Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File:                     F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier:          ta7J/mwgb3TuYgacnB8kJTnGs+e1THgg8qAoXr3MMmQ=
Subject key identifier:   95:9D:18:BC:0E:CC:63:B5:5F:E3:AB:FD:22:0D:98:80:6A:60:77:F9
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer:       /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number:          027D
Signing time:             Sun 19 Oct 2025 03:56:32 +0000
Manifest this update:     Sun 19 Oct 2025 03:56:31 +0000
Manifest next update:     Sun 26 Oct 2025 03:56:31 +0000
Files and hashes:         1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: RZMJi1uUE4Eziy0MgzP5lm43vcEgndhHTBxItpd/cfw=)
                          2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=)
                          3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=)
                          4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=)
                          5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=)
                          6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
        Validity
            Not Before: Oct 19 03:56:31 2025 GMT
            Not After : Oct 26 03:56:31 2025 GMT
        Subject: CN=68f46170-6b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:4f:e1:02:43:9e:f9:aa:10:e1:8f:cc:a3:
                    f2:55:de:77:70:1d:4f:2e:23:fd:39:ac:06:67:ca:
                    35:45:61:85:42:df:13:92:40:20:11:32:a2:e0:79:
                    93:f5:46:57:33:36:cb:6a:e4:98:df:70:ce:f7:1c:
                    fa:d0:7e:a0:4c:ef:f3:3d:b5:43:8d:fd:25:05:f4:
                    87:50:56:83:83:ff:18:ef:a4:02:f4:5b:71:73:b3:
                    f2:53:c2:8a:e6:46:c9:53:60:b3:dc:c5:4f:86:c1:
                    91:0b:6d:d6:36:d8:06:57:c3:5f:81:34:65:99:b5:
                    a9:7f:be:93:b3:6d:03:ba:ab:27:83:e0:81:45:aa:
                    45:35:30:87:84:eb:ad:46:0c:ec:dd:7b:26:7a:9f:
                    4d:2c:b4:23:16:65:95:7a:c7:c2:0d:a5:3e:e9:d0:
                    e5:68:12:8c:20:c7:1d:ff:cf:73:3a:cb:5a:52:27:
                    ce:12:e7:1d:89:0a:94:7a:65:b6:a5:e3:cd:6d:df:
                    6d:4b:c0:12:30:4f:27:aa:79:92:98:db:44:65:fe:
                    8d:7e:98:43:3b:d2:ae:f4:94:4c:c1:69:41:d3:5d:
                    e7:df:17:a2:0e:72:15:cc:09:65:da:5a:6d:dc:0c:
                    c4:51:4e:25:c4:71:34:fb:c5:ae:01:b9:86:a7:34:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:18:BC:0E:CC:63:B5:5F:E3:AB:FD:22:0D:98:80:6A:60:77:F9
            X509v3 Authority Key Identifier:
                keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:7e:61:3b:7e:f1:49:19:fd:db:01:92:c3:89:27:fd:b4:
         ed:1e:b8:7b:c0:81:54:77:08:7b:4f:ca:56:8c:e0:cf:1e:b2:
         80:1c:dd:cf:69:59:c2:2a:3e:1e:51:36:16:55:b2:e4:56:92:
         74:5c:ab:3d:1c:aa:fb:87:f9:85:bc:9a:98:3d:55:c5:90:ef:
         9b:b1:03:e1:cb:92:07:cc:10:51:e1:fc:2c:b8:7f:24:31:66:
         1c:7d:3c:f6:9f:bd:7f:47:17:44:f1:c4:0f:b3:fc:50:9a:16:
         e0:f3:99:b7:47:b8:2a:d6:09:88:85:1d:b1:df:d8:30:a1:f2:
         1c:34:29:f2:ae:a1:4c:a1:31:50:8c:0a:95:24:39:0d:35:c6:
         cb:55:93:02:0a:54:fb:a4:c4:68:e0:64:bd:34:ad:6f:c3:a8:
         a7:52:6d:c3:49:24:3c:cc:35:c9:22:87:1a:05:84:ca:2c:b6:
         5f:43:5e:66:45:23:9b:30:a1:df:5e:74:c9:73:9d:9d:b3:d3:
         4e:ea:81:fc:d8:52:42:9c:57:10:1c:78:78:0c:ed:fd:ea:16:
         2e:42:d3:1f:42:94:62:ed:e4:f5:4d:96:17:4b:42:59:a7:49:
         99:c4:d9:31:1e:23:e5:ce:f6:ee:bb:6e:3c:da:30:49:1c:8f:
         7b:05:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:17:44 2025 by rpki-client