Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
File:                     9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json)
Hash identifier:          uix3oIkVNi/gHw9sy+6RH0u9urniU6ri/WfcYpzmqOM=
Subject key identifier:   44:C7:5B:17:13:F1:32:C5:DF:4E:30:E4:8A:87:BB:08:C9:72:C7:34
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Certificate issuer:       /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
Manifest number:          0178
Signing time:             Sun 19 Oct 2025 06:23:52 +0000
Manifest this update:     Sun 19 Oct 2025 06:23:51 +0000
Manifest next update:     Sun 26 Oct 2025 06:23:51 +0000
Files and hashes:         1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: B0YYh6WJLj9GlJbylcYIRiYZ4jRqHuhX73Y2dHz2ddM=)
                          2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: 0EXIo+3jT2LrdvdE+EYM/ALiqqQUvx4lMi+70Kb3xlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
        Validity
            Not Before: Oct 19 06:23:51 2025 GMT
            Not After : Oct 26 06:23:51 2025 GMT
        Subject: CN=68f483f7-c49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:ee:17:c3:6e:07:3a:d5:bd:f6:19:01:28:
                    f5:92:38:14:07:33:06:b5:35:30:e7:e1:44:be:d1:
                    0b:7c:72:8b:62:08:7a:82:c7:71:be:9e:e9:86:55:
                    2a:33:d9:dc:c7:d2:11:03:9c:f3:3e:99:b2:9d:2b:
                    8b:3d:b5:9e:42:30:30:ec:bc:7b:af:9a:7e:2f:eb:
                    e2:b2:09:85:72:c3:2a:e0:91:f1:48:91:e1:ef:eb:
                    38:95:92:7c:1d:fb:db:d6:d9:c5:2c:6d:f2:4d:05:
                    f6:bc:83:37:2d:2a:35:6b:2d:3f:6e:2e:31:6e:86:
                    08:cf:f0:53:28:d6:14:93:bf:bd:56:5f:95:8a:ac:
                    be:e2:f3:30:15:55:cc:82:23:fc:05:90:02:c8:28:
                    94:13:09:df:5e:ce:c3:b6:85:6d:1e:18:11:c8:63:
                    16:da:39:37:e5:bc:a3:d9:b7:96:13:ba:f5:0c:4f:
                    4c:37:c2:bc:eb:42:d4:54:8f:3b:9a:67:e3:7e:88:
                    f4:c0:8a:4b:25:07:0e:7c:2d:36:a9:04:58:b6:81:
                    c0:f1:ac:fa:c6:f0:99:d0:39:c2:71:73:15:96:54:
                    85:98:d4:7b:07:3b:17:6c:7c:f8:0e:f7:94:b6:80:
                    02:21:f7:49:7d:f9:c3:27:c1:cd:c8:db:07:d6:75:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:5B:17:13:F1:32:C5:DF:4E:30:E4:8A:87:BB:08:C9:72:C7:34
            X509v3 Authority Key Identifier:
                keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:de:4f:9b:b7:05:44:ad:83:44:68:94:30:0b:e6:dc:1a:
         d9:e8:f1:c2:34:8b:a4:24:9a:4c:d0:54:77:44:e3:13:e6:fa:
         82:30:50:99:15:86:3b:5c:fa:f4:08:5c:c8:9f:5d:78:55:2c:
         f2:ec:92:34:56:4c:58:24:c4:9d:e0:d6:8d:85:bb:5a:e2:1d:
         8c:6d:33:c2:1a:98:d2:1f:ee:9b:cb:cf:52:f3:61:b7:a8:a6:
         54:ba:00:a0:12:63:fc:f8:5c:47:9f:2a:fe:10:68:89:f0:01:
         33:67:64:e7:c0:b0:92:aa:4b:13:e8:c0:1e:0f:11:9e:db:f3:
         d2:48:ee:e4:cd:8b:e8:c6:6b:0f:b0:ca:bc:3f:ad:ec:24:28:
         25:8c:54:fc:7f:57:67:62:7c:c3:ec:a8:44:fb:9b:ed:ca:1e:
         f9:4e:91:45:52:d3:e4:85:de:af:a1:0a:be:07:1f:0f:f9:8d:
         cd:8f:0e:9a:96:fd:e5:d9:a9:d3:c8:84:bf:b9:f8:48:61:63:
         1f:f4:ec:32:b4:d7:a8:ac:1c:60:85:06:0b:e1:a9:df:12:ea:
         3c:48:b9:a2:f2:ea:58:00:c4:18:97:5c:72:1a:0d:11:fe:5c:
         71:9f:15:45:2f:c8:df:01:57:fb:fe:5d:a3:39:78:0b:40:0c:
         78:5b:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:03 2025 by rpki-client