Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          Vn7Rr310CxX9q2JdN4qdFSGYHXuZv2ShBLZdJILyYvw=
Subject key identifier:   A6:30:5D:25:09:23:6E:98:62:34:C7:83:2B:11:1A:CC:F3:F7:04:D0
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          B2
Signing time:             Sun 19 Oct 2025 09:16:20 +0000
Manifest this update:     Sun 19 Oct 2025 09:16:19 +0000
Manifest next update:     Sun 26 Oct 2025 09:16:19 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: hTbGMiQCMYBfpJgl9Xfq4CM8O3MtuBr9FTclccT6ktE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Oct 19 09:16:19 2025 GMT
            Not After : Oct 26 09:16:19 2025 GMT
        Subject: CN=68f4ac64-f3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:03:f0:47:82:8c:68:4b:12:9a:1e:9c:95:04:
                    b5:fb:82:a5:ba:14:1b:b1:21:75:26:ce:ca:d6:8c:
                    f7:82:bc:91:e0:d4:a8:ce:0b:b5:99:8d:ac:51:6f:
                    9d:da:e1:31:69:6c:07:3f:77:ce:0c:1b:a0:6c:27:
                    86:5a:6b:e1:48:5c:72:35:ca:3e:dd:a8:63:c2:39:
                    58:46:70:c6:22:fc:57:e4:b6:ec:83:a1:7b:77:16:
                    3c:94:19:2b:ed:ce:f6:c1:25:3b:f6:64:d9:a6:ff:
                    69:cb:a7:21:01:07:52:ca:83:7a:81:19:d9:03:5b:
                    82:a3:22:a1:9d:5d:c4:43:e5:ff:f6:ff:a6:03:48:
                    3a:8b:71:5c:37:f3:1f:81:b7:23:05:aa:96:09:96:
                    8c:4e:9e:db:23:84:05:6d:ef:0b:1c:73:81:60:77:
                    7d:8c:78:de:9d:82:3a:40:c4:1c:30:aa:35:ce:26:
                    72:07:81:38:6a:04:5a:ea:81:00:59:cb:85:29:65:
                    91:72:8b:77:2e:33:19:22:81:27:8a:f4:6a:31:c4:
                    ce:23:6e:25:36:a6:bd:86:e3:f9:18:ef:13:55:f4:
                    f7:9a:6c:58:cd:0b:70:e1:e7:37:4c:8c:23:d2:92:
                    d5:13:73:a0:29:70:6b:d7:84:7e:3c:5b:b0:98:60:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:5D:25:09:23:6E:98:62:34:C7:83:2B:11:1A:CC:F3:F7:04:D0
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:77:d7:20:75:d6:64:2a:e7:22:29:56:92:e5:2e:2b:f0:
         13:1b:21:26:61:82:97:96:61:dd:34:2f:10:52:a6:24:0c:e2:
         b3:83:a1:07:7d:7d:70:2a:4a:44:71:26:06:60:87:aa:8c:ca:
         08:e8:5d:53:1a:08:c4:27:38:d7:ad:6e:e3:8b:22:25:db:f5:
         5d:ce:a9:d1:df:40:4b:ce:8e:52:f6:df:db:46:03:44:30:64:
         bf:0f:89:cc:d2:73:16:9a:ce:a0:b9:c9:0b:6a:c2:66:ce:69:
         5d:ec:84:75:f6:59:9d:8f:75:cb:30:c3:e6:60:80:11:72:81:
         73:4e:82:c8:dc:ee:b8:38:5b:c5:7e:f7:dc:64:d7:89:f7:f2:
         60:9a:93:d0:ac:b3:12:ef:6b:70:4c:40:e3:00:50:f4:c7:66:
         1a:53:bd:3c:c9:d2:37:6e:6c:6d:76:b1:85:12:3f:0f:71:bb:
         23:fe:94:94:f6:92:14:a9:cb:7f:88:fb:01:f1:34:46:15:3d:
         d1:87:ea:8f:53:b2:35:75:4a:08:2c:5a:6c:e4:2a:87:74:d8:
         aa:d1:2e:b2:3b:e3:4d:46:d9:3d:2a:0e:4e:28:fc:f2:77:88:
         96:f0:c7:5c:8f:64:e5:30:af:e3:76:b2:67:36:6d:b0:18:a8:
         ee:10:83:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MUExMTAvBgNVBAUTKDZBMDRFQjM0QTNERkYwNjVGRDBFRjMxMkUyQ0UzODNG
QUI1MDI0REUwHhcNMjUxMDE5MDkxNjE5WhcNMjUxMDI2MDkxNjE5WjAYMRYwFAYD
VQQDEw02OGY0YWM2NC1mM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7QPwR4KMaEsSmh6clQS1+4KluhQbsSF1Js7K1oz3gryR4NSozgu1mY2sUW+d
2uExaWwHP3fODBugbCeGWmvhSFxyNco+3ahjwjlYRnDGIvxX5Lbsg6F7dxY8lBkr
7c72wSU79mTZpv9py6chAQdSyoN6gRnZA1uCoyKhnV3EQ+X/9v+mA0g6i3FcN/Mf
gbcjBaqWCZaMTp7bI4QFbe8LHHOBYHd9jHjenYI6QMQcMKo1ziZyB4E4agRa6oEA
WcuFKWWRcot3LjMZIoEnivRqMcTOI24lNqa9huP5GO8TVfT3mmxYzQtw4ec3TIwj
0pLVE3OgKXBr14R+PFuwmGDpYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYwXSUJ
I26YYjTHgysRGszz9wTQMB8GA1UdIwQYMBaAFGoE6zSj3/Bl/Q7zEuLOOD+rUCTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkxQS80Nzg5MzE3OEEx
OUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQZjhHWDlEdk1TNHM0NFA2dFFK
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FnVHJOS1BmOEdYOUR2TVM0czQ0UDZ0UUpONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkxQS80Nzg5MzE3OEExOUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQZjhH
WDlEdk1TNHM0NFA2dFFKTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmwXfXIHXWZCrnIilWkuUuK/ATGyEmYYKXlmHdNC8QUqYkDOKzg6EH
fX1wKkpEcSYGYIeqjMoI6F1TGgjEJzjXrW7jiyIl2/VdzqnR30BLzo5S9t/bRgNE
MGS/D4nM0nMWms6guckLasJmzmld7IR19lmdj3XLMMPmYIARcoFzToLI3O64OFvF
fvfcZNeJ9/JgmpPQrLMS72twTEDjAFD0x2YaU708ydI3bmxtdrGFEj8Pcbsj/pSU
9pIUqct/iPsB8TRGFT3Rh+qPU7I1dUoILFps5CqHdNiq0S6yO+NNRtk9Kg5OKPzy
d4iW8Mdcj2TlMK/jdrJnNm2wGKjuEIP0
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:16 2025 by rpki-client