Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          PC2JgE2HN89hfgo3I4rdS/6TE+0uzi7PqrX9tH4eLU4=
Subject key identifier:   EF:F9:8A:FA:D9:42:F7:81:5F:95:50:8B:71:C5:8C:48:9F:05:F1:84
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          012E
Signing time:             Wed 05 Nov 2025 04:45:21 +0000
Manifest this update:     Wed 05 Nov 2025 04:45:20 +0000
Manifest next update:     Wed 12 Nov 2025 04:45:20 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: Wie37Q5gUEqHa2pZhJhH+4zHIB7+CQu7FPW36MF5ZJc=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Nov  5 04:45:20 2025 GMT
            Not After : Nov 12 04:45:20 2025 GMT
        Subject: CN=690ad661-bf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:7a:e7:93:44:1f:4b:54:7b:6c:61:02:ad:
                    36:03:a7:e5:63:7f:1e:e8:2f:c0:b2:8c:4b:ca:37:
                    73:da:61:80:91:c0:3d:06:d8:6e:76:17:e8:52:c1:
                    f5:eb:db:6f:0e:23:45:44:9e:7d:71:97:57:37:0c:
                    0d:d0:88:56:8d:42:59:d5:61:b2:d0:9f:21:53:11:
                    d5:29:69:94:80:70:44:16:53:d1:07:a8:87:22:40:
                    c2:5c:28:f9:e0:3f:04:67:77:d0:bb:aa:7a:04:7a:
                    f4:b7:8c:19:5f:c5:f6:96:fd:09:7c:8d:8b:4f:52:
                    95:f4:af:1f:16:48:88:c5:73:13:dd:64:83:27:b7:
                    94:09:42:74:73:44:da:a5:ab:23:a3:36:5b:bd:f2:
                    90:55:b7:b4:06:e5:dd:e5:81:d8:e7:89:12:b5:56:
                    39:be:96:83:96:c7:d9:95:ab:7b:2a:a8:46:cb:16:
                    cd:52:24:80:4e:f3:d8:83:00:97:08:b1:86:9a:79:
                    3a:68:be:93:76:7e:12:6a:c7:1d:b7:43:bc:82:05:
                    2c:e9:70:15:07:6e:00:b2:d4:d5:f8:1c:48:ae:b4:
                    5f:43:04:2f:60:8a:c0:df:0f:b6:12:45:e7:f8:35:
                    5c:aa:33:1e:f1:be:89:ed:ee:1f:a5:e0:0f:aa:ca:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:8A:FA:D9:42:F7:81:5F:95:50:8B:71:C5:8C:48:9F:05:F1:84
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:d9:3d:95:d6:44:7e:a9:6a:78:b7:d5:a6:46:e5:12:7e:
         45:a5:51:5f:94:23:44:2f:a2:09:0a:34:cd:dd:a6:f3:03:8d:
         12:9f:58:35:d5:77:d3:55:e7:f6:04:d9:78:18:ff:48:ed:f3:
         8e:b8:34:f0:88:18:3a:2e:85:5c:1b:dd:a1:48:54:ba:db:09:
         1f:13:70:82:4e:a7:02:27:6d:3d:ff:55:dc:16:a6:65:3d:bc:
         87:26:c4:ef:bd:27:a4:36:d2:1f:5c:3e:32:90:e7:2d:d9:e1:
         e7:f4:5a:30:fc:14:7d:a5:43:5a:8a:c5:9a:8b:32:7e:6a:66:
         94:bf:38:48:76:c3:74:87:54:f4:06:37:3b:41:cd:95:92:78:
         96:71:6e:de:9e:6d:f8:af:6c:3b:0b:92:60:12:df:24:8e:c7:
         74:09:a7:31:f4:bf:42:7c:7a:20:e4:e8:b4:1b:49:56:5c:67:
         da:56:5b:22:71:a7:b5:78:61:6d:dd:f3:f7:a3:1f:f2:eb:dc:
         8b:60:65:e8:58:38:29:63:cb:d1:6f:01:9d:ac:41:49:58:01:
         8d:7b:34:a5:ce:7c:35:e4:69:b6:ac:34:f8:82:86:79:04:00:
         e3:e9:87:e0:84:19:a9:81:2c:ca:1a:e8:28:a2:b3:56:3a:32:
         cf:cf:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:21 2025 by rpki-client