Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File:                     Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier:          uDwYBAQF9UATX6DBK2mRHsfJS5O7Hj2zpTY9drY8yl8=
Subject key identifier:   40:88:1D:F1:0D:1F:AA:5B:C1:1E:68:DA:52:CA:27:03:3B:85:E5:37
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number:          9F
Signing time:             Sun 19 Oct 2025 09:34:30 +0000
Manifest this update:     Sun 19 Oct 2025 09:34:29 +0000
Manifest next update:     Sun 26 Oct 2025 09:34:29 +0000
Files and hashes:         1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: QCjmUAkohdPyprjcITqVDKO/ADT7cKsj7gxSTJChNaY=)
                          2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: Oct 19 09:34:29 2025 GMT
            Not After : Oct 26 09:34:29 2025 GMT
        Subject: CN=68f4b0a6-4e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:94:f4:e8:c7:25:07:e7:d9:7b:6b:23:1f:
                    66:3f:33:f5:c7:4c:bf:6a:ee:b9:89:88:09:65:72:
                    df:15:e6:06:59:88:c2:0a:c9:a3:3f:02:43:b4:cb:
                    ee:7f:59:13:80:e3:ce:3e:45:97:1f:44:38:cf:1d:
                    9b:69:1e:e4:f5:63:b9:8f:b3:10:62:46:39:38:87:
                    d6:e4:d4:36:ba:d4:78:43:13:2e:0f:01:fb:c5:d5:
                    0f:db:d4:7e:3f:8b:17:11:ec:07:06:31:11:71:40:
                    c1:87:3c:0b:32:d6:1a:c5:9e:e4:ee:ec:7f:67:96:
                    1f:e2:cf:ff:61:4b:ee:f5:78:fd:6f:91:5e:2c:1e:
                    3d:92:f0:c2:3c:11:52:69:4b:2b:59:be:c0:60:49:
                    f1:e6:fd:0d:1d:d3:88:4b:e8:ad:0a:a8:1d:dc:67:
                    16:90:1b:72:81:46:03:6f:a8:f2:f2:7e:91:98:2c:
                    68:a8:0c:e9:51:15:58:c0:f3:3d:90:40:30:ba:3a:
                    44:59:38:80:ce:8a:9d:f2:fd:52:3a:ce:df:26:b2:
                    cb:a7:47:09:b6:07:ef:cb:43:e7:84:c7:42:08:a7:
                    96:0a:a4:6e:b1:6b:65:50:a9:40:4a:d0:b2:f3:b2:
                    8a:cf:bd:56:30:70:7d:c8:7d:ea:f5:b3:05:6a:59:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:88:1D:F1:0D:1F:AA:5B:C1:1E:68:DA:52:CA:27:03:3B:85:E5:37
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ab:f8:f5:31:ca:db:4a:eb:9f:3d:07:1e:f8:1f:e1:cf:75:
         ec:61:8b:dc:7e:b0:fa:10:e4:9c:0f:5f:18:41:6f:33:4f:77:
         15:de:41:89:2f:12:b0:33:c8:f8:b2:9b:83:59:29:1d:05:4e:
         11:19:02:b8:83:55:4b:53:77:3d:bd:35:d9:78:a4:d4:f3:09:
         7a:bc:4d:03:39:b2:07:85:b8:ca:9a:9b:57:75:a8:c5:fb:66:
         92:9b:b1:47:62:29:27:60:7e:97:1c:99:de:58:77:4a:fa:42:
         02:3c:d7:5b:d1:55:97:d7:63:5e:10:f9:34:a5:ca:55:da:28:
         c0:8c:d8:70:15:81:1a:22:58:28:46:45:23:ac:53:35:75:d8:
         29:b1:01:c6:ce:53:68:fd:7b:86:a0:48:5a:31:62:ee:c5:61:
         63:d6:02:28:d2:4b:cb:c7:d7:8b:74:5c:4a:10:20:35:47:41:
         50:b0:42:e1:e4:c7:f0:1b:40:04:24:c9:c6:5a:2e:9d:45:cc:
         3e:fc:a5:80:30:50:28:aa:57:9a:d4:7f:e6:35:02:64:89:24:
         e6:cc:6f:18:80:44:fd:54:cc:20:51:dc:d7:53:42:54:01:df:
         37:59:33:1f:74:d7:cb:bd:66:54:ed:25:6a:b0:3e:09:cb:a3:
         a3:11:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:36 2025 by rpki-client