Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File:                     g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier:          Ij22CmodU72wZ36eOCjSCjMJjAyJCEbi/KVhhS8Nd8Q=
Subject key identifier:   FB:04:95:7F:A3:07:26:E1:4D:7E:C2:76:C9:40:CF:C8:7B:B8:E4:8F
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0EA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number:          0E9D
Signing time:             Sun 02 Nov 2025 17:42:32 +0000
Manifest this update:     Sun 02 Nov 2025 17:42:32 +0000
Manifest next update:     Sun 09 Nov 2025 17:42:32 +0000
Files and hashes:         1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: naza5D5iUCGhGob56TXDJrbouPdZwgoEg7zjHC6uJ/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
                          rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3748 (0xea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: Nov  2 17:42:32 2025 GMT
            Not After : Nov  9 17:42:32 2025 GMT
        Subject: CN=69079808-c8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:68:df:5e:7e:2c:bc:1a:f4:74:e2:56:c1:
                    48:e8:2d:a0:f6:d0:83:f3:1f:7c:ba:86:dd:3b:82:
                    9e:47:9d:9f:cc:69:fe:30:c1:0b:e4:2f:6a:21:fc:
                    c2:9c:10:17:65:47:42:f2:46:ec:db:b7:5d:82:13:
                    aa:7c:cd:27:d8:49:a5:4c:9b:a7:5d:5b:4b:13:e7:
                    1a:b0:a6:a4:c2:69:05:e6:ea:2f:b4:0f:0f:f9:92:
                    0e:1e:ea:1e:88:59:6c:ea:89:be:b7:8f:7c:c7:28:
                    1b:3e:6b:e9:84:89:77:a1:83:46:cf:13:f5:ad:01:
                    99:f3:6b:ff:08:bb:26:ac:c1:81:2f:55:5e:08:ef:
                    33:b2:00:ec:1a:7e:ba:fb:ac:fd:d2:4c:1b:70:fc:
                    9a:20:13:ea:1b:c0:e7:e6:5a:95:d6:56:1d:6b:fc:
                    21:4e:de:95:0e:e4:1d:a0:b9:c0:37:c8:01:df:a0:
                    33:19:24:db:00:0f:d6:d3:0f:f3:59:75:bb:95:27:
                    dd:81:72:11:9e:e6:74:1f:a1:57:23:66:bc:4c:6c:
                    cd:59:33:9d:d6:8e:ac:a9:65:c5:b2:8e:56:0a:32:
                    1d:8b:20:8d:3d:b0:05:22:d5:8b:65:30:c8:f8:ca:
                    b9:2d:cc:1e:0b:b2:72:51:de:38:d1:af:aa:3a:e0:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:95:7F:A3:07:26:E1:4D:7E:C2:76:C9:40:CF:C8:7B:B8:E4:8F
            X509v3 Authority Key Identifier:
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:ef:e0:99:98:69:45:e8:39:cf:16:c1:01:4a:79:0e:b1:
         6a:04:e5:31:02:22:92:f7:d2:b0:15:c4:0d:77:03:35:72:26:
         ae:74:ed:ae:fd:9a:c0:ab:e4:46:03:78:06:ec:81:61:f3:88:
         a7:e8:75:f5:28:7f:82:84:11:04:69:42:78:fb:4b:1b:4d:4a:
         ad:dc:f8:e8:32:2e:72:17:64:0a:88:f7:53:65:4f:6d:47:bb:
         e3:13:ac:28:68:33:9f:1b:bc:c2:0a:97:50:c7:55:37:02:b4:
         6c:08:16:95:ff:a1:5e:41:7f:43:b3:92:7f:61:2e:1e:50:e6:
         6f:a9:ec:9c:9d:b8:16:74:97:03:c8:d7:3f:be:51:b6:45:e8:
         8b:68:33:8b:cb:ac:45:17:e9:61:50:0a:38:10:2b:07:0e:51:
         80:db:e3:b1:5c:c3:81:ef:c1:f1:93:e4:42:a7:57:86:41:37:
         e5:81:9a:62:e2:24:36:3c:69:96:47:b2:7d:b3:9d:5f:eb:8e:
         6c:a6:82:50:ce:8e:a8:3c:a6:2c:68:3a:6c:0f:93:fb:8f:e9:
         80:aa:02:ab:fa:4b:70:ca:e8:c3:a5:45:cf:f7:b7:46:48:d3:
         30:f1:60:ec:c7:98:16:89:24:2c:bc:b3:05:f1:ad:f5:d5:27:
         0b:89:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:03:47 2025 by rpki-client