Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
File:                     rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json)
Hash identifier:          9GoawyatMWUu1FLda/XlgtQX+UDK/0dI8qN/Cf5c2WA=
Subject key identifier:   EB:CB:0A:7D:03:5E:8F:24:89:85:0F:10:EB:D7:E8:EB:F3:96:F8:C0
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Certificate issuer:       /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
Manifest number:          58
Signing time:             Sun 19 Oct 2025 10:32:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:32:43 +0000
Manifest next update:     Sun 26 Oct 2025 10:32:43 +0000
Files and hashes:         1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: FygtVrYUSDd5mNxs6nkovc8tquVRMCR14cuH4foP9fI=)
                          2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: diVe3oDK8BNzbsZfVF9MUY+tHtrxSbiFO+M9PazMfpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
                          rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
        Validity
            Not Before: Oct 19 10:32:43 2025 GMT
            Not After : Oct 26 10:32:43 2025 GMT
        Subject: CN=68f4be4b-0f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:5d:85:e1:95:b9:f6:2e:9f:df:13:8c:69:
                    73:74:fb:e1:fd:a5:06:95:62:4a:23:e1:a1:22:a7:
                    2b:dc:5a:48:16:e9:82:35:54:c9:30:a2:91:be:40:
                    a4:c5:66:cd:d0:00:72:ea:72:c4:6a:1d:08:55:7e:
                    2e:87:f1:2c:17:5f:f0:e7:e6:cd:63:3c:56:cd:ad:
                    2f:76:b4:1c:80:36:d9:38:3e:d2:19:af:e3:98:bb:
                    e5:7d:55:c3:13:d7:d5:ec:e0:1f:51:6a:66:53:be:
                    2b:90:e7:03:54:ba:e8:71:ab:50:df:84:e6:a3:16:
                    4a:1c:19:f7:9d:94:be:21:ac:87:19:33:d4:da:4a:
                    cd:c7:79:aa:31:2b:26:e2:9d:dc:a2:1e:a4:cb:53:
                    68:ed:65:a4:d1:3d:db:b7:8a:76:c1:05:ef:32:7e:
                    92:a3:b3:a5:cb:f5:e2:e5:2a:ac:f7:11:a9:bd:c4:
                    81:87:a9:c7:57:f6:6e:56:d4:12:f5:09:b0:09:0d:
                    ef:6c:b2:47:17:dd:dd:87:3e:00:5a:ef:d1:a8:1e:
                    d9:8b:1d:b0:8c:4c:88:8a:ca:f6:5c:02:ce:b9:11:
                    23:15:40:39:93:34:f1:02:af:da:67:d6:0b:4b:c1:
                    02:e3:b6:f7:8f:45:f9:9c:b9:20:89:1a:6e:ac:75:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CB:0A:7D:03:5E:8F:24:89:85:0F:10:EB:D7:E8:EB:F3:96:F8:C0
            X509v3 Authority Key Identifier:
                keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ce:03:87:8c:83:8e:68:5c:e8:79:d0:c2:5e:94:01:82:2f:
         ba:7b:e9:69:0a:91:73:a4:29:fd:e4:cc:ca:dc:82:eb:9b:83:
         33:c3:8e:37:2d:a6:c6:fc:27:78:53:c2:44:fc:71:99:ac:ef:
         d1:99:0f:a9:fa:85:f0:b3:7e:79:2c:53:fa:d0:02:33:58:96:
         fb:00:25:2c:86:66:a0:f9:48:15:da:b6:92:37:50:2b:55:86:
         c6:f4:a9:50:bb:95:46:a6:77:7e:2a:8e:98:22:1b:4b:e0:bd:
         1a:54:bc:e3:62:7e:60:f8:54:0d:d7:ed:6c:8e:99:50:77:12:
         df:29:7e:82:af:61:09:64:cb:65:d0:52:9a:a5:79:e6:7b:89:
         64:c3:96:33:24:5e:ad:55:21:5a:9f:d2:b1:19:c6:2c:07:03:
         31:9d:8e:16:4d:56:fa:33:eb:78:6f:57:88:bb:f9:08:7d:fe:
         7b:45:4b:18:92:01:08:14:c2:2b:a5:cc:37:89:a6:f7:c5:42:
         71:78:59:dd:b2:42:b4:e0:63:74:08:3f:bb:f4:3c:d1:a5:74:
         50:a5:b6:04:95:9d:ca:69:77:db:63:9b:d9:f9:31:fc:7e:83:
         03:f3:e3:11:4a:1c:6f:ed:af:30:4f:80:9f:43:d8:70:f5:b8:
         44:7a:ce:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:00 2025 by rpki-client