Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
File:                     6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json)
Hash identifier:          AQNqVUpZMJhlZYS3aQBw8Qg6l/eGJ+9Z+B5mXzQO5nM=
Subject key identifier:   C8:CD:36:26:83:BD:89:1C:72:BF:B0:25:D5:CD:28:E8:80:81:94:2E
Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43
Certificate issuer:       /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
Manifest number:          084D
Signing time:             Sat 18 Oct 2025 21:52:51 +0000
Manifest this update:     Sat 18 Oct 2025 21:52:50 +0000
Manifest next update:     Sat 25 Oct 2025 21:52:50 +0000
Files and hashes:         1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: bFaoIHmbJAm9fHVTQtwWI+rIMc0PjjbIiQUdB9TiLU0=)
                          2: 82001182986511EFBFE02134C4F9AE02.roa (hash: zFMhUdKAsUErPaBJNxHFhs6kNz0L2uuSFEiFAntBllQ=)
                          3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: LWV1KeEebkqoxDRj/MN5Z6I+5780TArhWaO+yA4BHQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl
                          rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43
        Validity
            Not Before: Oct 18 21:52:50 2025 GMT
            Not After : Oct 25 21:52:50 2025 GMT
        Subject: CN=68f40c32-da09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:c4:c7:9c:ff:7c:a3:f2:6c:10:5c:f7:5d:
                    dc:e1:a7:30:80:46:b4:71:24:3b:fb:f9:59:14:57:
                    27:4c:8a:be:82:80:e5:67:db:38:9b:4e:78:5f:9b:
                    0e:ca:ed:e9:86:a4:9c:08:19:83:49:23:75:81:66:
                    b5:44:c1:2c:1b:46:b2:4d:99:db:86:79:ee:1f:e7:
                    9b:96:0b:16:d2:28:df:13:7a:2f:f7:db:34:58:b9:
                    b4:4b:e2:8b:2b:36:b3:56:17:ae:50:ff:27:ed:17:
                    9a:9e:37:36:6f:19:6a:8d:13:e3:7d:0f:10:ab:55:
                    c8:69:13:7c:0a:59:b9:2b:29:d5:01:6f:4d:5b:8e:
                    51:76:a6:18:87:8f:d9:fe:fc:a2:6c:52:be:64:7f:
                    07:38:64:4c:2b:72:98:62:3d:54:43:84:9f:87:a4:
                    4e:f6:4f:3a:2f:2a:7e:bf:a7:3d:bd:3e:b5:70:ca:
                    b7:f9:b7:aa:8b:27:a0:91:ac:d3:a6:fc:db:8a:58:
                    e4:1d:32:5c:99:32:a5:35:20:75:cf:2f:08:c6:15:
                    f2:c3:2f:3d:86:82:9d:cb:17:11:af:fe:04:d5:2d:
                    06:33:81:7c:a9:0e:bf:80:d6:5f:0f:cc:0d:ac:a9:
                    a1:7a:58:36:bb:7a:5e:cc:2c:f1:b5:78:2b:bb:6b:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:36:26:83:BD:89:1C:72:BF:B0:25:D5:CD:28:E8:80:81:94:2E
            X509v3 Authority Key Identifier:
                keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:39:47:db:bc:2d:64:9c:05:81:06:d0:e7:5c:e8:4f:d3:3f:
         6e:79:d9:90:d4:13:e9:c2:c7:b8:17:8e:0e:ca:ad:61:a1:85:
         91:bc:b9:b0:33:d9:94:da:47:fc:e7:4a:78:17:65:52:cb:0b:
         13:0f:af:4a:89:52:e9:bd:89:14:82:5b:62:ef:df:49:d6:e4:
         58:54:2a:0e:c9:cf:18:ad:14:aa:ce:79:23:f3:ac:08:eb:95:
         11:42:f0:d9:24:cc:06:7b:cd:d0:ab:41:53:05:c3:af:c3:a8:
         13:84:10:6b:ff:c0:45:f7:37:57:ff:cf:76:a3:2a:15:2f:9d:
         32:58:61:56:47:01:60:d0:33:61:d3:ef:fa:99:f0:5c:1a:cb:
         f8:29:7d:fb:8d:c8:f5:f4:dc:2f:a3:16:29:98:c7:94:5e:f1:
         f1:0f:e9:05:8d:53:98:89:ec:3c:dc:60:28:d1:39:a3:69:43:
         ac:68:51:7b:e0:3e:28:f1:04:1d:0c:cb:0f:96:71:49:cb:1e:
         09:10:48:e0:c6:3e:68:a8:94:0e:02:62:d6:c3:bd:12:cc:fb:
         c2:28:b7:a5:df:c9:db:75:52:9c:8e:de:47:52:38:8f:af:f1:
         f3:b9:a5:2a:ad:35:21:36:8a:44:67:3c:7d:15:e3:ae:ed:75:
         84:af:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:04 2025 by rpki-client