Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          fdZCGSTUnz8go/v9vbkgoLxoOopmFHTnpw3a5y3TKv0=
Subject key identifier:   A2:A3:99:52:EA:B1:D7:F7:81:42:5A:1A:51:4C:07:D2:71:F7:04:43
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          9B
Signing time:             Fri 19 Sep 2025 07:04:34 +0000
Manifest this update:     Fri 19 Sep 2025 07:04:34 +0000
Manifest next update:     Fri 26 Sep 2025 07:04:34 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: lE3HC4Da8vdwtunUnJwdC5f3EKWAJ2NhfFEO8ku68Vc=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: Sep 19 07:04:34 2025 GMT
            Not After : Sep 26 07:04:34 2025 GMT
        Subject: CN=68cd0082-1748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:68:4c:4f:fa:42:ab:b3:a0:b9:1f:2e:31:
                    9a:c7:7c:77:14:fc:48:91:25:4a:9e:bf:4b:6c:0d:
                    74:f0:44:93:59:08:42:d1:69:a3:fd:03:a8:bb:c3:
                    d3:56:ba:e5:a7:04:a7:65:bf:66:31:e7:83:8f:14:
                    df:26:8d:2a:19:56:9c:4d:4e:d6:1f:ef:a1:f1:b9:
                    67:a5:70:24:f4:00:a5:40:4d:c7:f7:28:0a:26:3c:
                    6c:6d:b0:02:29:b3:23:7c:86:24:42:6f:0d:6d:d0:
                    ec:a3:cd:94:fb:a4:89:d7:d2:7a:e4:f3:71:73:f1:
                    4b:81:1d:d5:28:16:76:a3:c4:d4:18:aa:a6:c8:32:
                    40:bd:97:a0:b8:38:35:8d:54:b6:2c:9a:88:58:36:
                    c6:3d:5d:ec:46:95:e0:69:b6:72:94:e1:c6:ad:c6:
                    61:69:1b:9c:60:69:f4:00:c4:bb:a7:b5:ad:a7:9f:
                    19:a4:6b:40:f7:0d:7a:7f:48:50:47:a2:83:e7:00:
                    f5:fd:9a:fe:f9:0e:6f:23:c9:04:4f:a7:b7:6b:5b:
                    76:94:be:93:4e:1d:82:c5:89:69:36:de:9f:6a:59:
                    c5:2b:f2:23:23:4e:5b:eb:27:82:e6:5e:3d:1c:79:
                    aa:48:fa:32:d4:1a:88:20:8b:de:e7:11:be:61:3e:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A3:99:52:EA:B1:D7:F7:81:42:5A:1A:51:4C:07:D2:71:F7:04:43
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:ba:1a:18:30:b6:bc:a1:f0:e4:43:69:05:ad:81:7d:fd:
         82:01:0c:d8:c2:90:db:4a:5d:01:6d:ac:eb:fa:01:f2:0b:8b:
         89:c4:b2:01:e1:14:0e:99:93:f2:77:e8:5c:66:74:9b:be:04:
         5e:be:1b:09:51:e2:d5:0e:8e:40:7a:75:c8:db:59:52:05:b1:
         9f:86:e2:e2:5f:46:a9:b0:16:9c:20:30:d8:98:7a:68:44:85:
         93:45:24:75:db:97:7a:9a:15:15:2f:a7:57:9e:bd:39:1b:8e:
         c8:2b:83:ab:71:bf:25:83:d9:7f:1c:6b:0e:d0:20:45:1e:27:
         7d:06:80:63:91:df:f6:78:b6:49:b3:c2:07:8a:a3:f1:66:c5:
         72:27:aa:25:b6:36:92:55:2d:ac:37:3c:88:8e:0d:4a:17:d8:
         ca:4e:aa:de:6f:1c:4b:8a:7d:30:a3:ed:94:f2:8d:00:42:fd:
         a5:98:22:14:74:9f:de:0e:cb:65:61:d8:17:e1:00:0d:11:92:
         6b:87:78:41:b7:55:5e:df:a9:b8:46:07:63:51:c6:bb:5f:d9:
         12:72:a2:41:63:4d:62:d8:f3:9c:73:76:8d:99:d4:bd:b6:bc:
         14:e7:a8:63:e7:14:f8:f3:73:03:d9:3e:31:9c:cf:b2:02:a0:
         30:30:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:42:45 2025 by rpki-client