Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
File:                     9i_LOgjeVciXseoID_HMnYub2NU.mft (raw, json)
Hash identifier:          Bph25DW83NxBorS348/EcvbahCdiVyb+en7U/gMOHxM=
Subject key identifier:   C9:2C:B0:13:7A:03:A7:7D:1B:24:1A:8D:C3:B5:1C:A5:71:25:3D:07
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Certificate issuer:       /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial:       0331
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
Manifest number:          0329
Signing time:             Sun 19 Oct 2025 03:09:54 +0000
Manifest this update:     Sun 19 Oct 2025 03:09:54 +0000
Manifest next update:     Sun 26 Oct 2025 03:09:54 +0000
Files and hashes:         1: 9i_LOgjeVciXseoID_HMnYub2NU.crl (hash: Z+obqJki0bnXP61OXGD4qapJXgtLTNDfsN+Vp1OlQpM=)
                          2: 38A83FAE0E9211EEB070CC49C4F9AE02.roa (hash: nmmOZilh2QqIeIttTsVI7Q0aKOKTmdEyN4uM1ispLuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
                          rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC27, serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
        Validity
            Not Before: Oct 19 03:09:54 2025 GMT
            Not After : Oct 26 03:09:54 2025 GMT
        Subject: CN=68f45682-ca8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:bc:e9:5b:0d:9d:9c:55:45:a0:86:78:3d:
                    35:72:4b:73:ca:e9:74:e9:08:46:d0:1a:f8:7f:c1:
                    91:cb:82:b5:31:85:9e:b4:26:7a:e6:37:52:7f:95:
                    a8:d8:0d:f9:19:60:49:8e:3c:66:4f:27:02:92:60:
                    26:96:da:1d:8f:76:a7:a8:e1:2e:0c:ad:8d:64:a8:
                    d1:66:1b:37:b4:14:a1:d2:b2:43:61:67:5c:f9:34:
                    1d:31:2b:4a:b8:2b:29:8c:6c:ee:72:1d:2b:88:36:
                    db:0e:dc:c8:dd:1c:04:09:06:ef:5c:b7:ef:8b:49:
                    3e:53:a2:4a:af:04:9b:85:7b:5b:55:05:10:22:4c:
                    7e:06:1f:25:16:aa:a2:98:84:fb:f5:a5:4e:27:99:
                    17:59:f1:20:e6:d8:e3:f1:24:67:40:24:c2:6e:e6:
                    03:e9:c8:f1:67:f7:99:21:b0:11:14:04:52:d9:db:
                    f7:f7:73:fc:ac:ec:8c:6d:79:ef:e5:d2:92:37:d9:
                    15:c8:c3:d3:8d:19:50:82:41:c3:10:78:13:85:14:
                    ed:e5:35:96:75:7c:13:58:ab:5f:e4:83:7f:c4:3f:
                    15:1c:99:ae:ed:86:cb:7e:31:44:9b:7e:7f:f1:91:
                    fa:7d:78:27:ab:8c:77:2f:32:66:b5:a5:2b:49:fa:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:B0:13:7A:03:A7:7D:1B:24:1A:8D:C3:B5:1C:A5:71:25:3D:07
            X509v3 Authority Key Identifier:
                keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:42:08:97:40:b3:23:00:5f:d5:98:f6:c2:4a:89:1b:cf:e5:
         54:56:87:83:3f:de:0d:80:96:c9:cd:aa:fa:78:ff:d8:3b:7a:
         a9:d1:9c:47:3d:c3:84:e8:d2:89:38:a9:04:fc:1c:8a:b8:5b:
         66:e6:99:fa:4c:9e:ab:cb:ac:ef:17:99:35:0d:7e:bb:06:6b:
         e2:81:5b:92:1a:ec:50:f6:ca:91:4d:eb:7a:32:63:8f:db:69:
         32:c2:8c:9a:80:d1:53:77:c9:e9:83:52:b5:4a:c6:05:8a:8a:
         67:83:91:3d:f7:cf:ad:ee:b6:b7:df:da:e4:d0:03:0c:80:b6:
         91:d3:54:87:ef:60:a2:79:7b:4d:15:88:b2:fa:67:2c:67:41:
         21:6b:36:1e:c6:5b:63:d7:cd:95:7d:17:82:97:fa:1d:23:c7:
         c5:fe:08:42:4f:6d:ef:d1:ee:c6:0e:61:04:50:75:94:a7:c9:
         54:19:ce:1a:4d:a2:01:c7:a1:cb:a0:95:c1:1c:d0:40:8b:61:
         31:a4:e0:58:16:07:67:1b:4e:e3:e9:7d:96:ad:03:f7:7f:0d:
         70:f4:dd:78:86:54:18:63:9c:5a:35:69:76:1b:35:b8:8e:e3:
         f9:e9:b8:b7:a9:a3:b5:84:40:96:69:92:ac:21:db:ec:25:a7:
         5d:17:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:20 2025 by rpki-client