Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File:                     6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier:          n7kO9TMMaEFQokGEOcr4dsZd2ArY6YT6SSNTMDshFzE=
Subject key identifier:   CE:3C:BD:69:C4:72:2E:AB:16:5F:7D:76:F6:6C:9C:CD:49:FA:C6:F3
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number:          0222
Signing time:             Thu 23 Oct 2025 03:29:11 +0000
Manifest this update:     Thu 23 Oct 2025 03:29:11 +0000
Manifest next update:     Thu 30 Oct 2025 03:29:10 +0000
Files and hashes:         1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: QRFwB/N+e9yoH0KiPT6+lJoQ1+LD1/Ns9X5Wrat0vy8=)
                          2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: qDl9A66XUfdxXb2Z9BDWMcaLCM85XHiGpfBrshr3vQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 03:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Oct 23 03:29:11 2025 GMT
            Not After : Oct 30 03:29:10 2025 GMT
        Subject: CN=68f9a107-4753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:02:35:ad:16:b4:3d:07:e8:c3:dd:cb:44:
                    98:d6:89:2b:79:bf:a9:59:42:13:93:3b:4f:0b:c1:
                    44:5f:15:3b:4f:09:fd:84:11:5e:8a:da:f7:f0:42:
                    c9:95:06:19:fe:38:4a:cb:de:5b:99:56:fc:11:4f:
                    f2:c6:c4:fa:a1:54:e7:6e:95:b9:e2:06:f6:e6:b5:
                    39:fa:44:9a:23:ea:67:82:3c:7f:92:2d:ea:3a:37:
                    76:e7:da:0f:61:5b:39:19:fe:4e:65:6f:b2:8d:95:
                    f0:45:a8:bf:c0:b0:50:7f:8f:15:07:e6:dc:85:13:
                    ee:ea:2a:e1:ab:c0:84:34:88:0e:1f:91:a9:d8:d2:
                    4c:73:72:db:0d:34:c8:b9:76:52:bd:99:ae:7c:20:
                    20:0c:a5:14:69:5c:94:d7:2b:30:b8:fe:f1:86:7f:
                    81:11:f7:5f:86:35:a7:34:22:28:91:43:62:cf:83:
                    a1:55:cf:b8:09:4e:e6:a4:e8:b6:a5:58:d7:59:4a:
                    76:bf:a2:96:1e:53:37:57:49:51:20:c0:ba:c5:1c:
                    06:e9:15:8f:d6:1c:b6:62:a3:b5:13:27:48:44:67:
                    8f:9c:c8:e0:6c:d1:54:86:c9:d5:b7:e6:1a:2e:31:
                    7f:b2:e8:9d:d8:32:c4:56:b7:d0:ef:da:1e:aa:69:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:BD:69:C4:72:2E:AB:16:5F:7D:76:F6:6C:9C:CD:49:FA:C6:F3
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:8d:53:44:d7:b5:d6:a6:e5:51:ca:7d:78:9d:af:b6:fa:
         9a:e9:b0:96:ba:bd:71:42:33:59:2a:09:20:ce:e4:31:ab:bd:
         ed:f6:44:d1:05:1e:d0:1c:f0:9c:cd:18:e9:9f:a5:78:d9:e6:
         df:19:c7:d5:69:00:81:c6:e6:81:60:3e:a8:ff:30:9f:9d:fe:
         48:1c:88:45:c5:47:e4:50:aa:e0:7e:c9:03:4d:0f:15:22:e2:
         97:ba:5d:52:5b:56:39:78:f9:ff:ca:c9:7d:8a:ee:20:92:dd:
         01:88:d4:82:36:ac:24:c2:d7:07:c2:1e:67:21:69:e6:cf:47:
         26:11:da:ac:95:a5:9f:46:4a:bb:88:e3:e0:a2:09:1d:4c:73:
         07:dc:61:82:63:e8:b0:af:4e:48:71:d1:59:e9:1c:2e:9e:69:
         86:18:a4:27:0a:72:90:b6:fd:c8:2a:43:30:f5:3b:2e:ec:9c:
         26:43:1a:47:c7:e4:0b:8c:23:4a:11:13:ef:f4:ea:9d:e9:5f:
         21:1f:c7:a7:8a:fd:1c:c9:0d:61:cb:21:2b:f9:e8:e8:9b:33:
         2a:24:40:97:24:86:22:9f:42:44:0b:6e:e7:52:9c:45:32:32:
         b0:1f:77:ab:f3:03:f6:96:fc:1f:c7:1a:21:cb:d2:33:12:90:
         f5:05:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:56:13 2025 by rpki-client