Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File:                     n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier:          dcIjGXBjLBIw/lvbIHWiZzofPJjGrozwoOq5AfHKXXY=
Subject key identifier:   EC:17:37:C2:1D:D1:5C:9F:B9:AC:EE:5A:7D:17:FE:02:C3:BD:FD:DA
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number:          FE
Signing time:             Sun 19 Oct 2025 08:03:10 +0000
Manifest this update:     Sun 19 Oct 2025 08:03:09 +0000
Manifest next update:     Sun 26 Oct 2025 08:03:09 +0000
Files and hashes:         1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: cmrpAk/lHHBBJiHZYAfuUGw08OQDzxKX0K6nX1aw3jE=)
                          2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=)
                          3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Oct 19 08:03:09 2025 GMT
            Not After : Oct 26 08:03:09 2025 GMT
        Subject: CN=68f49b3d-1c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:33:35:bd:a1:9f:4e:96:86:54:c7:01:71:
                    b0:2c:ff:b6:0a:f4:28:5a:9e:0f:86:f2:96:b4:de:
                    7f:ed:55:26:f2:cb:fa:3d:35:f5:62:3b:0d:a1:f3:
                    ef:09:34:61:08:e9:27:9b:5f:27:4d:47:27:57:32:
                    de:db:e8:07:81:dd:10:9d:88:2a:8d:db:77:18:5f:
                    1f:df:0c:57:88:ec:d6:4c:a5:4e:68:0a:59:22:14:
                    0b:72:42:ef:65:f7:e8:45:93:5d:73:5d:b1:91:4d:
                    7d:02:8f:8f:a4:e8:27:15:22:53:c5:5d:af:3f:ef:
                    f7:53:bb:33:b7:e7:ec:b1:59:ac:ea:f7:5a:c0:0b:
                    02:76:42:4c:ce:fa:63:f0:18:e1:19:db:5c:1f:7e:
                    09:cf:c1:b1:df:c2:31:66:5a:ae:d2:f9:88:44:d2:
                    4d:26:bb:43:f0:8d:14:25:01:ae:a1:19:1a:d9:46:
                    0a:0a:33:fe:64:7c:40:21:e9:e9:41:8c:88:90:0a:
                    44:33:9f:4e:22:fe:d5:92:e2:2a:6c:55:b2:29:36:
                    b6:e1:95:71:e2:e0:2b:d0:f0:49:44:f6:0a:68:1e:
                    6e:54:2d:ab:0a:8a:e4:d4:6c:33:c5:7c:dd:b5:0e:
                    db:7c:73:a2:da:83:35:22:83:e6:32:35:3c:03:96:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:37:C2:1D:D1:5C:9F:B9:AC:EE:5A:7D:17:FE:02:C3:BD:FD:DA
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:37:8c:60:fc:12:f6:c9:cc:2c:17:6a:11:63:e5:be:91:
         af:6c:0d:f5:40:95:9c:57:0e:16:65:6b:27:fb:7a:f3:32:4c:
         ad:32:aa:30:8b:b0:79:6d:7f:a9:69:33:44:46:25:18:3e:11:
         da:7a:4c:fb:6e:f1:13:5d:de:d7:c4:91:55:26:04:03:9f:b7:
         9a:ae:0a:1a:f4:60:52:c4:5d:a5:c0:e5:04:95:3c:ae:cd:2f:
         fe:97:37:34:06:04:26:50:28:a3:ba:0e:02:e3:7a:44:af:44:
         66:10:39:e3:20:d9:62:9f:e5:ee:9c:71:8d:d9:e9:84:3e:3f:
         1c:9a:57:34:87:4c:dc:77:5e:3a:b4:67:03:4b:fd:d5:6f:4d:
         a6:34:2f:94:dd:bf:48:96:ca:80:9b:92:57:be:a6:7e:6b:c1:
         fb:21:cb:d1:23:4c:c4:af:c0:bd:bf:52:31:65:0f:83:2e:4d:
         ee:47:c6:35:5f:77:61:93:03:d2:fa:3a:1b:7c:08:99:43:3a:
         de:8f:90:61:37:11:50:2c:64:0b:0e:be:a7:b2:63:2f:5a:94:
         c5:c1:a1:91:61:2c:30:2b:22:51:63:16:6b:47:42:d4:e6:49:
         3c:51:08:7f:1e:94:c7:a0:d2:54:ed:6f:e2:0f:90:dc:10:c9:
         ac:32:75:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy
MTI1NDZDNzYwHhcNMjUxMDE5MDgwMzA5WhcNMjUxMDI2MDgwMzA5WjAYMRYwFAYD
VQQDEw02OGY0OWIzZC0xYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwugzNb2hn06WhlTHAXGwLP+2CvQoWp4PhvKWtN5/7VUm8sv6PTX1YjsNofPv
CTRhCOknm18nTUcnVzLe2+gHgd0QnYgqjdt3GF8f3wxXiOzWTKVOaApZIhQLckLv
ZffoRZNdc12xkU19Ao+PpOgnFSJTxV2vP+/3U7szt+fssVms6vdawAsCdkJMzvpj
8BjhGdtcH34Jz8Gx38IxZlqu0vmIRNJNJrtD8I0UJQGuoRka2UYKCjP+ZHxAIenp
QYyIkApEM59OIv7VkuIqbFWyKTa24ZVx4uAr0PBJRPYKaB5uVC2rCork1GwzxXzd
tQ7bfHOi2oM1IoPmMjU8A5YTPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwXN8Id
0VyfuazuWn0X/gLDvf3aMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC
N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS
V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6ODeMYPwS9snMLBdqEWPlvpGvbA31QJWcVw4WZWsn+3rzMkytMqow
i7B5bX+paTNERiUYPhHaekz7bvETXd7XxJFVJgQDn7eargoa9GBSxF2lwOUElTyu
zS/+lzc0BgQmUCijug4C43pEr0RmEDnjINlin+XunHGN2emEPj8cmlc0h0zcd146
tGcDS/3Vb02mNC+U3b9IlsqAm5JXvqZ+a8H7IcvRI0zEr8C9v1IxZQ+DLk3uR8Y1
X3dhkwPS+jobfAiZQzrej5BhNxFQLGQLDr6nsmMvWpTFwaGRYSwwKyJRYxZrR0LU
5kk8UQh/HpTHoNJU7W/iD5DcEMmsMnXA
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:25 2025 by rpki-client