Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File:                     HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier:          Irp1e9S7bdG4rCkaJXEpuYm3MmG70Xe/PR16WbkjBi0=
Subject key identifier:   8D:01:87:0D:FF:F0:34:62:66:C5:50:D2:06:49:98:60:FD:07:1A:C3
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0E45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number:          0E39
Signing time:             Sat 18 Oct 2025 18:27:28 +0000
Manifest this update:     Sat 18 Oct 2025 18:27:26 +0000
Manifest next update:     Sat 25 Oct 2025 18:27:26 +0000
Files and hashes:         1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: diSYszXV+efnuf6Gl72zhXs2gyiPMd1Eet6ELkRljG0=)
                          2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: cxpNUxvjjUcenOfHXLOefCP2oAgYFBDBd3CzBohvfz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: Oct 18 18:27:26 2025 GMT
            Not After : Oct 25 18:27:26 2025 GMT
        Subject: CN=68f3dc0e-2225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:90:fe:a6:e5:7d:56:73:96:51:48:2e:28:
                    f2:28:03:5c:03:69:e7:89:55:70:0b:d0:59:94:38:
                    1c:e9:99:f7:28:86:d7:aa:46:b0:19:7b:0c:dd:51:
                    b4:a7:bc:91:bf:6d:bd:1f:6b:a7:a8:ba:40:03:8a:
                    d5:7a:e9:dc:bd:c7:22:a9:fa:f7:64:fe:52:ee:20:
                    16:15:28:51:2e:83:ec:01:26:3e:99:03:d2:27:2c:
                    ea:d4:7d:12:f2:9b:85:dd:05:8c:41:fc:90:fb:69:
                    67:f4:05:18:81:a2:e5:dd:b6:a8:9a:52:b5:e3:88:
                    e3:3c:0c:12:e5:40:2f:5e:54:0d:08:27:a7:d5:a5:
                    c3:18:cf:67:dc:6f:c1:ff:ee:48:29:9f:c4:d9:64:
                    64:33:44:32:3d:57:70:10:d0:93:7b:95:68:c3:94:
                    d5:4e:1e:8e:6f:93:a0:db:ae:0b:d5:22:bf:4b:a1:
                    b6:9d:5a:54:0c:9f:14:9c:b7:fc:43:71:b7:42:c9:
                    2c:a7:d2:88:3c:3a:bd:6b:31:a9:40:3e:d0:3c:08:
                    50:af:36:c6:17:ef:44:be:ec:ea:66:89:e7:02:55:
                    90:4b:1f:00:7c:40:ba:a7:30:43:41:1e:10:1c:b1:
                    3e:15:f1:43:6d:8e:a9:3b:41:e1:fc:7f:8b:db:8b:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:01:87:0D:FF:F0:34:62:66:C5:50:D2:06:49:98:60:FD:07:1A:C3
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:69:5d:1d:02:f3:92:8f:fd:63:0d:e8:5c:72:4e:b4:31:ed:
         a6:96:05:55:4b:2d:b2:d8:ad:3e:14:67:ba:d4:7d:31:d5:2e:
         01:f5:2d:bd:ed:49:8d:22:29:fe:e3:2e:58:9d:14:95:8d:16:
         e8:70:81:31:02:f3:85:fc:c1:37:7e:47:ba:7c:a6:8c:4f:2a:
         ef:ef:fa:bd:4a:ce:e5:bc:66:df:a4:8d:fd:86:4d:d9:3b:d8:
         9d:e0:49:ae:fb:aa:ab:09:77:73:f5:d7:f9:29:5c:f2:76:93:
         4a:69:cc:68:b4:cd:69:7b:17:6b:0c:64:64:34:f5:71:a4:ad:
         33:62:5e:f8:55:96:df:2f:2e:80:81:aa:14:7d:b5:dd:e2:b8:
         48:e2:e3:bf:29:d6:c4:c7:d0:43:dd:e9:03:9e:11:1e:f6:45:
         c2:15:17:cf:16:48:a6:f3:4e:da:c4:b1:a9:0e:9a:91:3d:dc:
         9d:9a:d0:00:78:cc:70:70:4d:67:84:d1:31:60:03:da:38:91:
         2a:82:a8:e3:b2:c7:48:61:99:d5:96:e2:89:fd:d6:6b:4e:b9:
         83:42:f4:2a:13:f3:5e:25:19:f1:dd:73:c4:8d:60:4c:70:1d:
         5e:8e:0e:6b:e8:be:c2:5f:27:d9:e7:b2:f7:e0:c5:f6:ec:23:
         d5:4f:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:13 2025 by rpki-client