Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
File:                     C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft (raw, json)
Hash identifier:          qsEiYEHQd/X9pE/0XULtbSDgowNQd8+DyZQRgHkxJW0=
Subject key identifier:   09:40:99:5B:8A:51:E8:AD:CF:42:48:9B:3E:89:E8:A8:FA:54:58:21
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
Manifest number:          C0
Signing time:             Thu 23 Oct 2025 08:01:16 +0000
Manifest this update:     Thu 23 Oct 2025 08:01:16 +0000
Manifest next update:     Thu 30 Oct 2025 08:01:16 +0000
Files and hashes:         1: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl (hash: ilQmTo4KKe51DhIU5ki3w1o4mWREqa1jOZapz122I+g=)
                          2: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (hash: YBvvTG8CEcUFzimDCpf2NnR5CR5UGFVI9gkQ+sgXEds=)
                          3: 10C5553891FB11EFB901C22CC4F9AE02.roa (hash: ArlGMl3wEFoKu6XnIzHTkLugUTq0moKGL5QIiW5qRPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 07:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: Oct 23 08:01:16 2025 GMT
            Not After : Oct 30 08:01:16 2025 GMT
        Subject: CN=68f9e0cc-4a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:ac:98:96:1d:50:46:ef:0d:de:df:7a:5f:
                    9d:dd:07:d3:fd:c2:5c:38:03:83:b4:b2:84:a8:70:
                    cc:34:b0:d3:b4:84:71:21:dd:cc:d6:66:5c:9c:e8:
                    db:f6:0d:d6:02:92:aa:82:77:c2:10:8d:25:fa:18:
                    49:3d:5d:a3:f0:6b:50:52:7d:7d:91:66:68:26:d3:
                    f5:93:92:91:10:4a:ae:8b:38:50:7b:99:9a:b5:94:
                    dd:4a:04:c9:dd:56:17:0f:c9:37:70:c7:86:55:73:
                    e3:1f:a0:7b:12:d2:3d:18:bd:14:5c:da:02:34:6d:
                    ec:40:a3:e6:2c:9a:c3:7d:d3:c8:f1:ef:ef:d4:0c:
                    71:11:b9:52:83:8d:f7:1e:f2:b3:5f:f1:d4:9c:1d:
                    e8:0f:bf:3e:2b:9c:f2:8a:09:28:1b:43:13:8c:17:
                    b2:28:15:12:c9:cf:7c:1d:a4:ec:cf:8f:34:e5:c7:
                    15:61:d6:4b:83:8e:dd:aa:da:73:64:86:09:dc:27:
                    c9:24:cc:3d:0f:25:b5:39:93:1c:ad:7f:74:12:ed:
                    93:41:25:a7:77:8a:7b:ab:db:af:36:84:1d:d6:e8:
                    92:12:89:fe:ba:73:b6:db:1f:4d:22:6d:68:ad:cd:
                    5b:98:97:a2:bc:1d:23:be:86:fa:d7:0d:74:61:3b:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:40:99:5B:8A:51:E8:AD:CF:42:48:9B:3E:89:E8:A8:FA:54:58:21
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:69:eb:f4:96:75:08:a5:5a:ec:0d:d4:95:c9:84:92:77:1c:
         68:8b:63:aa:99:e3:c3:7e:a0:9f:b0:18:43:99:d3:f8:c6:f0:
         63:25:a5:b1:db:e2:9a:b5:5a:40:5d:fa:15:fd:e4:44:3d:ed:
         9d:3e:3a:4b:48:4f:d0:fc:72:34:d7:e2:03:53:8a:da:43:1c:
         be:dc:94:82:35:b8:0c:3b:63:d7:38:d5:81:57:2e:3b:ca:f3:
         ec:12:77:a4:fb:06:b0:0b:d9:d5:46:84:23:be:e8:6d:af:df:
         17:eb:52:a9:6b:81:1f:22:6f:a5:44:00:ea:25:11:30:7e:73:
         8c:86:2c:fa:c4:b9:fb:3a:ae:34:a3:2a:f7:fb:8a:79:34:63:
         c5:db:bb:fb:f9:d7:16:d9:03:3f:e2:e6:d0:ba:46:e1:6f:ec:
         bc:5d:b6:36:31:ae:88:9d:39:ec:85:c7:11:00:55:c4:71:95:
         4d:31:a6:34:44:fc:86:90:1a:47:fe:41:d7:bf:22:fc:3e:9e:
         be:11:f4:1f:ca:ba:8a:26:94:3e:d4:c3:2b:d5:95:63:32:17:
         22:b1:1a:6b:0c:4c:4e:6f:66:be:b9:ac:d5:22:de:5b:d4:96:
         82:58:c2:8b:da:0c:fe:d2:33:55:3e:9b:fb:d9:43:cf:eb:30:
         7c:94:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:57:49 2025 by rpki-client