Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          C/az/e3y0CHylbj4W1ocQL4Ej+WcSDeFMc6lvLt7bds=
Subject key identifier:   AD:27:2E:78:30:EA:8E:A0:15:92:CA:BF:59:DE:68:86:4D:32:97:31
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       07A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          07A6
Signing time:             Sat 18 Oct 2025 22:40:47 +0000
Manifest this update:     Sat 18 Oct 2025 22:40:46 +0000
Manifest next update:     Sat 25 Oct 2025 22:40:46 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: XVSRvez9SjkMq2UrTQkzmDawV9ExXVw4MuCnnPGa25w=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
                          rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Oct 18 22:40:46 2025 GMT
            Not After : Oct 25 22:40:46 2025 GMT
        Subject: CN=68f4176e-df37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:bb:06:ba:da:f1:4e:ec:f5:4b:b8:2b:01:
                    4e:5a:2b:d3:53:46:24:eb:72:30:90:37:06:39:25:
                    29:1c:bb:f4:32:3f:d2:1a:c1:6a:93:5c:6f:1b:ee:
                    12:dd:1f:1e:9b:9d:a3:aa:e1:f4:50:45:75:30:c8:
                    1b:87:f7:94:0a:e4:8b:c5:10:73:29:88:37:81:c0:
                    9c:f7:c3:77:06:d4:f9:f8:67:f1:83:f2:d0:56:48:
                    27:d1:03:7c:fd:3a:9f:5f:46:ff:7d:4d:2f:95:67:
                    30:4d:54:9b:7a:e7:59:69:9f:7f:ec:b9:5b:48:d1:
                    53:48:88:c9:f4:dd:fd:6e:49:24:a4:d7:e3:87:19:
                    c3:ea:5a:86:82:2d:2e:e4:39:06:de:53:40:4f:75:
                    f3:63:48:22:8e:c0:ec:28:53:a7:01:1e:4a:de:fe:
                    c3:e9:78:34:37:7e:5b:22:1c:d6:ab:bf:83:53:29:
                    27:1c:39:db:88:24:e3:94:81:4e:00:76:c2:5a:f1:
                    05:16:c4:4b:4f:8b:83:4a:59:4b:25:7f:50:c2:cf:
                    0b:ce:78:f9:31:b9:92:06:67:eb:50:fd:a7:69:cf:
                    61:5d:e1:ed:00:68:7d:05:76:99:e2:83:0b:70:26:
                    c5:70:61:c4:24:a0:8b:51:9c:ce:cf:79:ca:05:15:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:2E:78:30:EA:8E:A0:15:92:CA:BF:59:DE:68:86:4D:32:97:31
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:78:17:ae:cb:2a:ca:02:1a:33:15:85:8e:ce:d5:85:47:
         9a:f4:dd:3d:d5:c3:89:74:35:f3:e2:36:52:30:3d:9e:0a:67:
         5b:6b:c3:39:85:d9:40:44:f6:66:0a:41:e6:46:ad:0d:01:f5:
         9a:f3:65:70:50:8f:c1:22:45:c0:21:f9:fb:db:7a:de:04:ef:
         dc:83:98:7f:05:0a:de:05:56:ac:df:b0:ce:f7:c0:41:ee:33:
         b7:7b:57:d6:86:03:b8:a6:ef:ce:9e:02:7e:e9:81:38:b8:3b:
         f1:c9:6b:da:92:40:5d:4c:9e:25:4b:d9:64:d5:c5:b6:ce:01:
         c7:9f:bb:03:3d:bf:8b:63:cc:06:db:6d:57:5d:8a:fd:0a:71:
         aa:8d:c2:63:c8:de:81:0c:e0:7a:91:52:16:b2:69:d8:44:2a:
         0a:41:5f:8b:38:d6:51:3a:5c:4d:2d:76:ac:c2:d8:f3:67:0c:
         ca:b7:54:bc:9e:b5:b3:12:fb:ff:d1:97:99:74:3e:07:e4:2e:
         fb:d6:df:dc:ca:43:2e:3c:2b:2d:60:d6:97:58:a6:c7:de:cf:
         2f:81:da:dd:3f:8c:81:e2:77:fe:92:d5:f0:52:ca:04:e9:53:
         59:2a:e7:f7:1e:d2:ca:a3:96:1e:1b:93:88:9d:be:d2:a9:25:
         85:a1:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:22 2025 by rpki-client