Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File:                     SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier:          Nrwxxp5lRwLHyj/f8t8ejTJwJ6vkAkgUpQQhA6AubtQ=
Subject key identifier:   A2:97:0E:64:67:16:65:C4:FB:B3:34:10:DE:CC:03:87:3A:F2:02:09
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0E5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number:          0E49
Signing time:             Sat 18 Oct 2025 18:25:23 +0000
Manifest this update:     Sat 18 Oct 2025 18:25:22 +0000
Manifest next update:     Sat 25 Oct 2025 18:25:22 +0000
Files and hashes:         1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: aAKet24n/piLEwx7Osq2nXXWROXFBDZIobHXczfMYfM=)
                          2: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: S4AV+hD7m9juwu/JMpkYcCbzUHhn99B0UXH2YVYLeEo=)
                          3: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: iA04EyF3JdExva3/idlBuWytZyJRag874pO7pySXwJg=)
                          4: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: 2kXWl4Cs1R/aPiAdtvMJLAsl+3ClYTwwDDVh+n0Dv2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3679 (0xe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Oct 18 18:25:22 2025 GMT
            Not After : Oct 25 18:25:22 2025 GMT
        Subject: CN=68f3db93-eec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:9a:23:bf:f1:d9:69:8a:2a:e6:01:50:6b:
                    85:e0:23:85:57:3d:5f:8b:78:65:99:6c:f3:8a:22:
                    8f:96:ef:ef:d2:a8:9c:29:12:41:76:aa:92:ca:46:
                    e2:de:c3:c3:4f:fc:10:0f:49:91:cc:1f:cb:79:17:
                    3f:38:04:03:a9:45:4b:2c:d6:e6:c1:23:c6:f2:0b:
                    a6:85:d1:ae:23:8f:6e:eb:20:d4:49:77:71:2e:07:
                    72:4f:47:ef:7e:04:90:3e:5d:c2:03:e9:45:7d:e1:
                    96:0c:50:d8:80:41:d3:3a:99:af:0a:10:29:96:10:
                    dd:2a:ae:7e:bf:b3:9a:0c:5c:ad:73:c4:6e:63:5e:
                    44:eb:49:e9:66:d3:02:42:f7:a5:ee:db:5d:aa:f7:
                    11:56:a6:14:2b:81:76:73:c1:43:ef:6e:6d:d2:e1:
                    5d:ab:9c:3f:d7:34:1e:ac:fa:72:39:3e:e2:39:db:
                    5e:9c:65:fb:ca:22:6d:5e:98:b9:63:d9:fa:8b:1a:
                    92:0f:46:fd:dc:d2:39:07:07:33:b7:c2:fd:be:00:
                    d5:54:ce:22:b6:40:24:f2:bb:98:c2:21:6e:09:1e:
                    88:1b:08:2f:04:7d:8b:6a:95:13:0a:98:ec:70:01:
                    d9:53:ca:64:74:a4:4d:41:ef:d8:06:6a:ab:97:43:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:97:0E:64:67:16:65:C4:FB:B3:34:10:DE:CC:03:87:3A:F2:02:09
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:05:63:60:ff:ef:9a:18:52:48:f0:35:87:68:0b:74:dd:96:
         fa:eb:9b:6c:e6:75:c5:da:6e:19:3d:01:41:b6:2a:72:6b:c1:
         fd:9f:1c:73:a1:be:90:3d:32:9c:20:27:ab:66:bf:67:a6:69:
         cf:d8:be:a1:33:25:75:38:01:3c:48:79:62:8d:d8:35:c7:2a:
         c1:9b:a7:6b:0c:c3:39:c4:83:cd:ef:d0:6d:df:73:bf:d1:b5:
         da:77:89:e5:ed:32:a9:8b:05:d0:46:f1:58:e5:cb:0f:2a:04:
         c8:27:b0:9c:8e:67:c2:86:5f:b8:86:07:d2:4d:6d:aa:b5:3e:
         a7:3b:ab:4c:68:da:97:a5:f1:e5:36:7a:5b:65:72:93:fa:5a:
         8f:f0:43:14:42:fd:2e:3d:f9:de:c0:bf:6d:28:5f:98:83:ff:
         26:3f:8e:dd:f3:22:d7:27:9f:eb:23:b2:22:1d:5f:a7:83:0b:
         01:00:b3:27:11:32:80:2b:e2:2a:fc:26:6c:21:de:99:fa:1b:
         15:35:1f:e2:62:75:68:67:b3:26:b5:c1:f2:dd:5a:67:c8:d7:
         aa:62:04:de:eb:34:e5:13:e8:de:99:ef:df:fd:a0:e9:a7:d8:
         d8:18:50:40:b0:ce:f6:32:8a:28:a6:d5:ac:52:51:46:31:8f:
         9a:aa:1f:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTMxNTMxMTAvBgNVBAUTKDQ4QzI3RkZGQjY0MjQ3MTJGQzZGQzYyODcxRDUzNkM1
MzFGRUYxOUIwHhcNMjUxMDE4MTgyNTIyWhcNMjUxMDI1MTgyNTIyWjAYMRYwFAYD
VQQDEw02OGYzZGI5My1lZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoTaaI7/x2WmKKuYBUGuF4COFVz1fi3hlmWzziiKPlu/v0qicKRJBdqqSykbi
3sPDT/wQD0mRzB/LeRc/OAQDqUVLLNbmwSPG8gumhdGuI49u6yDUSXdxLgdyT0fv
fgSQPl3CA+lFfeGWDFDYgEHTOpmvChAplhDdKq5+v7OaDFytc8RuY15E60npZtMC
Qvel7ttdqvcRVqYUK4F2c8FD725t0uFdq5w/1zQerPpyOT7iOdtenGX7yiJtXpi5
Y9n6ixqSD0b93NI5Bwczt8L9vgDVVM4itkAk8ruYwiFuCR6IGwgvBH2LapUTCpjs
cAHZU8pkdKRNQe/YBmqrl0PkrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKXDmRn
FmXE+7M0EN7MA4c68gIJMB8GA1UdIwQYMBaAFEjCf/+2QkcS/G/GKHHVNsUx/vGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzE1My84NjA3Nzk4MEFE
QjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4TDhiOFlvY2RVMnhUSC04
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NNSl9fN1pDUnhMOGI4WW9jZFUyeFRILThacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzE1My84NjA3Nzk4MEFEQjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4
TDhiOFlvY2RVMnhUSC04WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkBWNg/++aGFJI8DWHaAt03Zb665ts5nXF2m4ZPQFBtipya8H9nxxz
ob6QPTKcICerZr9npmnP2L6hMyV1OAE8SHlijdg1xyrBm6drDMM5xIPN79Bt33O/
0bXad4nl7TKpiwXQRvFY5csPKgTIJ7CcjmfChl+4hgfSTW2qtT6nO6tMaNqXpfHl
NnpbZXKT+lqP8EMUQv0uPfnewL9tKF+Yg/8mP47d8yLXJ5/rI7IiHV+ngwsBALMn
ETKAK+Iq/CZsId6Z+hsVNR/iYnVoZ7MmtcHy3VpnyNeqYgTe6zTlE+jeme/f/aDp
p9jYGFBAsM72MoooptWsUlFGMY+aqh80
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:42 2025 by rpki-client