Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
File:                     W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json)
Hash identifier:          eUQ3xbYJHwM83ZdZZhGIX0ThKy6NPEUqf4fkj5fBSGo=
Subject key identifier:   14:E7:F5:AB:BD:E8:4D:54:B2:25:3A:9F:ED:70:DE:35:F9:53:2D:51
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0C9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
Manifest number:          0C92
Signing time:             Sat 18 Oct 2025 19:01:47 +0000
Manifest this update:     Sat 18 Oct 2025 19:01:46 +0000
Manifest next update:     Sat 25 Oct 2025 19:01:46 +0000
Files and hashes:         1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: yz0sMRhAeUyA6vP5RBjtyZbocZ5ctnPYKnmLbW2I7Sg=)
                          2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3229 (0xc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Oct 18 19:01:46 2025 GMT
            Not After : Oct 25 19:01:46 2025 GMT
        Subject: CN=68f3e41a-bbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:07:80:5a:ad:c1:71:6e:10:17:8c:28:2d:
                    3d:3e:b3:a0:f1:25:3e:19:b4:18:c2:7a:1d:03:f6:
                    04:cd:19:3c:fc:c0:0e:3f:ca:c1:e9:03:c8:a2:35:
                    b4:ad:03:df:b5:d6:8d:df:ca:73:7f:cd:af:59:7c:
                    f9:6e:02:5e:43:59:dc:af:4b:f2:96:77:4f:70:79:
                    f2:b8:12:c5:70:0c:c9:19:74:5f:b4:90:b0:c3:c5:
                    e1:98:a8:9d:b0:d3:2a:93:50:88:b1:f0:44:87:09:
                    7c:3a:b1:7c:59:f0:ef:81:33:46:c1:76:67:89:a8:
                    22:bc:b7:4d:2a:7e:33:ad:44:d7:6f:53:82:e4:d4:
                    77:62:a8:59:69:90:13:e6:a4:1d:2d:3b:10:74:d9:
                    9a:a5:49:d8:b9:27:3e:85:bb:bd:af:f1:9e:28:5e:
                    9b:5a:e5:96:29:d9:59:47:eb:0d:65:a3:fd:1b:6a:
                    4a:cf:54:b1:7e:0a:9a:da:2a:52:24:be:8f:8b:5d:
                    45:f8:18:3b:12:47:99:c7:01:58:3f:79:c6:8a:a0:
                    fb:7f:7b:5d:3b:41:8f:b1:91:e9:00:cd:21:bf:e8:
                    86:64:f4:37:b7:16:3f:15:7c:e1:4c:55:5b:fc:ef:
                    f8:82:f0:10:20:7b:fc:7e:be:f2:12:1b:b3:06:c0:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E7:F5:AB:BD:E8:4D:54:B2:25:3A:9F:ED:70:DE:35:F9:53:2D:51
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:2c:30:f0:04:55:05:04:f5:27:7b:9c:00:d0:cb:4f:a8:
         f4:b3:4a:c7:eb:59:98:86:ff:da:ae:60:c0:33:75:68:cd:14:
         e6:54:09:52:7c:cd:b5:db:58:03:f5:cc:56:9d:82:b5:38:50:
         72:9d:c2:49:24:d3:67:6e:9d:55:7b:f1:cb:61:d3:ed:ab:7c:
         50:08:ce:c8:77:7f:af:a7:c6:f9:d6:92:c7:ff:f6:98:f3:13:
         62:48:eb:cb:07:ac:3d:b5:e2:cb:3c:9f:8b:e2:35:00:5b:52:
         93:83:df:54:96:87:9f:3c:d4:93:ef:50:99:eb:60:01:78:9b:
         2d:a9:86:3f:59:b0:b4:80:01:52:ba:1f:3e:b6:d4:ed:c1:11:
         bb:2e:0c:ea:5d:f0:74:36:10:91:14:1b:ba:f3:3c:c9:44:f5:
         73:bb:4c:22:ab:89:50:3e:e5:2e:31:26:9a:e1:41:f9:69:94:
         55:0e:b5:47:c8:f9:99:bd:64:76:f9:7b:7d:d1:a4:22:a7:0f:
         39:e0:46:a6:bc:c0:f5:a7:fc:e5:6d:8f:e5:51:91:bd:ec:a3:
         a0:1f:09:a8:14:ab:e9:61:fa:1b:72:e1:89:fc:de:e8:bd:2d:
         44:59:4b:37:35:d7:62:db:e0:be:b0:e5:39:86:b0:2e:db:59:
         c2:d1:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:03 2025 by rpki-client