Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File:                     C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier:          EtTUY1QqcKEBBd/WC82aUdRoRH1UjPlWssV2MFVbd/4=
Subject key identifier:   FD:E1:53:22:C6:8D:82:FA:79:15:08:7F:79:52:31:4B:3C:AC:8D:41
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       7CC996FAC65DF619CDBE882B64F64EA2C06FE814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number:          018E
Signing time:             Sun 19 Oct 2025 07:16:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:11:24 +0000
Manifest next update:     Mon 20 Oct 2025 08:39:24 +0000
Files and hashes:         1: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=)
                          2: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=)
                          3: 3130332e32352e3132342e302f32342d3234203d3e20323134303235.roa (hash: A7+uqKWRKehgMh2v+Hl0ZrUAOPvByGRYLcbE3daaXQo=)
                          4: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: HAzJGRBaYOwaS80EtKrFneMylzs82EWQHF4m5wcuIH4=)
                          5: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=)
                          6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 08:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c9:96:fa:c6:5d:f6:19:cd:be:88:2b:64:f6:4e:a2:c0:6f:e8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Oct 19 07:11:24 2025 GMT
            Not After : Oct 20 08:39:24 2025 GMT
        Subject: CN=FDE15322C68D82FA7915087F7952314B3CAC8D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:75:ba:b3:23:0d:83:95:bc:91:3d:3c:4d:
                    6e:9a:75:de:f7:8b:43:ed:96:32:35:fc:e9:2c:2c:
                    52:27:c1:83:f3:72:75:46:34:a8:a6:71:69:e2:dd:
                    41:47:e9:88:bf:b4:61:27:4d:d9:16:24:f9:c5:f8:
                    63:6c:9f:cf:8f:c3:a3:67:a8:8c:0c:e4:b6:e0:6e:
                    05:84:8b:d5:90:38:6f:09:e2:81:bc:ac:6a:e9:8f:
                    3b:d0:cd:21:37:1c:9b:8b:44:d8:28:f4:d8:b4:83:
                    c5:bf:0a:63:09:8e:84:c7:c8:7e:c1:a3:35:6d:da:
                    20:ca:70:8a:87:41:0a:31:31:fc:11:71:da:db:93:
                    57:51:37:e9:34:3e:c4:81:06:29:c4:7f:0c:e9:60:
                    da:6f:ad:68:9f:d5:9e:fb:80:46:4c:ee:ab:d7:8d:
                    ec:55:45:8b:53:cc:cd:d0:b6:de:c3:d7:6c:05:86:
                    43:f4:62:8b:28:b5:c7:fc:a8:89:dd:44:cd:09:01:
                    4d:bd:7b:d3:86:d6:35:d4:49:55:2a:9c:ed:f0:c9:
                    eb:8b:00:f7:a0:90:a3:66:66:ca:7c:88:62:f8:17:
                    78:c4:61:f7:92:e8:2d:ee:a0:31:97:10:50:e8:e6:
                    52:96:13:c4:d8:3c:b8:a0:54:4a:ca:e7:8b:a5:48:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:53:22:C6:8D:82:FA:79:15:08:7F:79:52:31:4B:3C:AC:8D:41
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:8b:1e:e9:0b:fb:5e:23:fa:eb:73:cf:89:d0:13:0c:b7:
         04:c6:fd:23:c1:00:f2:20:92:80:e0:f1:af:63:c5:5d:89:95:
         ec:cd:56:bc:a2:74:a0:34:71:b7:b6:e5:55:18:b1:9f:c8:20:
         a9:b6:62:d7:2a:70:05:30:e9:1c:3a:61:f5:d9:1c:b0:20:f1:
         ef:4d:74:99:fc:9a:de:62:c6:61:c6:8b:7a:c9:7c:ea:db:81:
         55:16:de:6e:d0:41:56:35:70:2c:e9:9a:41:66:e1:c3:7f:1a:
         cf:77:53:ff:da:d9:9c:3d:20:70:b5:3e:4a:92:3b:94:cf:14:
         1f:98:43:00:c5:91:b8:6c:7d:85:4b:58:65:7d:46:83:1d:85:
         1a:15:43:10:4b:3a:db:50:83:28:4b:22:dd:76:2d:a6:35:a0:
         70:f5:3c:ee:5a:a2:d7:fa:d7:12:22:50:cb:a2:8e:99:b3:5f:
         c4:c5:26:59:ca:6d:00:54:35:e0:9c:57:4a:e0:a8:8e:7e:70:
         b0:02:9a:8f:14:1b:5e:35:0b:76:1f:52:69:02:87:f5:66:6d:
         0e:9a:ad:35:24:22:6c:b8:b4:81:fd:9a:55:77:fa:c6:e9:8b:
         48:1a:dd:db:34:b5:dc:d4:30:c5:8a:01:91:ba:8a:cb:e7:e8:
         f3:0a:85:fd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfMmW+sZd9hnNvogrZPZOosBv6BQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy
N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MTAxOTA3MTEyNFoX
DTI1MTAyMDA4MzkyNFowMzExMC8GA1UEAxMoRkRFMTUzMjJDNjhEODJGQTc5MTUw
ODdGNzk1MjMxNEIzQ0FDOEQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMvYdbqzIw2DlbyRPTxNbpp13veLQ+2WMjX86SwsUifBg/NydUY0qKZxaeLd
QUfpiL+0YSdN2RYk+cX4Y2yfz4/Do2eojAzktuBuBYSL1ZA4bwnigbysaumPO9DN
ITccm4tE2Cj02LSDxb8KYwmOhMfIfsGjNW3aIMpwiodBCjEx/BFx2tuTV1E36TQ+
xIEGKcR/DOlg2m+taJ/VnvuARkzuq9eN7FVFi1PMzdC23sPXbAWGQ/Riiyi1x/yo
id1EzQkBTb1704bWNdRJVSqc7fDJ64sA96CQo2ZmynyIYvgXeMRh95LoLe6gMZcQ
UOjmUpYTxNg8uKBUSsrni6VIHKECAwEAAaOCAhswggIXMB0GA1UdDgQWBBT94VMi
xo2C+nkVCH95UjFLPKyNQTAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy
MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx
Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB
ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAjRWLHukL+14j+utzz4nQEwy3BMb9I8EA8iCSgODxr2PFXYmV
7M1WvKJ0oDRxt7blVRixn8ggqbZi1ypwBTDpHDph9dkcsCDx7010mfya3mLGYcaL
esl86tuBVRbebtBBVjVwLOmaQWbhw38az3dT/9rZnD0gcLU+SpI7lM8UH5hDAMWR
uGx9hUtYZX1Ggx2FGhVDEEs621CDKEsi3XYtpjWgcPU87lqi1/rXEiJQy6KOmbNf
xMUmWcptAFQ14JxXSuCojn5wsAKajxQbXjULdh9SaQKH9WZtDpqtNSQibLi0gf2a
VXf6xumLSBrd2zS13NQwxYoBkbqKy+fo8wqF/Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:11 2025 by rpki-client