Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
File:                     9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json)
Hash identifier:          3ch6kg64NHcM5nKKeSY/CxkOWlvB/zMm5tVweso1L/g=
Subject key identifier:   15:53:20:13:F0:68:0E:D0:5F:CD:CF:47:31:D0:53:CE:FA:DA:8E:36
Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61
Certificate issuer:       /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
Manifest number:          C4
Signing time:             Mon 03 Nov 2025 05:51:57 +0000
Manifest this update:     Mon 03 Nov 2025 05:51:56 +0000
Manifest next update:     Mon 10 Nov 2025 05:51:56 +0000
Files and hashes:         1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: xXeNIe1T4HYih+NwT3Kiocv4R+jzV4fmQHZEpQrFcF0=)
                          2: 3219F778803B11F0BAF8A92DC4F9AE02.roa (hash: Pw3ZpzwkDkcgCL+3fi/F1AEnVJy3AaqJ7h1NuQZbu9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl
                          rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161
        Validity
            Not Before: Nov  3 05:51:56 2025 GMT
            Not After : Nov 10 05:51:56 2025 GMT
        Subject: CN=690842fc-149d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:02:cd:3c:75:42:2c:fb:7f:37:fa:f7:b8:
                    f2:92:d3:f6:a3:6e:e8:fd:bd:cc:c0:22:c3:cc:1d:
                    9a:01:a0:f4:d4:b3:6f:6a:a3:d6:3e:5a:bc:9c:c8:
                    89:e0:49:00:a3:26:43:ad:fc:2b:c7:c6:b2:7e:87:
                    7d:d2:74:d6:22:17:d9:02:85:01:67:c6:32:39:00:
                    ab:8b:fa:48:89:e5:b4:87:09:1c:de:7b:1f:04:95:
                    00:be:86:67:79:d0:ee:cf:37:8f:25:1a:5f:a8:57:
                    cb:6e:5c:c3:d1:1f:d7:51:dc:6a:13:02:d1:de:3a:
                    59:bb:e8:0a:0f:31:ec:18:9f:80:b9:f8:54:de:69:
                    70:34:1b:ef:90:81:a9:4b:58:53:84:9c:8d:99:4b:
                    25:52:35:91:33:aa:fb:63:2a:ad:62:e6:53:16:b0:
                    0f:33:5c:c3:8a:c7:d9:70:67:ad:e9:ad:e3:03:cb:
                    d9:29:d9:9d:59:56:0d:3d:09:b5:c1:17:ab:25:c7:
                    54:a1:80:a5:69:74:b8:0d:d7:9f:29:aa:00:78:ac:
                    ad:bf:29:bd:81:e4:72:6c:a3:ad:38:d1:f6:8c:36:
                    01:f2:df:b3:a7:f1:c3:d7:78:f8:3a:34:be:e5:c9:
                    dc:2c:1c:87:af:82:60:63:03:42:3e:bc:89:6c:15:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:20:13:F0:68:0E:D0:5F:CD:CF:47:31:D0:53:CE:FA:DA:8E:36
            X509v3 Authority Key Identifier:
                keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:be:0d:7b:04:68:04:b8:0c:25:b5:bf:d3:85:2b:c5:1a:89:
         c6:6b:9c:1d:fa:74:59:03:e1:2e:3a:33:46:c0:c1:3a:d3:96:
         3b:f6:22:42:19:7a:49:a3:16:6d:fb:a2:e3:23:fc:26:93:a5:
         45:79:2c:26:bb:a7:37:fe:e5:8a:0f:1b:cf:25:dc:db:5b:41:
         c9:83:6a:57:8b:bc:9c:eb:6a:77:df:c1:73:c8:f0:c1:b1:ec:
         62:1d:09:96:d4:69:89:84:58:c7:74:4f:69:56:90:ca:6d:0c:
         75:99:90:b1:6e:60:36:bc:82:5e:95:d1:4b:0e:fc:ed:51:fd:
         bf:a8:ab:df:53:3c:39:88:b9:5a:04:7a:4d:50:fa:db:57:8a:
         54:25:ee:6a:f4:77:b7:d9:eb:d1:84:b3:94:b1:7c:a0:0e:8b:
         6d:4d:78:0b:2a:a5:22:11:3d:f1:ed:29:5d:88:98:71:87:76:
         85:75:fc:cc:cd:e2:d8:ce:ca:12:a4:79:16:fc:97:d7:d8:20:
         e6:cf:3f:b7:19:f7:df:3d:40:82:9f:ff:54:de:eb:1a:fe:bb:
         ec:d7:48:af:55:c6:72:e8:bd:fc:3b:ec:a6:7b:34:98:2c:86:
         c6:71:9a:d6:f8:8e:df:6f:b9:99:81:80:f6:80:68:ee:51:6f:
         c5:84:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:03:41 2025 by rpki-client