Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
File:                     9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json)
Hash identifier:          0zor1uDH440KgwxpkOmoVXF3FdSbZZHL/+AJA64YlDs=
Subject key identifier:   62:A3:36:6F:7E:18:05:3A:7C:46:01:38:EC:67:8D:C5:C7:E2:E4:C5
Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Certificate issuer:       /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
Certificate serial:       185D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
Manifest number:          184F
Signing time:             Thu 18 Sep 2025 16:38:16 +0000
Manifest this update:     Thu 18 Sep 2025 16:38:16 +0000
Manifest next update:     Thu 25 Sep 2025 16:38:16 +0000
Files and hashes:         1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: HqqR+6VTR7rbzhMDwKWSDrIAEilz3Z91eLx6eNRaxyE=)
                          2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: 12/YQGKh2uNHDbW3TNnX9cKDq/H76Hjbaf684uCZbYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl
                          rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 16:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6237 (0x185d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
        Validity
            Not Before: Sep 18 16:38:16 2025 GMT
            Not After : Sep 25 16:38:16 2025 GMT
        Subject: CN=68cc3578-4fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:d6:92:26:96:b0:f6:cf:ba:fc:d5:58:02:
                    ce:d9:d5:9f:ff:00:59:df:0c:f8:ca:33:90:7c:84:
                    8c:f7:f2:55:ed:5d:72:f7:52:41:67:2a:79:1b:b2:
                    78:3b:c6:16:3c:7b:9c:04:99:be:49:6a:4c:5b:17:
                    9b:49:74:d4:92:90:37:f9:a2:e2:08:f4:53:ed:1e:
                    9d:cf:f0:b1:81:9e:ba:7b:d0:57:af:06:71:2e:58:
                    7a:f0:fa:2c:81:d1:1f:ce:7a:74:d1:e1:3a:f3:e2:
                    1f:21:c4:77:67:5c:02:21:97:74:69:02:3b:12:01:
                    09:30:5b:a8:44:f7:93:cd:ce:33:ee:6e:08:f6:67:
                    ed:66:d1:bb:c2:63:f2:3e:70:5d:58:32:36:6a:6f:
                    13:bd:11:07:df:c8:f3:d9:81:8d:2f:74:80:25:8e:
                    af:6a:1b:74:f4:e8:25:c2:de:09:9a:15:5a:62:0d:
                    a2:d2:2d:3b:9f:52:c2:02:e1:e0:03:6d:8c:12:99:
                    27:7d:62:2f:86:ef:34:1b:15:82:1f:21:cd:ab:f7:
                    46:b3:d8:de:67:b2:57:3c:76:76:5a:ac:d6:2d:a2:
                    29:a0:f9:a7:b7:b1:00:a8:7a:cf:05:de:2a:30:47:
                    bf:b0:97:8e:3c:7f:de:f6:9f:7a:9b:2c:f6:ef:a9:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:36:6F:7E:18:05:3A:7C:46:01:38:EC:67:8D:C5:C7:E2:E4:C5
            X509v3 Authority Key Identifier:
                keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:19:6b:6c:95:ca:58:bd:6e:a0:f9:e1:1c:1f:29:e2:cf:9d:
         11:f4:85:6a:1a:84:b1:1b:26:c0:57:3a:15:db:0b:2d:0a:f0:
         e3:14:2b:e2:e1:92:d6:20:fb:3c:1e:6b:c1:3f:95:18:18:f2:
         dc:e5:a7:6c:57:40:6e:c7:c3:55:e8:2f:75:59:fe:32:43:a6:
         7b:89:29:f8:f4:ac:51:ac:dd:d6:e1:c1:2e:80:35:25:e6:f8:
         77:64:55:52:5f:b2:db:41:e2:50:be:66:95:01:dc:77:5f:c8:
         1f:c0:22:f3:d0:8a:e4:3c:47:fd:1b:98:35:11:af:e0:7a:a2:
         00:c0:bf:9b:92:85:57:67:03:95:4f:b5:9a:7b:a5:d4:3a:46:
         2f:12:03:d2:35:c9:9c:82:0e:ea:d4:4b:0d:c3:4b:05:cf:74:
         b3:d5:be:95:b8:c2:0b:3e:ec:9c:7c:5d:90:6b:a1:cc:f5:dd:
         28:87:cf:31:e9:06:30:60:ae:1f:98:da:26:ad:17:dd:2e:fb:
         d1:34:57:96:d9:6a:b5:9b:6e:16:53:09:fc:cc:76:43:a7:2d:
         e5:f2:bb:26:ef:92:80:f1:99:ed:dd:ae:de:27:ca:69:13:2c:
         65:b9:71:5a:b9:3b:4c:9d:2b:ee:cf:8b:e4:1a:97:f8:4d:ed:
         b2:2e:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:50:54 2025 by rpki-client