Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          h054WDvHnoj3bu30JyxBgGzfKrqpShJ5j20OpMhCY1Q=
Subject key identifier:   94:40:8A:40:A2:85:CB:A0:71:5D:91:61:10:1B:7D:85:5F:9E:7E:F9
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          0189
Signing time:             Sun 19 Oct 2025 06:12:17 +0000
Manifest this update:     Sun 19 Oct 2025 06:12:16 +0000
Manifest next update:     Sun 26 Oct 2025 06:12:16 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: siU+iiag7+RpigRsq1pKv1VWUZqQsk7xJxPiwLXYPgM=)
                          2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=)
                          3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=)
                          4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=)
                          5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=)
                          6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Oct 19 06:12:16 2025 GMT
            Not After : Oct 26 06:12:16 2025 GMT
        Subject: CN=68f48140-3e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:04:4a:32:e7:92:0f:95:48:1e:87:4b:b4:
                    c9:d8:55:02:51:50:6b:70:82:5f:52:92:f8:66:2f:
                    7e:d2:d6:a8:c6:9e:65:82:a3:59:c2:a2:f0:11:14:
                    7e:08:8a:9e:ab:64:58:54:df:fa:56:22:a9:b6:88:
                    64:f6:9f:f0:9a:64:2d:86:fa:c8:cf:11:a7:47:fc:
                    4a:1f:7a:7a:43:c1:37:02:4a:7a:47:2d:30:27:57:
                    2c:65:a8:d1:fa:fe:c2:3f:2b:fe:f9:6e:f7:fb:c6:
                    a0:02:05:5e:07:ab:8f:a1:79:75:41:6a:b3:de:74:
                    6f:18:a9:a6:42:7c:c5:85:a8:10:1c:f8:f0:a0:6a:
                    ea:3a:55:e7:cd:f3:b3:5e:cd:cc:54:ab:b1:ad:27:
                    8d:8f:65:56:fa:91:b2:82:ec:b9:de:73:7e:47:81:
                    fd:c6:be:81:0e:c9:d5:66:cc:cb:a6:be:05:1f:9b:
                    15:7a:c4:e4:f6:af:9a:cb:2c:00:ac:da:ac:d4:1e:
                    8d:8f:a8:f6:d2:c2:21:7e:5e:65:4e:1f:02:e3:49:
                    a5:91:30:77:ed:17:b1:46:38:1d:ad:23:3f:48:6e:
                    6a:1a:6c:8a:e6:c0:f8:70:31:57:fd:48:77:a1:9b:
                    79:6a:70:7c:e7:d7:ef:97:9b:68:88:2a:bf:e7:06:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:40:8A:40:A2:85:CB:A0:71:5D:91:61:10:1B:7D:85:5F:9E:7E:F9
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:af:36:27:13:d4:e7:ab:33:46:2a:f8:d1:57:89:ae:c9:a6:
         ca:42:32:e4:ae:8a:7e:a4:ac:60:d4:0b:96:b1:c2:7f:7e:4b:
         11:f8:93:65:b5:75:e4:07:c5:eb:40:5f:ba:bf:3c:4d:eb:c6:
         b7:90:e2:0b:7c:cb:be:b9:89:be:4a:f4:01:ed:5a:38:71:fa:
         9a:06:7c:70:67:ff:28:93:2e:3a:fe:76:1f:62:63:61:e0:2e:
         e9:fd:72:0a:ac:21:16:54:4e:7e:4c:1a:32:e2:a3:b3:a4:d8:
         da:d7:33:a3:84:b8:16:79:5e:97:88:ec:50:b4:cf:a2:b2:f2:
         6e:3d:9d:3f:ee:a0:5a:10:45:9b:5a:54:dc:3b:5a:5e:a0:9e:
         34:1a:08:b3:4b:fa:d4:65:02:ea:5a:01:5e:bd:d0:27:45:20:
         0b:09:bc:a4:f6:d4:21:08:a3:78:c1:03:c0:a2:4f:f5:3e:e4:
         03:90:7e:1f:bb:ca:87:01:db:8f:ca:22:35:b3:49:83:fa:0a:
         5b:c2:be:da:5b:49:74:ad:a7:f0:4e:c1:ba:33:19:e5:31:d2:
         32:e9:11:28:58:bb:f6:81:b6:42:f2:a7:d0:c9:1a:c2:23:73:
         3e:bc:9d:fe:25:b9:0b:55:06:68:37:e7:81:93:90:bf:9c:4f:
         9e:76:0e:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5
NUI5MDJBMjAwHhcNMjUxMDE5MDYxMjE2WhcNMjUxMDI2MDYxMjE2WjAYMRYwFAYD
VQQDEw02OGY0ODE0MC0zZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsx8ESjLnkg+VSB6HS7TJ2FUCUVBrcIJfUpL4Zi9+0taoxp5lgqNZwqLwERR+
CIqeq2RYVN/6ViKptohk9p/wmmQthvrIzxGnR/xKH3p6Q8E3Akp6Ry0wJ1csZajR
+v7CPyv++W73+8agAgVeB6uPoXl1QWqz3nRvGKmmQnzFhagQHPjwoGrqOlXnzfOz
Xs3MVKuxrSeNj2VW+pGyguy53nN+R4H9xr6BDsnVZszLpr4FH5sVesTk9q+ayywA
rNqs1B6Nj6j20sIhfl5lTh8C40mlkTB37RexRjgdrSM/SG5qGmyK5sD4cDFX/Uh3
oZt5anB859fvl5toiCq/5waX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRAikCi
hcugcV2RYRAbfYVfnn75MB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3
REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1
U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYrzYnE9TnqzNGKvjRV4muyabKQjLkrop+pKxg1AuWscJ/fksR+JNl
tXXkB8XrQF+6vzxN68a3kOILfMu+uYm+SvQB7Vo4cfqaBnxwZ/8oky46/nYfYmNh
4C7p/XIKrCEWVE5+TBoy4qOzpNja1zOjhLgWeV6XiOxQtM+isvJuPZ0/7qBaEEWb
WlTcO1peoJ40GgizS/rUZQLqWgFevdAnRSALCbyk9tQhCKN4wQPAok/1PuQDkH4f
u8qHAduPyiI1s0mD+gpbwr7aW0l0rafwTsG6MxnlMdIy6REoWLv2gbZC8qfQyRrC
I3M+vJ3+JbkLVQZoN+eBk5C/nE+edg5c
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:49 2025 by rpki-client