Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
File:                     9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json)
Hash identifier:          0Ctwz6e2ksOGEe9kQLEI7gzhxm/Xwt6X9x4gZVOND8w=
Subject key identifier:   54:E5:2B:93:5E:B0:92:5B:ED:76:31:52:0E:1B:19:2F:CD:2D:80:0C
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
Manifest number:          0A66
Signing time:             Mon 20 Oct 2025 20:55:36 +0000
Manifest this update:     Mon 20 Oct 2025 20:55:35 +0000
Manifest next update:     Mon 27 Oct 2025 20:55:35 +0000
Files and hashes:         1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: L+rcF3yx/r4dwnqxNms6MkKysBb8R/mtAGCKtii1b4E=)
                          2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=)
                          3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=)
                          4: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eklJ7FzTn9mZj0/tgQ82yry1nIlD8nEbavqJJ/O2CPk=)
                          5: 9E833DD0AD6711F090458C81C4F9AE02.roa (hash: oU6l7SKC+03T0MHvYg79AFYnTbgUlBFX8ERvtbK12uw=)
                          6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=)
                          7: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=)
                          8: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: 914DyUC8cgZSpvUxNHt6hFxZ0TIilqGuQ9IXlahT3lI=)
                          9: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (hash: kDg5gV8f685pEYZaJzry/4cBmeqL4qLx4WwwvbyKJCY=)
                          10: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=)
                          11: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=)
                          12: 745CC04A84C111F09D75D269C4F9AE02.roa (hash: 6Yu+WsXmmVUuAC/cAYc0HMungUORHEv2C/0ir8MbysQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Oct 20 20:55:35 2025 GMT
            Not After : Oct 27 20:55:35 2025 GMT
        Subject: CN=68f6a1c7-8cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:2e:30:01:83:4f:15:0b:e8:98:9a:2f:bf:
                    da:1a:8d:0f:9b:a2:42:c5:11:6b:e4:54:e7:98:5e:
                    7d:84:0b:15:a1:f7:a9:b5:1c:a7:83:af:f1:0e:69:
                    3e:75:bb:e7:55:e0:6f:85:94:c2:2d:bc:dc:45:e2:
                    2f:61:09:80:49:fe:e3:45:18:7a:de:71:8a:aa:39:
                    d0:ea:ab:2d:f8:35:b9:35:88:31:f1:17:74:a8:a9:
                    22:a6:9f:73:95:47:01:f3:23:93:00:7f:76:31:f4:
                    f8:92:a4:c9:51:2f:b0:15:5a:41:6f:d7:91:40:63:
                    df:5d:98:04:63:79:b1:5d:68:78:06:b9:1f:21:34:
                    49:76:b8:ae:23:9a:33:16:39:e7:6d:08:24:1b:cc:
                    9d:9e:a6:2a:77:6e:71:f0:ce:7a:2a:d4:bc:80:44:
                    4b:3d:9a:4f:92:0e:0a:92:42:be:c6:2d:16:a6:d7:
                    5a:a0:5b:30:aa:84:54:da:41:99:9e:06:08:b2:c5:
                    f0:d7:b1:ca:84:32:2c:fd:9b:d1:a7:5d:1e:7f:b7:
                    2e:65:93:75:62:88:56:3a:d0:62:83:9b:3d:0f:78:
                    e3:64:2e:dd:30:42:04:3b:e9:0b:7f:70:a7:57:40:
                    8f:27:01:a4:0c:e1:cc:0a:30:a3:64:6a:aa:ec:68:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E5:2B:93:5E:B0:92:5B:ED:76:31:52:0E:1B:19:2F:CD:2D:80:0C
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:ab:8e:35:14:d7:82:55:50:86:d2:93:48:44:aa:9c:30:
         a6:a6:99:af:ce:6a:3d:82:25:24:dd:b3:b2:be:15:2e:df:3d:
         ea:19:54:1b:c7:95:f7:c6:4e:52:fe:5d:5a:ca:75:9b:67:22:
         14:a8:bc:d2:57:80:45:f3:fb:96:72:70:4c:73:ff:b1:fb:6a:
         0c:f4:9b:2a:05:a8:ce:fc:64:5a:09:5e:67:80:7a:d4:08:4d:
         8d:58:be:e5:b7:41:2f:3b:6e:62:2f:ad:b6:10:8f:77:45:66:
         ea:32:d4:d6:f8:ee:75:32:32:93:04:61:07:5f:f9:df:91:37:
         18:20:c5:e9:b0:89:98:69:df:97:68:2a:35:bd:39:4b:0a:4b:
         7a:61:5f:d7:44:58:0d:9c:5d:9d:2e:84:b7:2b:cc:aa:fc:4d:
         67:1b:64:25:d9:a5:46:8f:de:11:01:43:a7:b5:5a:16:2f:9e:
         d0:56:9c:bb:56:ef:48:2d:7f:1c:c5:fc:d4:72:9c:85:83:8e:
         ab:36:c1:e6:38:3e:03:3b:ed:98:be:3f:23:e9:9b:ab:e2:44:
         69:5b:1f:df:6f:85:f2:16:60:c4:6f:f2:8b:93:30:f3:e9:a3:
         34:49:b7:b6:68:30:88:c5:24:59:e3:ff:20:66:0e:d7:c9:e5:
         b3:d2:df:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjUxMDIwMjA1NTM1WhcNMjUxMDI3MjA1NTM1WjAYMRYwFAYD
VQQDEw02OGY2YTFjNy04Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHMuMAGDTxUL6JiaL7/aGo0Pm6JCxRFr5FTnmF59hAsVofeptRyng6/xDmk+
dbvnVeBvhZTCLbzcReIvYQmASf7jRRh63nGKqjnQ6qst+DW5NYgx8Rd0qKkipp9z
lUcB8yOTAH92MfT4kqTJUS+wFVpBb9eRQGPfXZgEY3mxXWh4BrkfITRJdriuI5oz
FjnnbQgkG8ydnqYqd25x8M56KtS8gERLPZpPkg4KkkK+xi0WptdaoFswqoRU2kGZ
ngYIssXw17HKhDIs/ZvRp10ef7cuZZN1YohWOtBig5s9D3jjZC7dMEIEO+kLf3Cn
V0CPJwGkDOHMCjCjZGqq7GgrHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTlK5Ne
sJJb7XYxUg4bGS/NLYAMMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW
ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9cquONRTXglVQhtKTSESqnDCmppmvzmo9giUk3bOyvhUu3z3qGVQb
x5X3xk5S/l1aynWbZyIUqLzSV4BF8/uWcnBMc/+x+2oM9JsqBajO/GRaCV5ngHrU
CE2NWL7lt0EvO25iL622EI93RWbqMtTW+O51MjKTBGEHX/nfkTcYIMXpsImYad+X
aCo1vTlLCkt6YV/XRFgNnF2dLoS3K8yq/E1nG2Ql2aVGj94RAUOntVoWL57QVpy7
Vu9ILX8cxfzUcpyFg46rNsHmOD4DO+2Yvj8j6Zur4kRpWx/fb4XyFmDEb/KLkzDz
6aM0Sbe2aDCIxSRZ4/8gZg7XyeWz0t9x
-----END CERTIFICATE-----
Generated at Wed Oct 22 10:50:04 2025 by rpki-client