Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File:                     U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier:          bKyYHQbYxMA5gCb431/YgiDzKJVl7dL8MR/wYv//Na4=
Subject key identifier:   F9:38:7F:27:5A:E0:DB:93:F1:1C:2C:35:B9:46:8B:9C:62:12:E0:BB
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer:       /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial:       0962
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number:          093C
Signing time:             Thu 18 Sep 2025 20:34:05 +0000
Manifest this update:     Thu 18 Sep 2025 20:34:05 +0000
Manifest next update:     Thu 25 Sep 2025 20:34:05 +0000
Files and hashes:         1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: c5MajGAiANGNYVUdNbMWK/KhYa5oISwZIRZVnblWn30=)
                          2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: Vfwia7raXc8HM+W4sTD1l1zEst/3lc27hYLfy1Dcr+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
                          rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
        Validity
            Not Before: Sep 18 20:34:05 2025 GMT
            Not After : Sep 25 20:34:05 2025 GMT
        Subject: CN=68cc6cbd-ec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:b3:c9:b0:db:ab:b5:6c:97:33:48:5f:2f:
                    b1:c7:75:af:3a:b0:e8:05:05:86:a1:ef:77:57:b9:
                    0d:87:ff:05:fb:b9:8d:3c:fc:26:b6:10:16:c1:52:
                    36:db:fb:5e:40:06:7a:d9:e8:fa:03:6b:ca:2d:67:
                    29:25:b6:d5:92:42:22:09:55:c1:a3:12:f3:2e:4b:
                    ca:25:f4:a6:60:f9:cf:45:4b:24:01:6f:56:52:47:
                    eb:54:81:4b:5a:63:11:0e:76:87:3b:f5:77:bd:f4:
                    6e:74:da:f5:86:58:a3:46:06:20:c5:65:fc:87:9f:
                    90:f8:90:f4:f1:1f:2a:3e:a1:7f:4f:56:80:1e:b4:
                    33:28:14:4d:39:8d:f5:42:24:49:45:92:93:31:42:
                    ee:8c:99:b5:73:4c:17:82:d1:fa:99:4c:af:82:c8:
                    f3:8e:5f:4d:31:20:56:10:1d:56:54:0f:5d:77:a5:
                    50:e0:bb:02:b5:70:86:8e:9a:94:f8:e0:4b:6d:84:
                    a1:a4:15:f8:64:ee:c8:4b:ba:a1:da:00:33:7d:6d:
                    08:79:75:49:a9:60:56:36:0c:72:c4:d6:e8:d5:59:
                    7c:4a:f6:ff:b3:d5:ab:31:af:7c:e9:b2:00:d4:36:
                    72:7f:99:46:e8:a7:9a:ea:b3:07:4c:60:54:bd:09:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:7F:27:5A:E0:DB:93:F1:1C:2C:35:B9:46:8B:9C:62:12:E0:BB
            X509v3 Authority Key Identifier:
                keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3f:40:e0:da:27:b5:af:fb:3c:ab:8a:d1:1e:9e:98:dc:94:
         8c:50:10:b8:7d:33:e5:36:b5:ef:4b:6a:4f:e7:e1:b3:9d:2c:
         7d:65:26:4c:e1:8c:fb:60:f9:ef:14:f3:69:c5:20:ca:4e:7a:
         d2:39:d9:88:26:d2:13:04:ee:fa:5f:f5:32:ba:5c:55:ba:af:
         fe:44:3e:6c:b0:4d:a3:b2:5f:9e:31:ad:84:ef:a1:75:26:18:
         ad:e7:85:7c:eb:e3:a8:01:db:c2:40:cb:24:0e:ca:2a:65:11:
         f1:02:b2:71:5b:96:2b:66:54:71:25:b8:14:a6:73:51:a0:b7:
         6c:52:c3:62:57:ca:9e:56:21:56:ec:38:84:15:27:9c:7c:35:
         28:d9:d2:18:63:f8:a8:f6:0a:1e:9d:1d:f3:a0:96:9f:03:78:
         b5:c9:09:9d:17:8e:70:fa:8e:00:d0:ad:f8:4a:a7:bd:9a:59:
         74:48:c3:b7:16:bc:ca:fb:38:15:e0:5c:6c:41:1e:59:fd:c1:
         1c:d5:e1:08:5b:f5:8c:e2:c2:25:88:2c:28:21:b7:9d:5c:31:
         62:da:bb:3f:b5:b2:55:7d:72:a0:92:51:7a:1f:34:a7:e1:a7:
         3a:a2:b8:30:c1:9b:8a:53:7e:2f:3f:a1:5b:85:22:c4:da:c5:
         6d:cb:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:01:26 2025 by rpki-client