Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File:                     26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier:          yfFUj8rkHJBGIrEOizUplS60JdiRF97+OABB3qfWdiU=
Subject key identifier:   9F:05:05:32:56:16:C9:AD:DC:26:29:BA:74:63:E0:80:BE:09:A8:F9
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       03BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number:          03A9
Signing time:             Wed 05 Nov 2025 00:50:19 +0000
Manifest this update:     Wed 05 Nov 2025 00:50:18 +0000
Manifest next update:     Wed 12 Nov 2025 00:50:18 +0000
Files and hashes:         1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: 48b/ryGYCURFKWQUMn+CP8YpvBnG1U4bu71nFqLfA5o=)
                          2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: EwarSE7FdSsWxJK/6fA7laQx/m5iykaPdE8HA2hirxU=)
                          3: 422287F0D30511EE8753D541C4F9AE02.roa (hash: bJTC0uNpCv3Td2qGJj2W7jYKPuVi7cZig3G6jfTfNJs=)
                          4: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: Xtx2mhfHixey8LLZfgW1KcyW2Mk8jnrUzWyvxzziIro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: Nov  5 00:50:18 2025 GMT
            Not After : Nov 12 00:50:18 2025 GMT
        Subject: CN=690a9f4a-00e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:84:ee:5f:81:69:c6:dd:7c:17:e8:65:11:
                    13:a5:d0:aa:e1:49:1d:0e:8d:0b:65:37:ae:b4:3d:
                    b9:86:3b:59:03:8c:58:61:6a:37:8d:29:27:48:7f:
                    f0:73:26:20:17:41:28:ce:30:6e:c1:33:d7:b5:49:
                    4c:ed:10:d0:c2:db:5b:b2:eb:1e:96:af:33:8d:2e:
                    16:d8:c0:49:1e:51:d7:ac:91:10:57:fb:85:7d:d4:
                    87:5f:3a:5a:ca:14:a0:ab:00:01:ba:f9:aa:df:22:
                    a8:ff:9e:1d:09:cb:22:18:7d:39:24:46:3b:8a:4f:
                    d2:15:38:a0:c0:d6:98:02:0a:45:70:b4:ff:c2:8f:
                    47:e0:11:04:b5:cf:76:38:b4:23:4d:10:b1:8b:58:
                    d9:f8:f6:1f:35:2c:0c:26:c7:4e:df:7a:1a:7b:07:
                    f9:ea:99:41:ad:5d:ff:65:67:12:74:a8:76:a8:69:
                    73:a9:0b:4c:5c:30:10:37:0a:fc:a2:56:15:06:46:
                    f0:f5:20:15:d5:c9:8f:ed:e5:fe:65:68:48:ec:57:
                    61:58:9e:af:6f:e7:65:86:f9:54:43:20:02:a6:74:
                    d4:28:1a:9d:62:08:97:c1:67:c9:b1:ec:8e:10:4a:
                    b9:06:ea:56:9f:30:23:3c:f7:f6:16:a2:33:f2:10:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:05:05:32:56:16:C9:AD:DC:26:29:BA:74:63:E0:80:BE:09:A8:F9
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:0d:1a:e4:42:a2:72:7c:c8:48:e6:99:03:f1:c3:db:85:
         3a:12:82:c2:1b:af:09:bd:cb:b4:f3:44:80:16:ed:18:f9:e9:
         3c:1c:70:c3:58:f3:3c:37:1c:93:0d:4d:03:ef:68:6e:c7:69:
         ad:c7:b2:93:85:26:9c:21:0d:a7:99:9f:ed:4d:a0:99:18:e2:
         e4:e8:5a:2d:28:a0:b6:c9:8d:42:df:70:44:3d:3c:76:a1:9e:
         f6:e6:ac:ae:b7:cf:83:d0:56:78:90:59:02:25:39:7e:92:03:
         64:82:86:e6:b0:67:5f:1b:58:88:19:c6:68:5d:b8:6d:da:14:
         f4:e6:4c:d6:54:c7:67:f3:d6:d9:20:e2:d2:04:c2:ab:57:9f:
         76:05:dc:ab:8e:1d:8d:bd:36:48:c2:6a:15:08:da:ea:78:e8:
         0c:4e:1e:86:6c:70:4e:6c:f8:10:ac:eb:75:71:52:59:d8:c4:
         f6:2c:a0:fc:f8:64:2d:a2:05:c9:c5:a5:c6:d5:46:b8:56:1b:
         c2:a1:b7:cc:1f:3f:da:b4:44:0f:7c:8f:6c:7a:7a:eb:49:37:
         23:b7:95:db:cb:a4:14:ad:99:56:17:24:4b:4f:0b:8d:7b:aa:
         19:59:d3:9d:64:59:4f:a2:7a:42:16:8a:1f:e3:2f:92:bf:d0:
         58:d8:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:37 2025 by rpki-client