Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
File:                     pQc6SYTllxATMLnnoFjzic6TKa4.mft (raw, json)
Hash identifier:          GXbcAnNfvuknKPae+ZCZivtW3iLeXDlr4O54secLRoI=
Subject key identifier:   49:6A:1E:4C:3E:F8:52:6F:4C:5D:B5:3D:3F:69:1B:D9:8F:28:AA:C8
Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
Certificate issuer:       /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
Manifest number:          04FB
Signing time:             Wed 17 Sep 2025 00:02:53 +0000
Manifest this update:     Wed 17 Sep 2025 00:02:52 +0000
Manifest next update:     Wed 24 Sep 2025 00:02:52 +0000
Files and hashes:         1: pQc6SYTllxATMLnnoFjzic6TKa4.crl (hash: hMF5KXhT2laKF3P9flfWzYBTMN9dYSTy0ka+4JPOHXg=)
                          2: 76987158273511ECB7FB443DC4F9AE02.roa (hash: W3CoFW/9z7UlujIbTWP3AOKXFMu+6O4kA5ioHKglL9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 00:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B9F, serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
        Validity
            Not Before: Sep 17 00:02:52 2025 GMT
            Not After : Sep 24 00:02:52 2025 GMT
        Subject: CN=68c9faad-06c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:4b:8a:e7:3f:f4:88:75:8b:c1:75:0c:8f:
                    0f:10:d2:84:ab:ca:30:82:f5:25:37:2e:b6:93:54:
                    e9:f1:69:92:9e:a3:1c:26:57:8a:10:4e:8f:b2:e9:
                    c6:2a:b5:ff:0c:f0:e1:bf:af:ab:e2:2c:8c:bc:3c:
                    7e:e8:9e:c0:06:71:b5:92:2b:68:d2:dc:6a:aa:f0:
                    06:7b:48:81:04:41:f9:5c:fb:1e:32:32:be:a3:5c:
                    18:b3:ee:02:b0:a2:de:08:12:67:07:93:4a:81:07:
                    25:d5:49:d3:9a:7f:37:26:c7:c5:a8:54:87:a7:b5:
                    f8:ae:38:d4:25:4c:8b:76:53:b4:66:b7:89:72:0a:
                    37:1f:c6:d3:a6:99:7d:1e:e2:5f:ee:83:c9:ed:12:
                    75:20:14:8b:29:a7:4c:7d:a1:ee:ab:74:e5:9f:b3:
                    d5:58:9b:3e:5b:99:5c:55:d1:d7:75:f5:79:7a:30:
                    49:90:c9:b4:06:a9:d1:66:7f:51:42:86:b6:43:ee:
                    3e:bd:eb:61:52:78:22:11:2f:14:c3:0a:38:30:eb:
                    5a:a6:0b:2d:0e:01:12:dc:53:4a:a9:18:77:27:e7:
                    e9:ea:a8:83:8f:a9:ed:9d:71:ca:3a:33:6d:28:5a:
                    e0:bf:3f:ec:eb:91:0e:41:7d:0b:01:33:d2:8b:1d:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:1E:4C:3E:F8:52:6F:4C:5D:B5:3D:3F:69:1B:D9:8F:28:AA:C8
            X509v3 Authority Key Identifier:
                keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:38:ba:30:f4:11:3a:da:0e:6e:2e:3c:eb:ba:f3:7e:b8:
         09:46:72:a6:6c:ee:1c:c2:d0:bb:0a:7b:13:00:56:af:6b:11:
         5b:a1:5f:c6:1e:b9:ed:17:26:f5:74:0b:4e:63:b5:3b:8d:c4:
         cf:23:d4:4f:9e:8e:a0:57:28:e7:bc:c0:ca:32:34:e7:d1:01:
         2f:5a:d4:fc:54:02:c6:b1:5d:5d:87:70:f0:38:56:28:3d:cc:
         5c:4f:f4:10:76:80:7e:f6:32:93:31:5c:e7:33:d5:f2:07:6c:
         68:72:49:67:0f:26:5b:8a:50:f9:d6:ca:2f:fa:50:79:a0:f3:
         3b:42:cc:b2:87:b8:90:d8:76:8e:7b:37:1b:3b:9a:11:d4:5f:
         9d:a9:49:00:37:4e:3d:37:5d:be:96:1c:96:57:05:c7:52:c7:
         64:f4:39:e3:e5:ad:e9:c4:b9:9a:67:21:ad:5b:a4:ac:74:83:
         5b:15:10:cc:50:30:d2:fb:65:97:2a:13:15:0e:61:95:2b:78:
         da:b7:43:5f:3e:42:2b:d8:28:94:45:ae:de:bf:fb:52:1e:8c:
         ef:6d:da:58:11:74:af:f1:b9:9a:81:82:e4:7d:0a:69:27:92:
         1c:61:dc:98:92:11:91:6a:04:76:58:d3:23:1d:d4:2d:5e:28:
         85:de:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:05:49 2025 by rpki-client