Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
File:                     k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json)
Hash identifier:          NUYg3a6gSTflTDoWrMaJHTvgz6vWPK3DM0DA0x0Q+SY=
Subject key identifier:   33:B2:D4:B4:BC:95:4F:73:32:BA:C9:0F:04:A6:09:8A:95:F2:78:50
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Certificate issuer:       /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
Manifest number:          050D
Signing time:             Sun 19 Oct 2025 01:22:24 +0000
Manifest this update:     Sun 19 Oct 2025 01:22:24 +0000
Manifest next update:     Sun 26 Oct 2025 01:22:24 +0000
Files and hashes:         1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: rhEBDllqMoakxfGnz2WDSZwNoiBbNTyVwOKGFkd8EcA=)
                          2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: t8NYeeOePYob2b/GMp2uUqxxjuXiVF6hVbXFJVOBrpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
        Validity
            Not Before: Oct 19 01:22:24 2025 GMT
            Not After : Oct 26 01:22:24 2025 GMT
        Subject: CN=68f43d50-a05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:8b:31:54:ee:d1:2e:94:56:cb:d6:d1:2e:
                    74:59:5d:58:b0:59:f4:ee:71:a4:c0:7b:9f:f7:1e:
                    5f:9c:e5:e8:49:7c:68:ff:05:bc:f6:dc:81:52:0b:
                    2a:28:01:e0:85:9a:de:07:af:65:08:4c:5d:58:a5:
                    d9:ec:b4:ce:b0:8e:c6:ef:11:92:ac:d6:55:6f:40:
                    c7:e6:20:dd:5d:87:68:c7:27:6f:d9:b7:3d:c9:af:
                    20:50:d8:7a:3e:57:eb:af:3c:8d:74:22:19:2f:0d:
                    0e:d3:5d:63:34:9f:da:d5:c2:53:dd:b1:30:06:ba:
                    b7:64:c8:7e:28:ab:61:b3:31:e0:f7:49:71:74:ba:
                    00:a6:e9:50:73:70:55:56:29:68:ad:f9:3d:42:89:
                    e7:d5:1b:01:79:1b:70:63:d0:46:2e:2b:32:a9:f9:
                    81:11:50:0b:d3:6b:ee:c5:96:93:37:08:d4:42:8c:
                    f9:b2:9c:96:4c:40:ea:7d:ec:29:ef:ce:b2:33:f0:
                    52:dc:cf:6c:d5:e3:92:6d:9f:5b:70:8c:55:0c:84:
                    2e:42:72:96:69:25:2e:d0:94:a5:0e:17:b0:8c:3b:
                    1a:6d:f0:ac:a2:63:30:ee:0c:5e:fc:ab:95:e2:0b:
                    d4:21:82:6b:d1:b7:d1:c0:a4:10:d9:f3:c8:32:a4:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B2:D4:B4:BC:95:4F:73:32:BA:C9:0F:04:A6:09:8A:95:F2:78:50
            X509v3 Authority Key Identifier:
                keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5b:24:f7:c3:00:d2:6d:1f:32:94:1f:7a:47:fd:a5:a5:aa:
         72:28:f5:e8:5b:83:34:4c:4d:5f:20:38:a6:49:c6:a6:72:75:
         4d:4f:f8:c3:47:35:ac:54:67:5e:28:fc:62:f4:6f:92:0b:6f:
         47:d4:30:da:d7:ee:9f:94:cc:a2:a5:1a:3c:7a:6e:a0:f2:65:
         a1:5f:ee:7f:b0:3a:cf:51:15:41:8b:3c:05:c9:47:25:bd:f9:
         39:9d:8c:e5:6a:20:24:20:16:99:d3:a7:17:e6:1b:1b:f6:37:
         b8:cc:16:e8:c2:28:87:22:a2:75:b8:e6:fb:95:28:85:75:58:
         0b:d9:1d:70:6c:eb:c7:57:a1:95:fe:14:8f:bf:55:b7:4e:5b:
         89:96:b6:4b:d7:5e:48:d9:b8:15:27:74:4f:ed:93:6a:21:5b:
         f0:4f:8b:bd:fa:7d:99:5d:dd:8f:c9:cd:d1:9c:16:fb:4d:80:
         ff:a7:de:1b:0c:57:3c:cf:e0:86:7e:8b:a1:1b:99:5b:3f:d5:
         5f:19:dc:5d:ff:da:06:de:24:85:18:8e:d3:18:26:c3:65:9c:
         9e:58:ff:eb:92:ca:1d:f6:de:7b:d0:79:17:75:cc:4e:df:5c:
         c4:16:ba:60:e5:de:23:68:f7:17:4f:c1:8c:c1:75:04:62:2b:
         95:66:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:56:05 2025 by rpki-client