Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File:                     9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier:          /BxdfA0EPW5TsIKb407w058Kd/BgexZseK3ShSJPP2w=
Subject key identifier:   56:3A:31:BA:95:72:0F:E0:B2:92:B9:B3:12:FA:96:90:F9:70:36:76
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer:       /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial:       0C74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number:          0C69
Signing time:             Thu 18 Sep 2025 18:40:25 +0000
Manifest this update:     Thu 18 Sep 2025 18:40:24 +0000
Manifest next update:     Thu 25 Sep 2025 18:40:24 +0000
Files and hashes:         1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: BrVO/Ws7m8CFK4b1pOwq5k+fYGT+CooiuUVzbWai7d8=)
                          2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
                          rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
        Validity
            Not Before: Sep 18 18:40:24 2025 GMT
            Not After : Sep 25 18:40:24 2025 GMT
        Subject: CN=68cc5218-e96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:3e:b6:85:12:e4:7a:a2:42:c6:dc:7f:e9:
                    78:6a:a2:f2:d2:0a:cb:2b:36:55:b1:b9:85:ae:e4:
                    6c:cf:59:ae:a8:af:51:60:d2:91:3f:28:ba:ff:7a:
                    be:7e:a5:e6:75:3e:9b:2e:78:8a:7c:b1:7f:1f:bd:
                    f1:61:1d:7e:12:5a:2b:47:a0:ab:e1:f3:28:a6:f9:
                    b3:f0:4d:1f:f0:72:9e:af:57:b8:27:62:a9:9a:b5:
                    e9:1c:76:a6:e3:4c:52:d6:48:12:cb:39:58:27:40:
                    f8:b7:47:24:4b:cc:70:dd:24:b9:37:60:3a:47:13:
                    ef:a0:18:74:40:a0:64:85:1b:7e:72:53:14:6e:4e:
                    79:4f:b4:af:66:82:de:de:79:de:37:4c:01:db:b2:
                    c9:f0:18:16:38:de:3a:50:64:ab:7f:8d:f8:ce:8e:
                    36:7e:94:8d:73:c6:0d:03:a4:26:7c:11:6b:c1:c7:
                    01:54:bf:9d:18:53:d1:80:f0:e6:77:8f:de:0a:64:
                    b5:8a:d6:b1:55:e8:d7:96:be:a6:a9:0b:40:33:b4:
                    62:a4:a6:72:23:74:0a:37:fd:5c:28:3f:a6:e8:87:
                    64:50:8d:70:2f:a0:18:ef:26:e4:16:3b:7a:fb:ee:
                    cd:b6:00:89:a6:86:ec:cb:a2:6e:ac:40:68:29:ec:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3A:31:BA:95:72:0F:E0:B2:92:B9:B3:12:FA:96:90:F9:70:36:76
            X509v3 Authority Key Identifier:
                keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:45:0c:88:44:f5:55:ad:7c:a8:da:67:54:49:06:54:e0:
         a7:03:dd:ad:7b:85:dc:51:88:14:f9:74:68:69:0a:56:4a:71:
         38:a6:65:c1:e9:b0:c9:4c:a6:12:92:f3:d4:45:89:9f:ce:2e:
         f5:72:66:27:b9:08:45:c9:3f:30:6c:72:fe:99:29:d3:8f:dd:
         b6:8a:87:57:5a:32:15:d8:1b:ff:62:04:df:be:05:b0:fa:b8:
         18:f5:54:11:38:cd:c1:9c:b0:94:11:95:32:e7:fd:d8:18:3c:
         2b:29:42:a3:18:53:25:d6:c0:31:b2:5e:8c:c9:e7:47:d8:ce:
         b7:fd:a9:3a:83:f7:e6:82:30:f5:cc:ab:ca:68:37:58:39:bc:
         18:5a:0c:ec:05:8d:ea:01:41:d1:73:95:90:ad:2b:7f:e5:9a:
         e9:4a:63:26:ed:2d:17:25:4f:3b:fb:36:2f:c7:f2:4e:e1:12:
         17:04:5c:1a:8f:06:7e:32:3b:4d:6f:36:c2:2a:87:0a:f5:94:
         8f:9e:8d:5b:66:6b:9e:65:10:79:24:82:79:78:9b:e2:0b:a1:
         53:4c:af:fc:f8:4f:76:96:68:d7:76:2e:d2:6d:fe:d5:4d:9a:
         fe:7b:d2:2f:f6:bc:20:56:d8:00:5e:bf:61:2e:ba:1c:50:32:
         eb:bb:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:40:36 2025 by rpki-client