Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
File:                     bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json)
Hash identifier:          8vgQtxjG1LeXGpw8dRdIkUpmsoo2kMeV06jr1fjrrC8=
Subject key identifier:   E8:9A:95:6B:AC:77:12:E0:1D:30:50:68:E4:55:AB:FB:B1:E7:56:16
Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
Certificate issuer:       /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Certificate serial:       11EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
Manifest number:          11E3
Signing time:             Sat 18 Oct 2025 17:41:35 +0000
Manifest this update:     Sat 18 Oct 2025 17:41:34 +0000
Manifest next update:     Sat 25 Oct 2025 17:41:34 +0000
Files and hashes:         1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: KRWmNPuiNp/RAX5rt8Y2iA0KHDoCAwdrlDXl17dVLLU=)
                          2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
                          rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4587 (0x11eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
        Validity
            Not Before: Oct 18 17:41:34 2025 GMT
            Not After : Oct 25 17:41:34 2025 GMT
        Subject: CN=68f3d14f-7848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:9e:41:20:3b:eb:1f:35:72:61:ac:c4:30:
                    5e:40:46:df:78:04:d9:85:7a:24:f5:d2:98:d0:c6:
                    7f:fa:82:57:1b:b8:2a:3e:e0:f7:59:46:72:6c:5e:
                    37:d1:5e:f1:a4:8e:3d:1a:43:65:e7:58:36:97:77:
                    ec:28:0a:df:c1:09:55:fa:0a:7a:bf:a5:eb:3b:5e:
                    eb:24:02:b9:32:d1:58:20:8c:91:7e:3a:17:d4:8a:
                    c7:c9:c7:37:57:a5:f0:d5:c5:55:e0:ac:38:05:b6:
                    11:3b:42:a1:bb:9b:5f:92:ea:a5:5d:ff:b5:66:2f:
                    e7:2d:18:ba:c0:10:91:11:99:2e:3d:46:24:dd:fb:
                    9d:4f:25:ef:fe:d9:2d:54:76:4b:7f:31:52:d0:f2:
                    68:96:6c:9b:9b:33:32:54:7c:d5:3a:ae:08:a6:02:
                    e5:53:d8:e2:f5:2d:c8:d2:00:3d:44:af:ba:3c:fd:
                    1f:03:70:9c:08:b4:c1:1f:2a:61:b0:8a:11:4f:96:
                    c3:7f:66:67:fc:22:f6:49:e4:a5:39:e2:e9:42:13:
                    2d:36:a3:8b:10:01:9d:46:1d:1d:02:e5:38:fc:22:
                    c4:8b:92:ae:bb:b3:4c:25:59:02:0b:fa:3b:a4:bb:
                    25:c1:c9:d4:a5:13:46:0c:0e:ce:13:74:5c:58:14:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:95:6B:AC:77:12:E0:1D:30:50:68:E4:55:AB:FB:B1:E7:56:16
            X509v3 Authority Key Identifier:
                keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:6a:5a:4e:c7:dd:9b:c2:17:46:3b:4c:1d:63:c1:f1:5d:06:
         8b:23:f4:e7:6e:f5:b5:a7:45:fc:45:3b:bf:d9:3d:a8:45:87:
         a9:eb:07:17:32:bc:1c:78:ce:b9:a0:2b:29:c5:31:c4:1b:6c:
         28:8b:3c:f2:da:52:59:8e:e3:e3:76:d2:e7:a7:cc:cc:e3:eb:
         3c:73:a2:0a:0a:3c:e6:5a:17:2d:43:63:c4:29:80:4a:9f:34:
         d6:b9:e8:a0:9b:99:0a:2f:2f:0f:74:c3:50:4d:f6:1a:ee:52:
         74:4b:6f:50:cd:7a:74:2b:2f:91:eb:6f:f3:ee:f9:7d:03:af:
         86:82:44:29:cd:93:73:f5:65:35:a0:00:fa:e2:67:9e:ce:32:
         7f:aa:fe:47:87:59:89:36:74:40:9d:40:1c:ef:29:e8:b1:bb:
         2c:91:48:45:e7:69:76:d2:93:ca:61:77:ef:82:24:63:1f:6e:
         49:09:a6:7a:ff:bb:38:5b:79:ae:99:e8:5e:d9:ef:75:f0:3d:
         c5:da:ba:20:ce:48:08:6d:b0:93:15:80:59:fc:48:26:4a:02:
         67:c0:f1:0b:c8:d5:df:d9:c2:a4:fb:1b:a3:5e:95:31:9a:55:
         91:b7:19:36:80:5b:b4:cc:25:8b:b6:62:36:37:b6:d5:76:01:
         96:ed:0c:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy
RTZDOUQ1MUEwHhcNMjUxMDE4MTc0MTM0WhcNMjUxMDI1MTc0MTM0WjAYMRYwFAYD
VQQDEw02OGYzZDE0Zi03ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6ieQSA76x81cmGsxDBeQEbfeATZhXok9dKY0MZ/+oJXG7gqPuD3WUZybF43
0V7xpI49GkNl51g2l3fsKArfwQlV+gp6v6XrO17rJAK5MtFYIIyRfjoX1IrHycc3
V6Xw1cVV4Kw4BbYRO0Khu5tfkuqlXf+1Zi/nLRi6wBCREZkuPUYk3fudTyXv/tkt
VHZLfzFS0PJolmybmzMyVHzVOq4IpgLlU9ji9S3I0gA9RK+6PP0fA3CcCLTBHyph
sIoRT5bDf2Zn/CL2SeSlOeLpQhMtNqOLEAGdRh0dAuU4/CLEi5Kuu7NMJVkCC/o7
pLslwcnUpRNGDA7OE3RcWBSy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOialWus
dxLgHTBQaORVq/ux51YWMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4
RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC
N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzalpOx92bwhdGO0wdY8HxXQaLI/TnbvW1p0X8RTu/2T2oRYep6wcX
MrwceM65oCspxTHEG2woizzy2lJZjuPjdtLnp8zM4+s8c6IKCjzmWhctQ2PEKYBK
nzTWueigm5kKLy8PdMNQTfYa7lJ0S29QzXp0Ky+R62/z7vl9A6+GgkQpzZNz9WU1
oAD64meezjJ/qv5Hh1mJNnRAnUAc7ynosbsskUhF52l20pPKYXfvgiRjH25JCaZ6
/7s4W3mumehe2e918D3F2rogzkgIbbCTFYBZ/EgmSgJnwPELyNXf2cKk+xujXpUx
mlWRtxk2gFu0zCWLtmI2N7bVdgGW7QxV
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:13:42 2025 by rpki-client