Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File:                     iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier:          l4+Xktd7zI1ufQ+cGVWbu7jwi9z6A3wP1Ve4CwQYQ+M=
Subject key identifier:   E3:2B:11:70:40:04:8D:F0:9C:0D:8F:84:2F:55:46:70:DE:22:D1:CD
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer:       /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial:       0863
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number:          083C
Signing time:             Tue 04 Nov 2025 16:02:39 +0000
Manifest this update:     Tue 04 Nov 2025 16:02:39 +0000
Manifest next update:     Tue 11 Nov 2025 16:02:39 +0000
Files and hashes:         1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: 26+/PQvuh/BsCo5GxVG3wFka9yy7L3lCgPSUrlY7HXk=)
                          2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=)
                          3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
        Validity
            Not Before: Nov  4 16:02:39 2025 GMT
            Not After : Nov 11 16:02:39 2025 GMT
        Subject: CN=690a239f-0b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:40:b5:7e:23:05:05:8d:e8:39:1c:bd:35:
                    03:c2:b6:3a:0b:6a:39:0d:dd:d6:3b:21:40:4f:14:
                    67:e7:31:22:ec:64:62:92:f1:ea:90:be:f0:67:3e:
                    f0:1f:f0:6f:3a:1d:36:4a:e7:67:4d:e4:42:63:0c:
                    08:48:0f:2a:bf:30:c4:a3:22:bc:30:8c:0a:4b:50:
                    6c:c2:c3:a9:3e:b6:db:85:ab:5e:5e:60:a4:f8:27:
                    68:11:a8:e8:50:fe:de:57:6a:bc:b9:dd:17:2e:09:
                    6f:a6:ee:0e:f4:6a:37:74:78:c1:a8:b5:65:6e:ed:
                    81:44:9a:46:67:7b:cd:73:f2:14:98:04:45:6e:e8:
                    5c:6c:20:1b:ad:ef:05:59:3b:47:47:a1:ea:0f:6d:
                    47:37:7d:b4:06:eb:f9:ad:10:4c:f1:9e:fb:16:e2:
                    bb:94:e5:9e:4f:9e:5b:ef:bd:ee:71:cf:00:0c:45:
                    87:ac:99:72:cc:a5:cf:32:4e:e6:2d:e9:3c:6b:f1:
                    7d:f0:2a:50:77:01:de:12:99:a6:31:55:a1:3e:76:
                    45:44:98:ec:2b:4c:bd:98:b4:d6:2d:94:0c:05:aa:
                    cb:15:75:84:91:ce:9c:c7:92:0a:a4:6e:84:ed:1e:
                    d4:eb:65:1a:61:e9:b5:2e:f0:4a:4d:0a:58:31:28:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:11:70:40:04:8D:F0:9C:0D:8F:84:2F:55:46:70:DE:22:D1:CD
            X509v3 Authority Key Identifier:
                keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:e6:74:af:46:40:cf:b8:b9:97:63:d9:7b:af:8d:24:31:
         97:f8:ff:85:9b:7a:6f:ad:c2:7b:68:75:79:b2:68:5c:47:17:
         99:6d:5e:51:40:d4:e3:3a:e6:05:ae:23:5b:44:a2:8b:ec:02:
         ea:6e:50:2a:a3:14:52:fa:81:14:33:55:fa:c7:05:eb:b2:16:
         97:4c:9e:53:18:4f:f8:ba:5e:48:28:bb:a7:1b:55:8d:c7:5d:
         3a:8c:42:32:42:a0:e5:b0:05:51:f4:b6:29:20:9e:65:b0:7e:
         2d:1e:b1:a9:94:6a:e9:06:48:33:c1:b3:25:62:52:4d:83:96:
         17:fc:be:a1:54:97:7e:76:09:09:d2:4b:f5:92:95:8f:62:ad:
         88:de:31:e4:47:d6:5e:f5:2e:e6:0a:55:73:38:95:b1:29:86:
         58:8c:d2:17:9c:cc:77:e3:cf:02:17:fe:19:fe:6a:7e:c6:85:
         23:20:d1:21:88:b5:36:89:49:a5:18:a8:93:c6:b9:2f:cc:0c:
         1a:f6:ef:9e:46:52:66:49:6a:63:3b:f9:61:87:5a:07:e3:17:
         85:ab:8c:5c:08:fb:0a:37:3d:cd:c5:7c:cb:c2:76:06:c9:5c:
         ef:5c:e6:8c:77:62:d6:10:6e:6b:57:51:66:57:67:cc:2d:f5:
         d4:5d:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:15 2025 by rpki-client