Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File:                     DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier:          fz7uqoZ6RUy94OKELK/9wEefYh33XQuaV7RqY4I8Oxo=
Subject key identifier:   FE:42:F0:5E:0C:1B:34:03:E1:1F:AC:E0:AF:9D:39:00:78:D7:E8:FA
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number:          0212
Signing time:             Sun 19 Oct 2025 04:58:46 +0000
Manifest this update:     Sun 19 Oct 2025 04:58:46 +0000
Manifest next update:     Sun 26 Oct 2025 04:58:46 +0000
Files and hashes:         1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: qwNW1nnVPXxucUunsoAjypbVTZEFAfn6um/Qt0Wvy+I=)
                          2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: OIJRm8GaBU5y1XIhl90QydPQzIYTf07qs+pUpIzxFiU=)
                          3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: YAG2MNWzPx3qv2gqkqHL4HomQQn9WRVJ3LMr6N4DzO8=)
                          4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 531eC6P1epXQqATQkPS1k/QZSAZVi7XE0wwzhV1HGkw=)
                          5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: p5sOlQdOsm0uuNV7G6DKNuM9BbnStZ2ZIjZVpc+0Hyo=)
                          6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: VkPzYi2ZNs0vU05onLKrq1O6hJdtK/SNgO3aXYDbRas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Oct 19 04:58:46 2025 GMT
            Not After : Oct 26 04:58:46 2025 GMT
        Subject: CN=68f47006-125a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:59:e0:2e:24:8c:10:aa:70:54:58:9a:79:
                    21:44:f7:fd:f7:82:cb:8c:2f:eb:0a:79:27:d1:09:
                    dd:39:e8:b4:3b:9b:56:fd:ec:d4:51:bf:e0:e3:9f:
                    54:1d:09:8e:54:f6:56:0d:0c:21:0d:0b:cc:3d:ec:
                    8f:12:4b:64:36:48:98:37:6f:d3:4e:ea:7b:d7:b2:
                    c0:5a:61:1e:d3:98:85:4b:78:03:e9:87:12:bf:ee:
                    61:e3:74:51:a2:b6:d8:d1:b2:68:1c:a3:10:75:16:
                    e7:1d:89:3f:b3:7e:3a:55:fe:f7:cf:ac:49:0b:fe:
                    78:32:65:68:59:8d:e9:b5:b2:52:30:20:0b:1d:7c:
                    c6:fe:9e:02:ab:fc:a9:82:16:be:ea:0c:38:4a:04:
                    ad:a7:6f:e8:4e:2e:b4:0d:c5:85:8a:33:06:ef:16:
                    a7:0a:87:7a:ba:da:82:32:d5:f1:c4:9e:11:68:0e:
                    24:d6:04:da:06:c7:28:f6:32:ac:43:be:74:0d:dc:
                    04:7a:08:be:73:b4:3f:c1:ff:0f:3a:54:64:b6:53:
                    2a:b8:d4:55:4f:5a:06:89:41:89:b3:1b:98:e6:92:
                    f4:bc:1b:8d:c5:3e:0c:b8:79:a8:f3:cd:65:85:b2:
                    81:98:fe:d5:ed:bd:1e:cb:bf:e5:f0:51:2e:e5:37:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:42:F0:5E:0C:1B:34:03:E1:1F:AC:E0:AF:9D:39:00:78:D7:E8:FA
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:62:0d:18:6b:ef:2a:c5:71:0e:2f:8d:54:f6:3e:0e:e4:df:
         b1:fa:b9:84:ca:36:d3:9d:83:de:13:ea:27:ad:0c:2b:fe:d8:
         17:ec:f0:ab:e8:80:28:a0:70:7d:3e:74:5c:f3:99:8f:de:b7:
         16:ed:a0:fe:95:9d:ed:e4:36:54:99:76:3a:0c:09:75:50:6a:
         e6:f5:91:79:80:eb:ba:1c:fc:ee:5a:17:ce:07:e4:cb:11:c7:
         2c:5d:70:7e:52:9e:e3:eb:fb:d1:a6:72:fb:c2:48:db:27:09:
         4b:c5:ad:0c:4c:22:22:ee:aa:a9:cc:7e:2b:2b:a7:68:2d:56:
         f2:bf:9c:9a:bb:23:e6:ad:e9:1f:b2:24:46:b5:f6:07:8d:e8:
         d3:d3:b4:5a:c5:c4:2f:2b:d4:1a:1d:3c:44:c9:0a:af:38:35:
         2b:4b:8a:75:fc:3b:19:80:63:3d:2a:38:8e:ca:51:c5:b9:4d:
         7b:ed:18:fd:eb:67:4c:46:7d:8a:9d:f6:9c:68:86:22:a0:8a:
         e6:71:3c:44:3a:ae:3f:f8:0c:9b:02:79:40:8e:85:6c:15:1f:
         d5:35:76:bc:e4:d6:c9:eb:d5:3d:57:49:95:42:e1:71:d3:6e:
         38:4b:d3:a4:ce:e1:ce:44:2a:be:75:84:dd:35:48:71:28:77:
         7c:ec:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:43:00 2025 by rpki-client