Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
File:                     dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft (raw, json)
Hash identifier:          W22/rrMsvIYbjdgqKutzZJvpFe2uKviz1CHV7S2ElBE=
Subject key identifier:   01:98:95:43:E0:70:DA:A8:B4:78:24:00:07:A8:19:03:0C:0E:8E:69
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Certificate issuer:       /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
Manifest number:          BA
Signing time:             Sun 19 Oct 2025 09:16:17 +0000
Manifest this update:     Sun 19 Oct 2025 09:16:17 +0000
Manifest next update:     Sun 26 Oct 2025 09:16:17 +0000
Files and hashes:         1: dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl (hash: cC1NmlVah/4v2zFn0tmvsFUAs/W7bUXCEwiTybYB9hc=)
                          2: ED46632AC75311EFAA7A9E0BC4F9AE02.roa (hash: BSkyIsVjsqkIP2UcdowW92UsoE0+ROg3QmqK9i77vAQ=)
                          3: 5A844AC639D511F0AE239C5CC4F9AE02.roa (hash: sn6Hj5PK8tuNbIiWw17hS3Q3BDP+yAs1sYIOGHh0Wfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Validity
            Not Before: Oct 19 09:16:17 2025 GMT
            Not After : Oct 26 09:16:17 2025 GMT
        Subject: CN=68f4ac61-58d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:f6:bd:99:ab:42:24:60:6d:e0:c0:92:14:
                    97:e4:98:d1:4a:ea:51:60:ff:61:6b:2e:14:61:19:
                    b0:52:ae:98:f5:d0:33:d7:5c:a6:be:81:f8:e4:34:
                    e5:64:55:4c:c4:cb:54:2c:39:38:ec:f3:18:03:9e:
                    0e:90:ba:fd:a9:ef:2f:25:98:d5:dd:8e:ea:da:ef:
                    96:5c:2f:6c:f0:29:da:c5:80:57:d8:9e:98:b4:89:
                    08:34:00:a2:d3:c3:91:99:a7:ee:ab:b3:ae:5f:41:
                    6a:de:80:59:ff:e5:07:ba:5b:c1:7f:30:c6:9b:89:
                    02:10:58:18:e7:fa:0a:08:78:37:98:2b:c4:01:05:
                    9d:90:9a:d8:9a:2e:f5:36:c3:50:bd:ea:c9:4a:ac:
                    ec:5b:eb:34:e1:f8:ed:04:70:51:7d:4d:ea:a6:5b:
                    4b:63:a5:3c:e0:f7:34:91:53:d3:db:3f:6e:83:ce:
                    48:7a:4e:e3:71:20:dc:f7:a2:0d:0a:7c:59:26:a5:
                    9d:10:46:17:70:e5:76:d0:3d:bf:74:0b:9a:25:92:
                    c2:ed:f5:68:5e:52:f5:34:c3:85:ba:1b:b8:8d:61:
                    77:32:8c:ea:28:e5:a6:0e:74:d5:83:b6:8d:6c:da:
                    0d:a9:29:b8:c3:58:bb:25:55:84:19:06:75:83:78:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:98:95:43:E0:70:DA:A8:B4:78:24:00:07:A8:19:03:0C:0E:8E:69
            X509v3 Authority Key Identifier:
                keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:81:7d:0e:fa:8b:43:8d:59:9b:41:a6:59:0a:19:a2:dd:
         5c:c2:35:49:fc:40:27:b9:d2:05:c6:76:04:d0:e6:50:86:3e:
         7b:d6:7a:06:e0:03:30:d3:89:b0:1c:f6:d2:2c:70:83:bc:e6:
         80:16:f3:8b:f9:e4:e9:a9:3e:60:27:50:30:71:02:27:c7:e1:
         27:e5:5c:fc:69:7a:d3:5b:77:39:85:1d:ba:ff:6e:18:87:cb:
         94:0b:6a:a2:db:39:cd:0f:24:b6:97:c6:11:fe:90:39:d9:53:
         26:c5:29:f7:a8:d0:5f:5c:c6:2d:c9:59:85:62:80:1f:f9:c3:
         9d:8b:a0:86:bc:0c:21:dd:62:af:9e:15:b7:a9:85:ee:54:89:
         b7:63:a8:9b:81:9c:91:d3:3e:21:9e:52:15:bc:27:a9:80:42:
         4e:0a:90:ba:ab:7a:18:60:4b:1d:82:30:df:26:85:a2:b5:37:
         52:f9:5a:e5:72:17:84:f8:cf:f8:a2:6e:28:67:98:c7:a3:db:
         ea:a1:4f:33:ab:d4:23:c0:93:8b:6b:ef:0a:c0:55:12:cc:76:
         96:58:1a:be:d1:4b:0d:ed:c4:25:65:f3:9a:8c:bb:bb:1f:dd:
         5b:07:2f:f7:39:aa:23:7e:54:7d:c7:2e:9d:b7:f6:8e:95:09:
         f8:cd:69:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MUExMTAvBgNVBAUTKDc0Q0I4NUE2MzQ5QzNDQTYxODRBRUNGNzBGODNBRkZE
RkNFMEE3RjcwHhcNMjUxMDE5MDkxNjE3WhcNMjUxMDI2MDkxNjE3WjAYMRYwFAYD
VQQDEw02OGY0YWM2MS01OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3832vZmrQiRgbeDAkhSX5JjRSupRYP9hay4UYRmwUq6Y9dAz11ymvoH45DTl
ZFVMxMtULDk47PMYA54OkLr9qe8vJZjV3Y7q2u+WXC9s8CnaxYBX2J6YtIkINACi
08ORmafuq7OuX0Fq3oBZ/+UHulvBfzDGm4kCEFgY5/oKCHg3mCvEAQWdkJrYmi71
NsNQverJSqzsW+s04fjtBHBRfU3qpltLY6U84Pc0kVPT2z9ug85Iek7jcSDc96IN
CnxZJqWdEEYXcOV20D2/dAuaJZLC7fVoXlL1NMOFuhu4jWF3MozqKOWmDnTVg7aN
bNoNqSm4w1i7JVWEGQZ1g3iWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGYlUPg
cNqotHgkAAeoGQMMDo5pMB8GA1UdIwQYMBaAFHTLhaY0nDymGErs9w+Dr/384Kf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkxQS83NTFGMzFEQUEy
ODUxMUVGODQyQjk0MTBDNEY5QUUwMi9kTXVGcGpTY1BLWVlTdXozRDRPdl9memdw
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RNdUZwalNjUEtZWVN1ejNENE92X2Z6Z3BfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkxQS83NTFGMzFEQUEyODUxMUVGODQyQjk0MTBDNEY5QUUwMi9kTXVGcGpTY1BL
WVlTdXozRDRPdl9memdwX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBviIF9DvqLQ41Zm0GmWQoZot1cwjVJ/EAnudIFxnYE0OZQhj571noG
4AMw04mwHPbSLHCDvOaAFvOL+eTpqT5gJ1AwcQInx+En5Vz8aXrTW3c5hR26/24Y
h8uUC2qi2znNDyS2l8YR/pA52VMmxSn3qNBfXMYtyVmFYoAf+cOdi6CGvAwh3WKv
nhW3qYXuVIm3Y6ibgZyR0z4hnlIVvCepgEJOCpC6q3oYYEsdgjDfJoWitTdS+Vrl
cheE+M/4om4oZ5jHo9vqoU8zq9QjwJOLa+8KwFUSzHaWWBq+0UsN7cQlZfOajLu7
H91bBy/3OaojflR9xy6dt/aOlQn4zWnA
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:26 2025 by rpki-client