Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
File:                     5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json)
Hash identifier:          UbF9fxg/jUruOcRW9knV5NfMA5s3mCDy9QPeTZ+RcZU=
Subject key identifier:   94:55:EB:33:32:7D:7C:B3:44:78:92:A6:AA:02:0D:62:A2:F0:AC:09
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Certificate issuer:       /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
Manifest number:          0182
Signing time:             Sun 19 Oct 2025 06:16:29 +0000
Manifest this update:     Sun 19 Oct 2025 06:16:28 +0000
Manifest next update:     Sun 26 Oct 2025 06:16:28 +0000
Files and hashes:         1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: ApEnsumbmvr6CJWcGm2+CmyTsbA6ywY6YrlUwfrrV88=)
                          2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: WdXsExRUw+f/GUR+R+z7/tv+R2Ge9Z2Or4/eLH99sPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
                          rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
        Validity
            Not Before: Oct 19 06:16:28 2025 GMT
            Not After : Oct 26 06:16:28 2025 GMT
        Subject: CN=68f4823d-124d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:27:51:20:d1:f7:31:c9:61:53:be:f3:44:
                    f8:cf:c3:5f:f5:67:43:83:6a:18:c9:30:21:99:5b:
                    3b:c8:9c:93:88:10:d1:9a:e8:34:d8:4c:9f:d3:c8:
                    f5:0b:41:7c:d8:7a:84:97:3e:c7:cd:2b:53:64:84:
                    0b:57:c0:69:d5:8d:c2:26:57:3b:2d:14:23:73:09:
                    b2:0d:51:72:87:7a:36:24:6f:ff:e6:94:d1:84:8b:
                    ce:4d:5c:ac:88:fd:d3:3d:3d:e6:10:0b:ce:1a:cf:
                    ee:18:2a:f9:0d:b1:5c:f5:2a:ad:b9:7e:9d:41:a9:
                    2e:75:fa:f2:d1:a4:d4:5a:66:a4:f1:06:f7:2f:64:
                    75:0a:09:3a:0f:e1:a7:9d:ba:be:23:a6:be:7c:e3:
                    7d:57:7b:05:9b:6b:36:08:7f:24:b4:71:3c:5c:16:
                    ab:80:fa:56:54:7e:ee:f9:ae:fc:e7:9f:a5:b1:00:
                    e0:d3:83:73:5d:01:97:90:c9:ac:dd:be:5b:ea:77:
                    6b:1b:14:1f:2e:55:1f:61:3d:0a:1d:09:e1:26:f9:
                    50:0b:3d:41:0b:08:93:e3:9b:b7:20:bc:fc:53:14:
                    f6:c7:54:a5:4d:d3:43:f7:40:12:ff:78:5b:8b:c7:
                    38:cc:72:c1:0f:b9:15:f9:69:9c:32:fd:fb:8d:49:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:55:EB:33:32:7D:7C:B3:44:78:92:A6:AA:02:0D:62:A2:F0:AC:09
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:d0:bb:55:3f:0e:8d:fa:0d:d9:fe:e6:72:42:b7:7e:d0:
         66:99:ab:cb:ee:1d:fa:a8:dc:ff:3e:e7:73:2b:37:6c:fb:a5:
         e3:8e:74:57:1b:b8:8a:10:af:c1:e8:30:37:2e:dd:0a:b7:01:
         94:10:63:59:56:63:7e:c1:57:02:73:80:89:ab:e5:2c:81:67:
         42:10:95:b0:a5:7e:a7:2b:92:bd:cb:bb:45:df:0a:3a:3d:cd:
         f9:ee:a7:bd:07:6f:8d:8f:4c:07:4c:13:6d:c6:dc:4c:f9:9e:
         0d:34:bd:77:f4:31:cd:13:92:22:74:8f:aa:7b:47:a3:b4:bb:
         e7:db:91:ec:7f:82:0e:84:d2:52:9c:f1:02:49:32:c8:68:ff:
         3f:b2:4a:8a:f0:4b:e1:15:da:e0:08:d5:26:8c:a4:c0:aa:a8:
         b8:2e:76:a7:ce:f0:10:cb:11:e9:5f:50:cc:35:43:a3:a1:75:
         08:6a:f7:79:37:36:ce:82:71:10:fc:0b:ff:ce:e0:08:0b:f2:
         f5:a0:da:c2:78:ab:34:91:33:58:23:52:f4:22:9c:f6:56:09:
         da:19:98:eb:08:a7:3b:26:83:43:a2:80:ce:a3:48:71:1a:ec:
         5f:d3:45:bb:eb:41:75:9b:c4:58:cb:e1:d7:8c:d5:e8:7b:a5:
         a7:30:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:35 2025 by rpki-client