Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
File:                     FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json)
Hash identifier:          u6b7OtY226LK/BeqsVhnGf0hKkpPfnKQsFT6o8GkJ/0=
Subject key identifier:   A0:AC:24:78:8A:14:AD:83:DE:6C:9C:25:69:F2:04:02:B4:DD:CA:D2
Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
Certificate issuer:       /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
Manifest number:          9E
Signing time:             Sun 19 Oct 2025 09:34:27 +0000
Manifest this update:     Sun 19 Oct 2025 09:34:27 +0000
Manifest next update:     Sun 26 Oct 2025 09:34:27 +0000
Files and hashes:         1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: qNdcYf/bbXppyzh74HBmoQjHepbRKVb3cKRE2+pkfc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
        Validity
            Not Before: Oct 19 09:34:27 2025 GMT
            Not After : Oct 26 09:34:27 2025 GMT
        Subject: CN=68f4b0a3-c35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:34:3e:38:01:d2:ea:4f:cc:a5:b5:80:49:
                    5b:46:e5:e2:f4:33:26:a5:34:ca:7b:61:c4:8f:f5:
                    91:6f:08:de:10:94:07:81:ae:29:c4:77:be:e6:a2:
                    31:06:74:ca:10:13:0d:b2:ec:88:f4:18:b3:5f:70:
                    45:2b:cd:4e:d3:34:34:43:73:9d:e6:dd:ef:ff:00:
                    9d:49:e3:d5:b1:e7:34:b1:64:6b:15:11:14:fe:b3:
                    8f:ca:67:17:c9:0c:4f:62:67:7c:f8:7c:7f:92:1b:
                    f3:96:94:db:0e:a5:0b:0e:78:53:2c:1d:b1:68:66:
                    3f:35:a2:f3:c2:3c:09:e5:af:2d:bb:eb:91:65:25:
                    97:a2:bb:a1:bd:ce:84:3f:b6:44:45:8b:d4:9a:4e:
                    0e:14:af:0f:d7:46:ca:f0:e5:19:5f:3e:f4:1c:67:
                    4b:9e:2e:f4:8f:cf:af:b7:e4:e4:71:37:ed:b6:c4:
                    a9:4c:fd:14:44:d3:7a:59:75:2b:be:a7:66:e0:a5:
                    1c:66:91:86:76:7f:b1:cf:be:74:78:7a:ff:38:a7:
                    d0:8e:19:6e:48:59:19:3e:5e:83:40:3e:a2:d2:bd:
                    57:04:36:a3:d3:df:d3:bc:72:01:77:62:fa:b4:f2:
                    1d:35:88:8c:e4:7a:dd:9e:9f:98:65:88:5e:36:2c:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AC:24:78:8A:14:AD:83:DE:6C:9C:25:69:F2:04:02:B4:DD:CA:D2
            X509v3 Authority Key Identifier:
                keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:a6:60:56:e8:59:32:b6:83:54:a7:6d:73:a8:a5:ac:2a:
         38:5d:1a:9a:f4:5b:5e:20:ab:7b:82:29:16:23:01:40:7b:03:
         24:ac:95:76:83:a9:be:e9:79:80:d7:8f:97:2a:3f:40:90:c0:
         4e:a9:8a:89:26:be:aa:ab:58:86:87:18:08:1d:3b:bd:3d:59:
         03:15:dd:42:e4:d6:4d:39:12:78:e0:fb:56:b1:08:b5:71:21:
         dc:cb:fb:b3:05:e1:82:eb:13:e7:cb:3b:40:5e:f0:28:c9:00:
         79:be:6b:06:4c:b1:5d:1d:b7:cd:6f:e4:ee:86:f6:21:57:2b:
         5d:88:dc:f9:e1:07:dc:22:20:b7:a4:2b:a9:8e:2a:3e:47:18:
         33:cb:5b:41:17:f7:76:01:23:b4:5c:3e:c7:99:12:77:54:e3:
         84:cd:bb:67:5a:29:a8:5f:a6:e3:1e:1a:03:f8:3e:01:ce:17:
         56:02:91:f4:cb:4e:7d:a2:4a:ba:bc:ae:64:b3:2e:58:77:2f:
         33:06:44:36:01:be:50:68:d9:f6:6c:2d:93:c7:da:cd:a8:8d:
         26:82:0b:74:d8:02:03:fa:3c:8c:4a:76:d2:e5:62:b4:59:17:
         1a:d3:57:61:f0:64:42:1a:50:63:3f:26:0d:a3:37:db:0e:4f:
         5c:c7:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:55 2025 by rpki-client