Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          dmZtmrUUUA6WiqG3oJSpeL2gKARsjh7j7n5zdNRPMfA=
Subject key identifier:   C6:9A:4E:2B:38:AE:E8:01:42:F2:00:FC:0A:5E:E0:08:ED:92:8D:1A
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          E9
Signing time:             Mon 03 Nov 2025 05:25:23 +0000
Manifest this update:     Mon 03 Nov 2025 05:25:23 +0000
Manifest next update:     Mon 10 Nov 2025 05:25:23 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: Be/X0mOGlr47/kVY4CbI+WUEf4Q9Axjbg78ocVYUixI=)
                          2: A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa (hash: FHyNixxbqeOTH/ABuTSjy9voXrVO6M51CKZjHghUlc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Nov  3 05:25:23 2025 GMT
            Not After : Nov 10 05:25:23 2025 GMT
        Subject: CN=69083cc3-cfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:7f:f8:cc:a1:4a:e9:2e:3e:71:d2:a3:4d:
                    17:d5:25:71:92:f0:c4:3e:bd:af:2e:79:d8:a0:5c:
                    e8:b2:71:46:55:d1:e6:ef:3d:c5:30:bd:ff:45:12:
                    fd:15:e0:60:7f:27:ed:d8:ad:49:cb:38:98:2d:84:
                    55:6b:37:5d:df:e5:83:09:25:6d:d8:fd:0f:aa:6a:
                    d5:55:45:c3:cd:7e:01:38:64:f8:15:19:9a:4b:70:
                    0d:a2:4f:f0:c5:60:11:4f:95:d4:8f:56:ee:8e:95:
                    90:ca:e3:3a:02:8c:13:ce:d2:9a:ca:c4:b8:58:b1:
                    a3:8f:5e:32:90:25:3d:5b:4c:30:f3:01:81:4f:9a:
                    05:83:ed:2c:00:54:59:18:78:89:a7:78:68:13:64:
                    6a:40:fe:5b:cc:b3:66:63:d8:b4:93:05:f5:6c:92:
                    43:63:8f:2d:e4:f4:f0:9f:42:28:4c:52:c7:55:9f:
                    d2:8a:77:89:c6:5b:c0:e1:ce:a2:6b:c0:ff:a3:f4:
                    46:8a:aa:93:69:80:73:bc:b2:96:9f:24:78:01:c1:
                    11:ab:ac:fc:7c:ab:89:e4:86:aa:e6:7b:18:18:79:
                    bd:3d:d8:0b:5b:3e:bc:04:45:06:4f:f6:51:20:f2:
                    6e:3e:59:15:c3:38:35:0f:12:f8:ec:ff:94:96:43:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:4E:2B:38:AE:E8:01:42:F2:00:FC:0A:5E:E0:08:ED:92:8D:1A
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a7:00:2a:0e:10:62:d7:95:d9:42:46:c4:e7:9a:02:f8:ff:
         76:f0:d8:fd:0c:b7:dd:dc:7a:1f:b4:33:e3:cd:45:2b:a6:1e:
         fe:37:be:1c:83:05:fe:61:c2:92:4e:46:06:4f:38:24:21:f4:
         32:ad:3d:6c:1e:84:b8:ae:96:ee:f2:47:a1:22:51:dc:78:bc:
         44:19:69:4e:aa:14:46:ae:d2:6a:5f:d4:9e:75:11:44:3f:29:
         e9:69:7e:6d:8d:6d:bd:7b:8c:3c:a9:ee:c1:dc:d5:e1:7c:2a:
         11:08:bf:08:1e:cb:a7:21:4c:44:b0:94:66:ef:af:de:b5:9b:
         7c:da:ac:8f:96:ef:b0:1e:b0:0e:0b:63:ab:e2:e1:8a:a5:82:
         b9:ac:1f:1e:0d:36:f5:ef:4f:f4:cd:ad:83:c0:43:5c:af:6c:
         bb:0a:70:1a:9a:f7:32:73:f1:46:6f:2d:ad:73:ee:d6:e8:ae:
         ca:79:0e:91:b5:91:21:e4:08:14:7f:ed:4d:a4:64:24:ca:d3:
         5e:6f:0e:a2:bd:80:a6:43:81:66:57:78:a2:af:9c:12:44:d2:
         97:22:fa:e0:68:f9:b3:f5:32:e7:aa:8b:37:84:c3:f5:bb:23:
         dd:fa:59:32:5f:9c:cf:4f:90:42:09:ee:50:f8:f0:a1:f9:36:
         7e:e9:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:07:59 2025 by rpki-client