Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          5ZqyfGHkQA9RqrmjKECZ1BxVAZ+FoJ/CmkOCTRfRlTg=
Subject key identifier:   97:16:EA:80:83:B3:94:90:E1:98:DC:1F:1D:FB:93:23:77:6F:C6:2D
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          9F
Signing time:             Fri 19 Sep 2025 06:56:37 +0000
Manifest this update:     Fri 19 Sep 2025 06:56:36 +0000
Manifest next update:     Fri 26 Sep 2025 06:56:36 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: MNixnGDOoXQoA7/z9HmALLCaXlWmt2t0osyT0/yrMHY=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 06:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Sep 19 06:56:36 2025 GMT
            Not After : Sep 26 06:56:36 2025 GMT
        Subject: CN=68ccfea4-db63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:46:0d:78:75:8e:1d:db:92:8f:c1:25:32:
                    68:75:f5:1b:d1:d6:d4:ea:fe:0e:67:7b:7a:b9:9f:
                    20:d1:17:e2:7c:48:75:bc:5c:6d:82:d2:7c:29:2f:
                    70:e6:dc:21:6a:5d:5e:39:03:3b:f9:fc:60:d3:a1:
                    3d:a8:b0:f7:10:d0:cf:93:19:49:95:91:58:c3:8f:
                    4b:c3:2c:e4:ad:a0:70:5e:24:c7:4e:84:2f:04:27:
                    8d:9d:07:fd:e5:ae:bb:f9:ec:d6:ac:4c:7f:ff:00:
                    c0:9a:66:39:d9:f9:54:ce:01:75:33:f5:50:a6:1e:
                    5e:c2:09:bc:f8:cc:90:d4:d0:d7:c3:b5:51:bf:de:
                    14:ec:fc:9a:0e:e6:e8:c4:0c:27:4c:74:db:ea:1f:
                    79:29:3b:e0:f9:c7:44:7a:6f:20:7b:7f:29:a6:42:
                    1d:49:18:2b:68:89:3b:44:0e:2d:21:7e:77:0a:05:
                    96:37:90:73:6c:41:88:0e:c2:ed:be:b3:10:6f:d6:
                    52:71:cc:2a:f0:f7:0c:6d:00:4e:b9:99:22:61:4b:
                    4c:03:b3:de:cd:20:f9:1f:d3:83:fc:a1:64:04:23:
                    07:2e:ab:aa:c4:40:cd:43:94:64:21:aa:ba:f8:6a:
                    00:5a:e1:1a:23:79:27:79:bb:bf:98:cf:d7:09:30:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:EA:80:83:B3:94:90:E1:98:DC:1F:1D:FB:93:23:77:6F:C6:2D
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:16:99:95:d8:c8:b1:1b:5f:eb:e2:65:a2:2f:a6:24:a2:
         8c:f2:41:6d:6b:f1:ed:3d:78:1d:78:35:8a:15:d2:d6:fe:91:
         e4:c3:c6:87:cc:ed:2c:41:ca:30:e7:8f:11:84:9a:16:64:6b:
         fb:06:c2:e3:3a:40:13:db:15:ed:a1:d6:e7:04:93:3a:9a:fb:
         c0:bc:cf:13:d6:65:b0:9a:d8:a0:84:40:10:4b:75:3d:59:51:
         77:c1:3b:09:31:4c:cd:0f:da:e0:4d:17:a3:0b:dd:23:f9:b2:
         56:f2:77:55:bc:71:b9:d5:74:fd:fa:df:8e:06:7f:9f:08:9a:
         e5:67:3c:cd:2d:8d:cb:8e:67:fb:ee:a0:7a:ce:82:c1:22:b5:
         17:d9:b0:97:8f:16:e0:0e:33:51:d7:2c:40:db:e6:02:bf:44:
         64:b6:ec:80:5c:bb:ba:10:7f:be:6c:5c:c1:1e:17:38:de:fb:
         db:41:89:eb:fa:48:0e:2d:70:4b:cd:cd:d1:d5:ef:45:f5:a0:
         c4:73:cf:c8:18:65:94:fb:bb:6e:1e:a1:a6:ce:55:11:05:a8:
         bb:a2:81:db:d2:fc:4e:96:a5:53:b6:67:15:ac:c9:2a:2b:63:
         71:38:31:1e:a5:c6:df:21:a2:c1:7c:d6:86:fb:fd:dc:8f:7c:
         c6:75:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:25:03 2025 by rpki-client