Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File:                     9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier:          KkYHSIL4VYfmkzHpwzs9TlFaAnxKoAHv0Bv6mXPbn8A=
Subject key identifier:   32:0C:23:F5:D3:A8:CA:62:CC:FE:79:C8:D9:B2:3D:60:BC:68:F1:73
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer:       /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial:       0D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number:          0CF5
Signing time:             Tue 04 Nov 2025 18:10:23 +0000
Manifest this update:     Tue 04 Nov 2025 18:10:22 +0000
Manifest next update:     Tue 11 Nov 2025 18:10:22 +0000
Files and hashes:         1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: 65PWwrSe4/SvD905ViKpxJJlY1oZh/6lHX4dLWa6Xmk=)
                          2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=)
                          3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=)
                          4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=)
                          5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
                          rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
        Validity
            Not Before: Nov  4 18:10:22 2025 GMT
            Not After : Nov 11 18:10:22 2025 GMT
        Subject: CN=690a418e-a10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:f0:94:df:12:ae:1f:d9:b0:d2:5d:d2:72:
                    48:a8:1f:d5:78:a4:45:22:c0:32:9b:f5:eb:f9:44:
                    90:7f:b7:18:3e:8f:7e:74:a0:36:f2:b5:ee:b1:ed:
                    95:68:cb:ab:57:dc:8d:3c:1a:3b:d7:8e:eb:06:fa:
                    a6:79:e0:c5:30:9d:df:75:c8:63:b0:60:9f:ed:36:
                    9c:e8:71:9a:53:d7:dd:dd:23:ee:8f:da:57:9a:b3:
                    e9:f6:24:06:cf:1d:de:a2:b1:18:ae:c6:db:6d:bc:
                    23:95:3e:90:22:b7:17:d3:4a:0d:77:2e:92:f2:7b:
                    65:34:47:23:05:17:73:25:26:a0:7c:3b:92:de:87:
                    d1:cf:b0:41:a9:b2:01:f9:77:32:48:a1:bb:46:9c:
                    8d:dc:d8:89:dc:9e:1c:e6:ca:6c:12:0c:b2:77:09:
                    54:40:10:08:1c:0d:aa:92:a1:bc:b2:32:30:f4:b1:
                    83:88:40:dc:2f:d9:30:02:c9:14:ab:71:27:4b:11:
                    05:1f:da:f6:d8:62:98:07:57:72:ed:ad:10:42:25:
                    77:f5:bd:3f:0b:b4:59:a7:66:4b:94:28:36:14:a5:
                    10:1f:ab:1f:d7:d6:11:1d:e3:6d:ba:21:1f:c0:f2:
                    66:3c:0a:6f:a1:6e:7b:2f:2f:ee:86:23:9f:d7:41:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:23:F5:D3:A8:CA:62:CC:FE:79:C8:D9:B2:3D:60:BC:68:F1:73
            X509v3 Authority Key Identifier:
                keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:5c:02:ba:b2:d5:a6:04:b7:47:5f:37:09:de:19:ee:4d:
         3e:9b:02:00:14:22:5d:7b:8c:3a:48:06:f0:4e:06:48:21:72:
         3a:d2:c4:7f:13:b3:56:b3:62:a1:25:c6:85:f0:36:e5:89:a2:
         21:fc:d2:c0:a3:e9:a8:3e:4b:68:b3:cb:f2:6c:64:52:3c:1c:
         6b:dc:fd:20:52:8e:3a:6f:d8:50:32:2d:e1:fc:b9:44:d9:e4:
         4b:96:c6:c7:70:c5:4d:77:d0:6e:2f:f7:cf:77:ae:e9:f1:14:
         38:bb:b7:9c:8d:41:3c:8c:e8:4a:01:d3:d7:d5:13:94:b3:8b:
         f1:fc:8d:6b:46:a1:27:51:87:fc:2a:ba:ef:1e:0f:bf:3d:b7:
         f0:55:47:ae:4b:60:e6:f1:e1:ad:eb:fb:47:ed:0c:9d:66:37:
         66:f9:3d:67:38:05:8a:39:1d:a8:e1:60:55:d9:a6:c1:c1:38:
         a0:62:26:2c:b9:bc:f6:2a:b9:18:a2:fa:18:e1:73:a5:2c:9d:
         4c:3b:c1:63:89:ab:ab:4b:de:f0:7f:7d:5e:c0:1a:5f:d5:06:
         bc:af:44:40:b6:5c:4b:62:aa:04:4a:9d:d6:89:cc:9f:2f:10:
         30:93:a9:e7:e4:e6:aa:01:86:0f:4b:d8:98:1c:d1:61:30:1e:
         9a:92:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:24:47 2025 by rpki-client