Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File:                     6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier:          Lahy6kboIyBROaGMARdy657gvGIWVdr1DVlwI/+2JYw=
Subject key identifier:   A2:68:92:CE:92:97:2B:E0:66:4B:4F:6A:EA:71:90:6B:41:8D:22:CB
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer:       /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number:          9C
Signing time:             Sun 19 Oct 2025 09:45:59 +0000
Manifest this update:     Sun 19 Oct 2025 09:45:58 +0000
Manifest next update:     Sun 26 Oct 2025 09:45:58 +0000
Files and hashes:         1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: UIPQPZXss1YJEM+afr4LrvzxJ1z0m1sZ6Hn+u1BJ2tc=)
                          2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: O2sOyXmqjvHQRFXHDN9/2VaFE/Jt3cl3xRc7QIeiwA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
        Validity
            Not Before: Oct 19 09:45:58 2025 GMT
            Not After : Oct 26 09:45:58 2025 GMT
        Subject: CN=68f4b356-b38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:a0:48:1c:c6:a0:d1:e8:53:f6:65:dd:62:
                    4e:26:f8:98:0e:72:f3:e7:53:24:65:a9:b2:d4:6b:
                    f1:23:26:43:74:f1:93:57:36:53:7f:29:39:e5:f3:
                    80:2c:1d:aa:66:9f:af:9c:c4:63:be:b5:96:7d:d7:
                    4d:f6:6f:32:01:05:dc:f7:05:12:11:89:f2:1f:f7:
                    7e:fd:b9:f2:3f:3b:f0:b4:6e:46:9c:79:cc:52:76:
                    e7:cf:68:7c:e3:f8:1d:9b:03:d4:81:f8:8d:14:c7:
                    3a:01:eb:a3:fe:80:86:7c:f9:e8:a3:b4:e0:21:11:
                    1e:8a:85:37:bd:e9:49:d9:30:77:d0:b2:c8:39:2c:
                    cf:6e:39:f8:1f:1e:b3:ec:b3:ea:33:5b:d2:90:d4:
                    6c:93:d5:49:d5:2e:4f:fe:d0:cb:3b:42:2e:be:9d:
                    1c:8a:87:79:b6:0c:35:8b:c6:e9:47:76:2c:32:d9:
                    f2:3c:77:2f:c7:f3:06:20:70:11:fa:54:e3:8b:65:
                    d8:a2:78:cf:32:82:91:51:0c:4e:00:af:b5:6a:37:
                    db:3c:b2:ab:09:70:58:97:d1:67:fb:9b:4c:2b:54:
                    87:40:84:e6:bf:e4:32:f4:e6:87:64:f6:ea:5f:39:
                    7f:0a:99:d0:cf:4a:09:25:31:05:eb:d3:17:ce:29:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:68:92:CE:92:97:2B:E0:66:4B:4F:6A:EA:71:90:6B:41:8D:22:CB
            X509v3 Authority Key Identifier:
                keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:22:65:2b:8f:d9:ee:40:a2:40:85:04:74:26:3b:7f:dd:
         be:0f:87:76:25:f1:ca:17:1a:da:18:bd:77:1a:b8:2b:75:dc:
         96:6c:fc:89:cc:86:1e:4a:df:43:0d:05:2f:29:1e:6b:50:3f:
         15:f5:00:6c:17:8c:7c:b4:7a:d4:59:68:1d:2f:83:e0:77:d8:
         51:6c:6f:63:8a:8f:7a:c1:8b:9c:70:9c:ce:75:25:c4:cc:8a:
         28:a9:5d:69:77:ed:de:87:f5:06:3c:6d:cb:8e:9f:13:44:9b:
         7a:33:71:7a:d4:c7:67:5b:5e:f9:83:13:d4:17:e5:11:2e:b5:
         ef:fc:dd:61:84:0e:2f:53:8b:e5:d8:f7:9a:51:73:67:b4:fd:
         56:33:27:3e:d4:21:bf:b5:9d:84:02:11:bd:51:b8:6e:4a:ee:
         01:8b:83:92:f1:2d:c1:fb:6a:39:1d:36:24:cf:47:a2:d8:9d:
         bd:24:58:47:45:2c:9e:96:ad:78:7d:36:f5:8f:84:0b:ef:10:
         c5:13:4d:a8:17:a6:66:39:c7:9e:b1:66:ee:04:e2:d5:9d:ce:
         e1:26:9f:0b:70:9c:ad:d4:32:fe:fb:b2:63:11:30:81:15:3f:
         c3:d2:1e:60:a7:71:66:56:ed:5a:d3:31:49:ad:ac:77:a1:5f:
         88:22:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:18 2025 by rpki-client