Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          rT8SNvvNKZIFqU0Syba6b7FNyfT+Gt/Jq3vQCwYy47k=
Subject key identifier:   7E:9A:F4:50:5E:1A:1E:C4:5D:F5:D9:48:DE:C6:79:99:AB:1D:20:79
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       0684
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          061B
Signing time:             Thu 23 Oct 2025 00:13:29 +0000
Manifest this update:     Thu 23 Oct 2025 00:13:28 +0000
Manifest next update:     Thu 30 Oct 2025 00:13:28 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: jO5QYMpRXL7fpajPJb/p2/3UDMB9EEX2rW6/AXrLVdA=)
                          2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=)
                          3: 794C3D9C5BCC11F0A828900BC4F9AE02.roa (hash: fv5EgUVWuJv2ZJ2v/4tnVI7V/ZKsoOONfbHKKCRs8y0=)
                          4: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=)
                          5: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=)
                          6: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: jBj8tUje/J9yoZyIY1hd6S/+kLstKeE/As7y2q686ZY=)
                          7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=)
                          8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=)
                          9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=)
                          10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=)
                          11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 00:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Oct 23 00:13:28 2025 GMT
            Not After : Oct 30 00:13:28 2025 GMT
        Subject: CN=68f97329-563d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:fd:32:7c:a2:18:61:86:f7:ab:8d:be:39:
                    7e:82:3a:4c:35:2f:a8:8e:59:52:cc:79:10:0c:d0:
                    1a:78:39:0d:80:b8:35:c5:4f:8c:53:e5:a4:26:10:
                    09:66:48:5d:d4:3a:23:ea:7f:e4:ce:cb:d9:8c:9c:
                    4d:d9:ad:58:a6:b1:c0:b8:c5:9d:20:87:d3:d9:d6:
                    ce:0d:9f:29:cf:51:73:81:04:a6:66:a2:e5:03:3c:
                    04:af:fc:29:18:d5:af:48:2e:86:d5:56:8a:ad:73:
                    ab:7b:e1:8d:b7:0b:8b:ab:5f:fe:ba:b6:07:96:7d:
                    c6:f5:a2:5d:1a:28:73:16:a5:be:3a:8e:28:9f:94:
                    08:84:ac:8c:13:85:d3:65:0d:d1:2b:d2:e3:75:03:
                    ab:fd:a0:fe:f9:8c:5d:99:2d:df:d9:e7:a2:93:95:
                    c6:80:4b:e8:87:bb:52:f5:91:14:e9:8d:82:36:02:
                    01:62:2b:5e:13:05:3c:c6:8e:1b:6c:de:77:b9:87:
                    cd:85:b7:f8:57:cd:58:6f:45:18:c4:d8:2f:a8:9f:
                    4b:c5:7c:3e:20:f3:c7:3e:cb:26:0e:2e:1e:94:77:
                    c7:64:81:d4:53:1a:9e:d0:92:da:2c:88:39:07:e3:
                    45:3a:58:c5:cc:71:88:ff:9e:7c:79:05:8c:df:4d:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9A:F4:50:5E:1A:1E:C4:5D:F5:D9:48:DE:C6:79:99:AB:1D:20:79
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:58:5d:7a:54:af:05:34:1a:04:7e:af:73:36:c1:1f:58:
         45:eb:58:af:05:f4:c3:de:f5:4b:9a:f5:89:a2:6f:44:04:ac:
         aa:c3:82:c3:f6:8c:95:5f:4d:16:83:54:73:56:fe:40:5c:58:
         85:ba:5c:79:6d:0a:ad:40:5a:f8:cd:97:ed:b7:08:85:d7:53:
         84:15:63:11:e8:6d:d8:1e:c7:2a:55:b4:39:ff:75:64:f7:75:
         78:75:ac:a8:7a:33:f1:c4:47:16:d5:b5:9b:fe:fd:8c:6a:51:
         f0:44:6b:f5:a3:f2:44:cc:ef:34:d6:0c:49:59:b6:20:50:1c:
         e8:bd:e8:32:49:51:cc:02:ee:e5:62:35:3a:0d:24:15:b4:57:
         c9:98:a0:ae:f8:8c:ed:22:59:15:d9:91:d5:e9:d0:18:87:40:
         b7:71:ec:7c:ef:b1:b9:9e:c6:bf:3b:4a:8f:4d:a7:1e:08:69:
         5f:4c:89:38:be:b2:78:ca:7b:da:18:24:43:30:e6:ea:56:83:
         d2:ca:a5:23:bb:62:96:af:2d:75:d1:7c:f0:a7:36:89:62:41:
         f8:b4:e4:b0:b7:a5:b2:5e:27:2e:ff:50:c6:70:5e:32:9d:1f:
         7b:4b:a2:6a:57:75:02:fd:91:2f:ee:ed:78:10:2c:47:03:56:
         5e:c5:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:59:54 2025 by rpki-client