Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          5E6q/czJkxKv8WyM+6dXzYJc2O5B82UjmtrPSQl+a7I=
Subject key identifier:   1F:FF:41:FD:E1:66:BE:95:2C:48:DF:B3:B9:7A:2B:45:9B:FE:80:49
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          F9
Signing time:             Mon 03 Nov 2025 05:09:19 +0000
Manifest this update:     Mon 03 Nov 2025 05:09:19 +0000
Manifest next update:     Mon 10 Nov 2025 05:09:19 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: 8s9eG31HNs6SH7U6OcrycfxLmZaaYS32AgqrmlV8z00=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: Cmiqcg21C+LyhA2gAp/ZQEO6k8THpOIRSGDyZ2gTNpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552, serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: Nov  3 05:09:19 2025 GMT
            Not After : Nov 10 05:09:19 2025 GMT
        Subject: CN=690838ff-059c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:5e:04:c0:88:46:5d:55:67:13:6a:fd:eb:
                    fe:cd:0b:91:5c:74:b0:fc:3e:51:4e:23:69:0c:be:
                    25:5f:4b:2f:ce:2c:69:40:78:12:25:68:73:29:39:
                    3d:c6:6f:ae:af:c6:84:aa:85:16:d2:9e:9d:a0:7c:
                    c9:b6:77:ec:7e:20:13:87:5b:d4:ac:10:4e:a1:72:
                    42:00:fd:7a:13:76:22:8b:a3:e8:2a:c5:c7:b1:73:
                    74:15:71:5b:9c:38:3b:43:0b:53:38:01:18:a4:9d:
                    61:21:cf:6c:c8:03:de:33:31:eb:a9:54:a8:a9:73:
                    6c:9c:f3:10:ce:5f:a8:8e:72:05:af:0b:02:c1:2b:
                    24:75:bf:60:94:4f:5f:aa:2d:4d:5a:d5:af:d5:92:
                    d4:83:94:a7:df:0a:c0:f4:b7:2d:e7:89:67:88:f9:
                    22:63:0d:e9:43:de:ee:06:21:21:5a:8d:c4:ba:8d:
                    f7:a9:f4:a8:04:72:bd:71:97:df:a1:c2:5e:39:ca:
                    5a:f0:ec:f1:d4:f4:c2:5c:97:9a:29:73:14:36:6e:
                    a6:da:d1:ba:5c:8a:de:54:e1:bc:d1:9e:05:e0:4f:
                    67:37:ac:dd:b1:cb:32:93:59:51:8b:91:65:1a:ad:
                    ea:b6:0f:1f:52:78:c5:82:86:43:d0:b1:5f:e3:86:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:41:FD:E1:66:BE:95:2C:48:DF:B3:B9:7A:2B:45:9B:FE:80:49
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:63:e8:c7:e4:cd:0b:95:d2:d7:bc:f8:92:99:1b:d7:04:
         d1:26:1a:f8:43:84:1e:f4:e4:3d:80:cb:82:b6:f0:82:a9:82:
         c0:7a:40:70:89:b2:7c:ed:89:df:ab:c0:e5:46:28:08:66:ce:
         26:9d:92:ee:e9:0e:fd:02:e4:07:bb:06:e6:2b:39:95:8b:59:
         5a:67:65:fe:e5:f3:9e:6b:16:a0:8e:ff:78:ed:fb:3b:bb:07:
         b0:7a:3d:fc:ee:a1:8e:52:a2:02:03:05:c5:03:7a:da:e1:22:
         b3:4e:0a:08:db:32:95:58:94:49:d4:f7:8b:b5:1b:c4:92:ba:
         11:0b:97:30:39:51:9c:06:c8:07:2e:3a:f2:51:92:ce:5f:d3:
         57:06:1d:60:e2:f2:42:e3:25:ab:bf:ae:75:75:53:b4:85:e7:
         c7:14:c8:c2:8d:75:05:77:4d:34:fe:04:48:ab:41:54:41:ad:
         20:9b:28:04:c5:dd:b2:df:66:86:9e:af:49:93:de:79:b1:fa:
         93:4f:1b:66:c5:6e:c6:c2:4f:16:78:d4:df:dd:42:ab:b6:ad:
         d7:d8:4f:55:e9:d0:b5:06:44:60:b2:9d:2c:20:77:27:7e:6d:
         df:63:ea:3f:3d:8c:50:46:24:2d:fb:f5:76:66:6f:37:ed:67:
         7c:64:74:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM1NTIxMTAvBgNVBAUTKDlCNTE2QzA1MTY2MjlFRkIxMzhFQjBFNjg1QjA1QkEw
MEVCRjRFN0YwHhcNMjUxMTAzMDUwOTE5WhcNMjUxMTEwMDUwOTE5WjAYMRYwFAYD
VQQDEw02OTA4MzhmZi0wNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBdeBMCIRl1VZxNq/ev+zQuRXHSw/D5RTiNpDL4lX0svzixpQHgSJWhzKTk9
xm+ur8aEqoUW0p6doHzJtnfsfiATh1vUrBBOoXJCAP16E3Yii6PoKsXHsXN0FXFb
nDg7QwtTOAEYpJ1hIc9syAPeMzHrqVSoqXNsnPMQzl+ojnIFrwsCwSskdb9glE9f
qi1NWtWv1ZLUg5Sn3wrA9Lct54lniPkiYw3pQ97uBiEhWo3Euo33qfSoBHK9cZff
ocJeOcpa8Ozx1PTCXJeaKXMUNm6m2tG6XIreVOG80Z4F4E9nN6zdscsyk1lRi5Fl
Gq3qtg8fUnjFgoZD0LFf44bkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB//Qf3h
Zr6VLEjfs7l6K0Wb/oBJMB8GA1UdIwQYMBaAFJtRbAUWYp77E46w5oWwW6AOv05/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzU1Mi80MjEyMTU4NDNB
ODIxMUVGQTI5NTFDNkZDNEY5QUUwMi9tMUZzQlJaaW52c1RqckRtaGJCYm9BNl9U
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20xRnNCUlppbnZzVGpyRG1oYkJib0E2X1RuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzU1Mi80MjEyMTU4NDNBODIxMUVGQTI5NTFDNkZDNEY5QUUwMi9tMUZzQlJaaW52
c1RqckRtaGJCYm9BNl9UbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLE2Pox+TNC5XS17z4kpkb1wTRJhr4Q4Qe9OQ9gMuCtvCCqYLAekBw
ibJ87Ynfq8DlRigIZs4mnZLu6Q79AuQHuwbmKzmVi1laZ2X+5fOeaxagjv947fs7
uwewej387qGOUqICAwXFA3ra4SKzTgoI2zKVWJRJ1PeLtRvEkroRC5cwOVGcBsgH
LjryUZLOX9NXBh1g4vJC4yWrv651dVO0hefHFMjCjXUFd000/gRIq0FUQa0gmygE
xd2y32aGnq9Jk955sfqTTxtmxW7Gwk8WeNTf3UKrtq3X2E9V6dC1BkRgsp0sIHcn
fm3fY+o/PYxQRiQt+/V2Zm837Wd8ZHTs
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:07 2025 by rpki-client