Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
File:                     0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft (raw, json)
Hash identifier:          KGmfNu6KhvrR22O0kDl0nUaUr2r1ZrW9ebCFo9yH21Q=
Subject key identifier:   F6:48:BF:95:CD:50:88:55:08:F3:79:D0:50:E1:57:42:17:C3:AD:64
Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
Certificate issuer:       /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
Manifest number:          0909
Signing time:             Sat 18 Oct 2025 22:46:18 +0000
Manifest this update:     Sat 18 Oct 2025 22:46:17 +0000
Manifest next update:     Sat 25 Oct 2025 22:46:17 +0000
Files and hashes:         1: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl (hash: Mfn5qmwHB5vg5aEUWYh+bcyFgm7L3uspx5cLyhjUhU8=)
                          2: 5428E56AF53911EEB8A4592AC4F9AE02.roa (hash: RvrC2E1/2qpooMLjVwsAlibkF1+1H1TLhw0WuDNcy/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
        Validity
            Not Before: Oct 18 22:46:17 2025 GMT
            Not After : Oct 25 22:46:17 2025 GMT
        Subject: CN=68f418b9-faf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8a:6e:1a:bc:09:55:41:73:50:f6:02:a6:c4:
                    28:91:ff:6f:dc:ac:0e:60:4b:9d:64:60:4a:f7:10:
                    6e:e2:35:19:6a:37:5b:ed:0c:f2:b5:74:ce:2e:c2:
                    0d:94:83:38:89:df:e5:ad:90:b3:2b:56:c7:e6:cb:
                    25:50:0b:20:2e:c2:09:71:b0:ca:f9:ac:1f:3e:8c:
                    93:d7:75:91:b2:64:9c:39:ea:cc:65:1a:e8:ed:84:
                    98:39:60:38:56:b2:41:bd:3f:d3:99:8f:b9:8c:1e:
                    c9:91:d1:a4:c1:09:8e:f4:1a:bd:68:89:e4:3b:f6:
                    be:86:25:db:ca:6b:f4:d3:42:63:c6:a4:b1:60:57:
                    ff:ea:9a:05:53:1d:a0:dd:1c:42:41:ee:ba:cd:e7:
                    5d:b6:ed:9e:48:06:f2:5e:c2:b3:dc:c1:80:46:7b:
                    73:cd:b6:90:c6:5f:04:fa:f1:94:7c:3b:8b:9e:5d:
                    d3:f4:27:bb:57:ca:bf:4e:81:11:b2:ad:84:60:5d:
                    4e:10:0c:7c:fb:58:b0:e4:e5:a2:c9:6f:c9:cb:29:
                    11:03:af:ec:31:c1:2c:52:d1:47:2e:46:3f:51:d2:
                    41:44:78:a9:71:ce:80:a3:e3:ea:ea:f0:1a:35:05:
                    0e:b4:8a:17:e0:77:b9:09:29:1b:bc:7b:11:c9:90:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:BF:95:CD:50:88:55:08:F3:79:D0:50:E1:57:42:17:C3:AD:64
            X509v3 Authority Key Identifier:
                keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:cb:93:0f:45:d3:93:d7:d9:5a:ba:c9:44:cd:16:a5:0a:
         b1:aa:94:4b:cd:dc:8d:d6:69:26:35:1b:86:16:47:d9:de:78:
         64:2e:10:db:b4:a4:ff:0e:8f:44:ce:d1:89:d7:ac:37:58:5c:
         e4:0f:90:af:c5:84:c1:d7:5f:d8:4f:18:21:ba:56:9b:a8:0f:
         92:ee:4d:40:8a:2c:31:b3:89:e7:83:d5:fb:0f:d9:be:24:7b:
         69:b6:d5:5c:d6:0f:a4:33:04:4f:e5:12:80:75:ee:33:a7:f5:
         5e:ed:56:99:0e:f9:83:d6:ac:df:c4:56:ff:70:73:68:10:7b:
         95:0c:e6:f2:94:d0:3e:d7:82:6d:91:a8:60:29:c3:36:e9:37:
         aa:93:47:44:60:ac:a7:2e:8c:0f:79:ad:52:59:d7:da:8b:e2:
         ed:4e:5b:86:d1:89:22:77:d0:b9:01:16:63:f1:15:a1:f8:e4:
         de:33:e1:b0:ce:68:15:36:91:eb:49:dd:40:7d:e6:ab:5b:7d:
         e8:42:2e:5d:03:e1:b7:99:2a:96:61:2e:9d:69:a1:a2:5f:b6:
         5e:6a:d4:ef:6b:bc:8f:bf:60:86:42:ef:bd:83:69:c5:ac:60:
         3e:29:7b:ca:76:81:44:50:84:3a:87:d7:80:58:b2:be:26:49:
         31:29:cd:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5QUIxMTAvBgNVBAUTKEQxMEJBRjdBQThEQjczNEI5NTJEMDM2MDg3NzgzQzY0
Mzc4NDNDOEYwHhcNMjUxMDE4MjI0NjE3WhcNMjUxMDI1MjI0NjE3WjAYMRYwFAYD
VQQDEw02OGY0MThiOS1mYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA84puGrwJVUFzUPYCpsQokf9v3KwOYEudZGBK9xBu4jUZajdb7QzytXTOLsIN
lIM4id/lrZCzK1bH5sslUAsgLsIJcbDK+awfPoyT13WRsmScOerMZRro7YSYOWA4
VrJBvT/TmY+5jB7JkdGkwQmO9Bq9aInkO/a+hiXbymv000JjxqSxYFf/6poFUx2g
3RxCQe66zeddtu2eSAbyXsKz3MGARntzzbaQxl8E+vGUfDuLnl3T9Ce7V8q/ToER
sq2EYF1OEAx8+1iw5OWiyW/JyykRA6/sMcEsUtFHLkY/UdJBRHipcc6Ao+Pq6vAa
NQUOtIoX4He5CSkbvHsRyZDkRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZIv5XN
UIhVCPN50FDhV0IXw61kMB8GA1UdIwQYMBaAFNELr3qo23NLlS0DYId4PGQ3hDyP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1
NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi8wUXV2ZXFqYmMwdVZMUU5naDNnOFpEZUVQ
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBRdXZlcWpiYzB1VkxRTmdoM2c4WkRlRVBJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi8wUXV2ZXFqYmMw
dVZMUU5naDNnOFpEZUVQSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBelcuTD0XTk9fZWrrJRM0WpQqxqpRLzdyN1mkmNRuGFkfZ3nhkLhDb
tKT/Do9EztGJ16w3WFzkD5CvxYTB11/YTxghulabqA+S7k1Aiiwxs4nng9X7D9m+
JHtpttVc1g+kMwRP5RKAde4zp/Ve7VaZDvmD1qzfxFb/cHNoEHuVDObylNA+14Jt
kahgKcM26Teqk0dEYKynLowPea1SWdfai+LtTluG0Ykid9C5ARZj8RWh+OTeM+Gw
zmgVNpHrSd1AfearW33oQi5dA+G3mSqWYS6daaGiX7ZeatTva7yPv2CGQu+9g2nF
rGA+KXvKdoFEUIQ6h9eAWLK+JkkxKc3F
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:55 2025 by rpki-client