Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File:                     C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier:          SW2EuKC/pkJTi/4Lmytz1RDDjtLlxqJEYFUk6K/sSpk=
Subject key identifier:   A4:74:E8:4F:1E:21:B7:F2:97:A0:AC:E4:55:87:29:E7:37:74:3D:C3
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       6DA178F6FB7EC475B7AF5E4E49BAEDFB750B3A46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number:          0194
Signing time:             Thu 23 Oct 2025 21:09:11 +0000
Manifest this update:     Thu 23 Oct 2025 21:04:11 +0000
Manifest next update:     Sat 25 Oct 2025 00:08:11 +0000
Files and hashes:         1: 3130332e32352e3132342e302f32342d3234203d3e20323134303235.roa (hash: A7+uqKWRKehgMh2v+Hl0ZrUAOPvByGRYLcbE3daaXQo=)
                          2: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=)
                          3: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=)
                          4: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=)
                          5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: GkO3XDjIu6eFFSUq2+T2ygZGR3jCZD1VkzoZeLvaYbY=)
                          6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a1:78:f6:fb:7e:c4:75:b7:af:5e:4e:49:ba:ed:fb:75:0b:3a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Oct 23 21:04:11 2025 GMT
            Not After : Oct 25 00:08:11 2025 GMT
        Subject: CN=A474E84F1E21B7F297A0ACE4558729E737743DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:fd:0c:bd:d8:6c:1e:19:2f:2a:f6:e6:12:
                    e8:a7:64:b2:87:08:0f:66:3d:d5:11:8f:9b:f9:38:
                    4e:3f:0d:de:a9:9f:52:c6:85:df:b9:34:60:67:d3:
                    f3:77:37:40:79:93:25:66:79:31:13:68:27:08:34:
                    f4:82:0c:df:72:65:8e:13:36:12:11:53:7f:aa:c7:
                    a9:1d:ed:75:4b:8b:f4:cb:3a:cb:a0:3d:15:08:cb:
                    e9:92:c2:05:0c:cf:4c:df:ff:68:67:2b:7b:43:79:
                    1a:a7:51:cd:22:95:93:76:73:e9:0d:66:bd:a9:16:
                    ee:b7:ce:f5:ff:63:6c:dc:06:1d:24:7d:32:50:96:
                    3f:d6:40:f7:9b:40:8c:fe:b9:1e:48:26:99:dd:7f:
                    24:81:a5:11:04:75:bb:88:6b:ab:76:49:b1:98:b0:
                    4b:47:e3:0a:aa:94:6c:47:01:e6:5a:ff:0b:78:24:
                    af:be:6e:71:65:20:e5:0a:80:3d:a7:f8:a8:f5:ed:
                    6a:e2:01:f7:88:1e:d9:38:d3:0f:96:26:a6:86:05:
                    ab:ff:b0:f1:70:de:5a:58:63:2c:66:44:b0:62:d7:
                    a1:55:05:3d:85:a9:52:f7:33:f0:d8:ea:5b:2e:59:
                    41:6e:62:74:15:b2:d8:bb:55:10:79:68:f3:b3:d1:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:E8:4F:1E:21:B7:F2:97:A0:AC:E4:55:87:29:E7:37:74:3D:C3
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:80:eb:3a:e7:b7:ff:88:1a:5a:00:76:68:da:14:0a:33:
         4a:c4:6a:00:36:c0:30:3a:43:4e:36:1e:ee:a1:3e:bd:12:90:
         00:65:46:8c:46:71:50:e8:9a:29:f2:e1:1b:76:54:7e:f7:18:
         a4:45:09:c6:8d:0f:7e:36:f3:c1:2d:b5:7a:5a:bf:d3:4d:0c:
         eb:a7:f1:43:67:21:a0:91:57:81:a9:ed:af:0e:3c:10:a7:5a:
         9c:20:ce:77:b8:50:0d:c3:42:cf:15:56:3e:55:09:1e:1a:2f:
         10:98:06:25:93:f5:a6:6d:cb:7f:be:d7:e2:50:d4:12:c8:41:
         16:80:14:94:f8:c5:5c:da:b2:a9:d0:79:cc:35:48:af:2e:54:
         9d:e1:d9:c2:ff:7f:e9:9c:49:e8:49:15:3e:7b:13:d0:f6:98:
         9b:12:9f:33:31:06:99:f0:3a:ca:0d:51:ce:59:01:ad:da:b3:
         fd:fc:5a:db:9f:ab:cb:59:dd:d6:3c:db:71:f5:f0:94:8e:21:
         5c:23:0a:86:0a:75:20:1d:08:81:46:ac:8e:c9:a9:13:eb:36:
         86:d6:e3:46:f7:a6:ac:30:fc:8b:7c:a1:27:01:53:29:f4:aa:
         e9:b5:58:b0:f8:d4:cd:fe:87:34:d0:50:4b:21:82:73:95:c9:
         31:3e:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:14:32 2025 by rpki-client