Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          uL+n/rEhqq0ylsWg9qWupzKcVWmoqs2MIifbN2uopZs=
Subject key identifier:   15:B7:DC:19:54:E3:63:E1:B3:75:7F:DD:54:82:C6:03:C4:9F:74:98
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       0523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          0506
Signing time:             Mon 27 Oct 2025 00:46:34 +0000
Manifest this update:     Mon 27 Oct 2025 00:46:33 +0000
Manifest next update:     Mon 03 Nov 2025 00:46:33 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: FMpKQuPfNw8GlfGfe6YqqKzV660Tsqlu4/JeNmUsKAA=)
                          2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 00:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Oct 27 00:46:33 2025 GMT
            Not After : Nov  3 00:46:33 2025 GMT
        Subject: CN=68fec0e9-b4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:e8:ce:ea:2f:0d:b8:21:56:1b:fd:75:d6:
                    a2:f2:e6:a3:7d:52:45:fd:91:f3:0b:41:f2:45:87:
                    af:27:e2:08:aa:b2:55:49:39:0e:c8:47:2b:c6:f6:
                    e4:23:65:60:cd:b1:c9:a2:3a:e7:11:71:ee:a2:0b:
                    df:0b:5c:ff:48:e8:53:3e:f3:ff:82:2c:18:9b:a8:
                    2b:3e:aa:86:e5:56:45:ae:56:cb:65:be:4b:7e:8d:
                    4d:82:64:ee:43:99:ae:1f:ae:91:af:45:5f:f4:b6:
                    3c:05:ae:f3:8e:9a:75:ea:68:c3:eb:d1:ab:f3:9a:
                    45:f2:05:c5:5b:1c:cb:cd:be:d3:db:a6:1a:d7:a3:
                    09:c3:a6:6b:d9:cc:5a:f0:01:a2:08:55:a3:96:67:
                    21:db:e0:fa:6c:4b:28:f2:f3:72:e8:c4:40:2a:bc:
                    b5:af:e6:59:da:6e:16:8d:2e:26:98:ac:56:5e:1d:
                    4e:5e:1b:dc:9c:55:79:1b:33:ac:3f:37:8f:09:eb:
                    8f:91:71:0a:ac:33:0e:9d:c6:97:82:99:68:63:92:
                    18:ff:41:ef:1b:2c:ac:57:81:66:15:07:e8:1b:8e:
                    c8:ea:fc:4f:65:ef:c2:e8:7e:89:b1:8d:4b:a1:3e:
                    01:23:cd:42:59:57:9e:62:3a:ed:b4:13:32:e0:63:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B7:DC:19:54:E3:63:E1:B3:75:7F:DD:54:82:C6:03:C4:9F:74:98
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:37:9c:59:5a:a0:77:b1:c1:d1:e0:e0:63:02:1e:81:f1:a7:
         d1:16:18:b3:0e:c3:7a:71:83:54:31:ce:9a:55:4c:e4:2d:23:
         6b:1c:3f:6f:0d:1e:bd:c6:a8:21:fc:ae:6e:a5:49:29:ca:9a:
         3b:7e:86:3d:9b:04:e1:0c:c6:17:28:7c:77:b8:4e:49:5f:a5:
         3c:dd:f8:7b:b2:d1:f5:78:82:44:c3:f5:f3:23:da:cc:82:b9:
         2c:35:a7:12:46:31:d7:8c:bb:42:a2:a2:54:11:37:9e:b1:5f:
         06:59:b7:1e:59:c8:29:00:cc:a9:77:81:03:48:af:ff:88:42:
         c4:26:78:11:17:88:1c:97:36:ae:82:0e:d8:96:0b:93:87:cd:
         5e:52:9f:1f:f9:82:b3:71:dc:fc:59:bf:14:7e:3d:71:92:9b:
         9f:4f:5e:94:7c:cc:94:12:a6:83:ee:4f:0c:7d:fe:c0:ec:6f:
         38:6f:26:08:c4:13:7d:07:b6:fa:63:84:f9:dc:aa:fa:24:fa:
         fd:3d:2e:db:96:0a:77:69:34:00:cd:58:ee:87:59:9c:ae:58:
         36:ca:25:9d:e8:22:86:27:88:a3:10:72:23:90:c7:38:da:c3:
         35:c1:ed:07:c6:79:16:eb:36:2c:1b:b7:72:27:97:e2:5c:d1:
         d3:85:26:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:00:50 2025 by rpki-client