Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          8KH6wVc/6SjGuOf/1j9lYb90pDx/jcq5mKel/UHEz9s=
Subject key identifier:   45:54:AE:EE:43:3B:94:38:7C:E6:AA:3E:DC:1C:0F:D3:A2:12:8E:93
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       28C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          2652
Signing time:             Sat 18 Oct 2025 15:59:49 +0000
Manifest this update:     Sat 18 Oct 2025 15:59:48 +0000
Manifest next update:     Sat 25 Oct 2025 15:59:48 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: ByO5JvSyMzmC0bHRPbMkkRu5FMgH6+CSh1+W6PRwMIQ=)
                          2: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: fR2xj1lTYk/calodfmPwtM4tuJ3kJNQbL08yi/tixBk=)
                          3: 5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (hash: N1a96Bp2XVma17pAfKJ5UoTb8QNj5J00c+8i+FNuIr8=)
                          4: 37B8851C654F11EFACFE1271C4F9AE02.roa (hash: y+okfpFT9YQpp93U2rW8OrppiuNopYjPz1OoR+Qnj2I=)
                          5: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: O3rOOeO9NEzWJisf/+SOItZOvkqX45T7Wsg+v5VOxko=)
                          6: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: 6Ughghag3M8XhF1VC7toIjsEX2pbDgfCtKXqxIceVlE=)
                          7: 379554D48E1211EFA0811E85C4F9AE02.roa (hash: ubntMGEtsmJDayuN/fPiGesqsNLnJAjuBP/Ai5jrH54=)
                          8: 2B535080E79B11EFB484D12EC4F9AE02.roa (hash: 0mC2d1pKz3Ej2zdvc2c87tYlc2CwYMMrgRKwXFKDado=)
                          9: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: KJ1ieShxvJs7gtOWoATO3HHi/9GVv+NZW0fG46TDOMw=)
                          10: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: /VebVtB2gpNWgw6ZNvTnR7uVpqvqNucFCcPHuD6Y3mY=)
                          11: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: IUEGnMjhBVnMZEjQ10jBhTDL+8RYPNGkjfY7kR3frjU=)
                          12: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: M40kD4TonG66uQYOaNCDeRUYMjqNRbMx31D02gr8fIs=)
                          13: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: 3ufFCR0mW9We+QnFQyOrOJsAywnDfn399/eLRRaKPto=)
                          14: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: oHo+ECJ/O1skTItJ3ufCELPifI57mULmbgxvGySOHrQ=)
                          15: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: MlrQFyNLV1dCVem/E1LF0TFmlekJWbf+VquXYnzkE0Q=)
                          16: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: KH4rcNSGK8tfemYYCLk11pmTNCXkiMJ76KYgISb1Hbw=)
                          17: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: 7pdFtjbSd0Y1musq+ELiSsGGWOchEoOsPebzMdEXDYo=)
                          18: 77F51DD83E0911EF9DC1A672C4F9AE02.roa (hash: 8U8ZGPRo8beOsdQqpoi6X8/fktuoA/yEdND3FwBKF+4=)
                          19: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: X4al7H6IZSpYOvqbpk8SYUAtrzrPLIqb68yIaC4bU/g=)
                          20: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: naq1UTFOTQIUq/99ZMv/5vXqPtne6ABUFWpYSLPsFo8=)
                          21: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: S2wRNHs16NkpQF0OE9CM/o0odvQGGIVO/+whEFrHXvs=)
                          22: E681416041C511E8BEC06D36C4F9AE02.roa (hash: Aq8N32XCDQtm390Wh19k1JiANhhFcfcimlqHuKEmpuE=)
                          23: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: WoUqfiV+tV6yzbH+6jqVyv24NMrJDdeNkBAHt7u3Kjc=)
                          24: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: rrFxKMNHt6Da3tKr2QWL8PJYOwfJNrVpuX5Yg/MllpQ=)
                          25: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: pSBLALWoX/QA1UpmUqJuxZj3/DOKz/+vSP1r2OR1VGg=)
                          26: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: I9RlqzrRC4NcmfUDKYCrUBw08VKq1V3OwJl6oMNXL/w=)
                          27: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: 2mOBehSzLOlEg6pGYtKJCOTxBEzrN5z5JgbqhAtegiQ=)
                          28: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: dYqA1V20wUtpH9KFdWjPotxYVj54QCPCzHHSDznMpdA=)
                          29: 350965D2992511EC94DB646EC4F9AE02.roa (hash: WTyE6rqSY4kQszGX6OaOQtHFnpElpKKF9/fDHZfzs04=)
                          30: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: 2t6/u72QK0o9abc9b3gHwjINMJOQ+vO/4rSwciknXYA=)
                          31: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: 1MhKVBhr1FCIE3XbyfyWxNr/PnCFcrhIAXC4C0I8mSE=)
