Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          mIeSRItqlhGT6LMQKBu30hOJTgkaVySAqnzlAzzvsac=
Subject key identifier:   36:CA:10:3C:AC:BD:25:A8:71:B7:88:1A:C5:A8:16:6F:27:A1:65:41
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          16
Signing time:             Mon 03 Nov 2025 07:52:28 +0000
Manifest this update:     Mon 03 Nov 2025 07:52:28 +0000
Manifest next update:     Mon 10 Nov 2025 07:52:28 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: 9FPnLHLjJWIa1Kpqb76x+xN9HNO7wmNc8F5/x9I1EiQ=)
                          2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: QZBBJswmtfML9Fm1aFeXD8xHRfCOkYwNOZHzKQQJ01Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Nov  3 07:52:28 2025 GMT
            Not After : Nov 10 07:52:28 2025 GMT
        Subject: CN=69085f3c-c993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:c6:ee:31:2d:b2:e4:63:fb:dd:ef:9f:39:
                    04:fc:45:8c:b1:91:7c:28:bb:2b:52:fb:26:27:e9:
                    8c:a2:96:e9:47:8c:9e:47:cc:de:48:4a:2c:30:06:
                    34:c6:94:d3:49:5b:63:7d:f9:be:70:b2:01:56:2f:
                    a5:ec:f3:83:26:4e:16:c0:bb:35:06:7c:16:9b:b8:
                    1c:fc:fa:f7:f9:4d:13:f7:e4:93:7d:29:fb:ad:9e:
                    9a:84:83:e3:32:f1:26:19:b4:14:c2:97:eb:fe:80:
                    b9:d3:44:5c:e5:87:dd:7b:a0:79:63:eb:90:4e:17:
                    b8:24:b1:31:6d:9e:9a:ce:f5:f0:ee:68:4f:c6:f5:
                    aa:fb:8a:1d:e6:4e:79:ea:4d:7b:26:b9:41:c9:2b:
                    39:8b:a1:c4:3b:60:34:16:42:7a:e2:2d:ff:25:18:
                    52:52:93:65:f2:99:db:b7:64:71:56:2a:48:82:d5:
                    5e:22:e8:fe:df:6e:b1:67:ca:88:39:57:4a:95:33:
                    83:d1:e5:f0:7e:84:61:b4:d7:3a:45:67:9a:9e:2c:
                    2b:11:f4:37:19:09:92:0f:09:a8:98:87:89:76:f2:
                    64:ef:48:9c:29:c6:f6:3b:6a:2d:2d:7a:b2:f5:ba:
                    c6:6b:e2:b8:b2:0b:4a:28:73:63:de:03:c0:35:a9:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:10:3C:AC:BD:25:A8:71:B7:88:1A:C5:A8:16:6F:27:A1:65:41
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:f7:8b:60:3b:67:23:66:26:1b:44:31:4f:76:69:80:ef:
         15:f1:c7:fb:fb:17:b7:d5:c1:2d:12:39:7c:a5:91:3a:57:3c:
         0c:3e:38:ab:e2:68:f6:f3:9a:a1:83:c8:01:c2:f5:6b:3c:5a:
         a0:f4:c8:dc:a3:23:d6:d3:22:fe:ca:b0:8f:59:9c:6b:37:36:
         c1:56:65:63:7d:98:12:08:4c:67:99:29:9a:48:fc:00:60:61:
         ac:6a:12:dd:ab:39:da:f5:bf:e2:6f:a8:7a:cd:15:f5:ca:a6:
         95:f8:61:49:47:67:cd:35:04:d3:46:37:30:30:1b:46:dc:dc:
         bc:17:0f:99:f0:f5:51:f1:c3:45:87:b3:36:ba:ec:66:9e:8e:
         8b:2a:d1:2a:7c:68:bf:14:36:66:9f:72:0c:5d:89:ae:b2:50:
         cc:0c:10:14:34:0a:82:a2:5e:d7:db:00:6c:0a:9e:d1:73:a9:
         2f:73:77:5e:93:63:9e:90:2a:bb:54:52:43:91:6f:40:d2:40:
         50:53:cd:a7:df:4a:c0:07:e9:73:08:78:51:c9:48:db:e7:d5:
         cc:af:f0:be:56:e8:14:db:20:fd:06:e8:f4:70:23:2f:27:01:
         dc:d6:71:5c:1d:02:dd:dd:8b:21:0a:5c:95:ff:84:89:22:64:
         83:a0:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:46 2025 by rpki-client