Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          JYCVw9o7rG6NvTMrxndlJf1VT6sQcjk3GQiRQEK/4Ho=
Subject key identifier:   FE:A0:29:10:25:E0:CF:7B:00:9A:5D:6E:65:1E:26:22:51:D6:85:EE
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          07C9
Signing time:             Sat 18 Oct 2025 22:34:25 +0000
Manifest this update:     Sat 18 Oct 2025 22:34:25 +0000
Manifest next update:     Sat 25 Oct 2025 22:34:25 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: CzPZEGY+D3cf9DJuYR1O094vqNqpC0dI7iM+Mn+Lxfs=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
                          rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Oct 18 22:34:25 2025 GMT
            Not After : Oct 25 22:34:25 2025 GMT
        Subject: CN=68f415f1-893b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:d1:2a:ef:b1:ba:f8:4b:df:81:de:4f:0b:
                    1b:ba:d0:c8:13:57:a2:b9:4a:8b:af:cb:4d:cb:50:
                    05:1f:94:eb:8b:55:d1:b0:d2:4d:8d:75:01:72:95:
                    b2:9f:8a:5f:d4:70:ba:40:6e:72:b1:3f:1d:32:e7:
                    fa:57:61:d7:ff:78:1c:a8:c2:bd:0e:e0:2b:6f:27:
                    06:04:37:b4:25:d2:45:13:78:cf:42:0a:b2:a9:65:
                    7f:a7:42:3b:d0:7c:ce:df:f6:21:16:cf:5d:55:a6:
                    91:30:c5:a8:5a:84:68:9e:1d:a8:da:6c:d0:4b:99:
                    cf:ae:a0:76:dd:b8:42:0d:0a:ff:69:52:4e:d4:45:
                    8f:a1:c9:8f:5c:5d:cf:65:62:69:08:8e:a9:4a:33:
                    c3:f5:4a:3a:dd:74:41:de:e3:c9:25:fe:1b:60:13:
                    bf:bd:b1:62:52:a9:c9:50:64:c1:cc:ef:91:c8:7d:
                    c0:bb:9b:3f:bd:ac:ae:08:82:f8:e1:61:02:df:f0:
                    51:30:86:ac:45:04:93:d1:97:fe:d7:5d:5f:de:c5:
                    76:ee:66:5c:f1:59:a6:83:32:84:a7:0b:3e:fc:7a:
                    88:b1:46:fb:6a:d2:bf:a2:df:24:65:aa:63:f6:85:
                    d4:fc:dd:e9:85:b7:34:d0:ed:d9:7d:66:e5:7f:bc:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:29:10:25:E0:CF:7B:00:9A:5D:6E:65:1E:26:22:51:D6:85:EE
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:60:51:0d:cf:64:ca:3a:9d:13:ea:50:10:82:cb:65:5c:
         1a:f1:a2:08:e4:55:ba:84:d7:ca:b4:49:f1:41:6e:af:87:9a:
         43:45:43:c0:12:65:5d:ca:5f:71:27:67:85:91:29:3f:f3:95:
         11:7b:a2:b8:df:74:ed:75:e4:67:a3:b2:bd:a1:78:10:ec:e7:
         c1:de:8a:21:ae:f4:91:a0:26:ef:dd:44:b1:31:0b:23:59:a9:
         9a:da:3d:d0:58:24:07:db:00:88:95:06:eb:a6:99:61:6c:37:
         0c:de:8a:c5:a2:be:56:04:0d:38:76:52:66:54:7f:9c:91:e6:
         c6:80:8e:83:c7:73:b7:85:e6:20:49:0b:0d:85:e9:a5:a7:10:
         53:6a:9b:85:1c:bd:73:8d:7f:c4:3f:7b:76:de:6b:c0:34:c9:
         61:34:7f:d6:1d:12:ac:b5:bd:3f:f9:dc:15:17:25:ef:ff:0f:
         e8:d0:5f:6c:f6:2f:6f:c0:eb:e1:80:e3:8e:80:cb:22:50:0a:
         ea:f6:04:3c:e7:37:9a:44:88:07:65:06:e0:8c:fa:50:72:82:
         f7:3c:a2:d8:36:4c:48:b4:f6:40:09:3d:77:2f:e5:5d:fe:cd:
         77:b5:6e:63:db:8b:4a:5f:10:37:12:98:eb:66:df:3b:96:7c:
         92:cd:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:18 2025 by rpki-client