3a:
         98:15:c2:5c:8f:20:88:0b:74:71:03:96:9b:9a:cb:03:9c:da:
         83:cd:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:17:36 2025 by rpki-client