                          32: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: niYna16irNRlmtZBxpyRCeAt3hJM5mxYia++PzmxkvU=)
                          33: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: W9ilJtbT3FDU8uYNWjyd/M47AQmFUh7MF5YPFTJXpFc=)
                          34: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: sQcoDhsToQEcNc7mGLyNVTMohSNaCdO8Q2BiVsleK/Q=)
                          35: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: r+C29yNQnuCXTSlOlr8783OHQQCzhGmi0bueLCwhtlk=)
                          36: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: YFq4tFQJezE/ALaFyMp+nnLfcNS/HtcXxXHVD43k3+0=)
                          37: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: 8swv3q1tRdE2xBp1BoUrrmPLsnpo8tlJTWZhFkpp8i8=)
                          38: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: WmTnWIPsZp2UcbFbQSrNh3JjtjUu/r34W9RYX4KGK50=)
                          39: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: 4RqGixbnjiRWSSMZsz5o0Nq0vcwdxd+W6tsy/uuyKyU=)
                          40: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: IFtPxd0PbJXpFaQdQbABz/Z16kyTHun34h4YZ/3vB58=)
                          41: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: YPhjOopvSzxeO6gNqobHHt3HyijtcWsKn0RvJcxLbcg=)
                          42: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: wRsIwv4NjmsvKxxLiH5Bh2mSjLn4rzYVvPoe1UL163U=)
                          43: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: EyiUl8rn1/axxkgMbnkOT+Wbf/v6WSHnBy7rIZY/OMg=)
                          44: F47B2136202611F08C91C683C4F9AE02.roa (hash: McIIQJS116bi4A+eQiz0CorbxRZVxovY+3wZ/IF64OY=)
                          45: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: +61zTYCbrxg0lkvEU/Xhwnx/hk0Ph488BDSE+C5qPdU=)
                          46: 5C61E59E342911F09B7E033FC4F9AE02.roa (hash: daPM14StaLBSEpKpLWzwl0jfYPLnAS0ot/OLcvdSgSU=)
                          47: 406928720A2411F0A2D02B4AC4F9AE02.roa (hash: 8eGArVfOYdSLWSO+FANax1XLurPiLwrIrNraHvUnN6M=)
                          48: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: SlMnGnHGJTw9zh4hOi0MJHciRJEwPALAOUFD/r39IJA=)
                          49: 411624587D2511ECA2A43549C4F9AE02.roa (hash: GuJ4Y9sxp8o3CdlaaRs5rN2aTj9swH/QSPmwZPnS9dA=)
                          50: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: YRVaEUusWJq/ShGXF2klZ+EodQBt+/mcs3ozyyb/SRc=)
                          51: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: dLiidGD52YhEOtrfUqtoyoifYgO6MY+DC3Q5pFAWJhA=)
                          52: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: ZHTFf5tkp7gWskGYBVALUf3aVcOVqIc2MqsjL2pd7dg=)
                          53: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: Ny46hTdCHTic/U8tcqJUxV4zkHEnXaL+aV1UVZePGUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10433 (0x28c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Oct 18 15:59:48 2025 GMT
            Not After : Oct 25 15:59:48 2025 GMT
        Subject: CN=68f3b975-b0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:ff:35:d5:89:83:41:ac:23:f1:df:58:38:
                    5d:45:a2:84:eb:8d:34:a0:d7:f1:f1:f0:5b:8b:d6:
                    c6:0b:ad:61:84:31:0b:50:48:13:f3:e3:3c:22:3a:
                    ea:50:c8:38:0f:fc:90:87:ed:0f:4a:0a:e9:a7:cf:
                    a7:4c:d6:6d:b3:e3:f7:1a:c1:a4:95:99:12:07:92:
                    1e:3b:91:32:7a:b3:d9:63:8d:d9:c3:1e:22:9e:25:
                    29:6e:f6:c7:9e:74:2c:9d:38:18:10:b1:b0:77:df:
                    62:43:e7:48:16:c6:08:25:98:49:5a:b1:24:79:1d:
                    35:d1:9c:fc:73:51:3d:2a:66:2b:ae:0b:9b:16:33:
                    4e:53:7f:be:2d:56:07:3c:6c:7d:ad:d0:81:af:04:
                    6a:5e:57:34:1e:f7:23:98:43:45:8a:d3:0c:57:3b:
                    d7:8d:e6:c7:19:e0:ed:14:72:5f:18:a6:f9:35:4b:
                    fb:7a:61:36:0a:07:88:30:3e:8e:ec:35:15:db:d6:
                    01:7d:98:de:97:33:7b:28:d8:43:e6:ba:33:f7:bb:
                    e4:d9:67:3c:1f:5e:4a:24:f0:2a:3d:4e:03:92:05:
                    b3:c1:7d:a5:f7:20:75:1d:b6:0a:c8:2d:1a:f7:58:
                    e6:35:3a:98:f9:86:d4:a6:c9:31:f6:66:c1:3f:7a:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:AE:EE:43:3B:94:38:7C:E6:AA:3E:DC:1C:0F:D3:A2:12:8E:93
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:ca:a1:5c:ca:08:25:a4:b3:94:eb:53:17:6e:bb:15:dd:
         b7:28:17:69:7f:94:3f:98:16:3a:90:65:b3:79:a8:53:1b:4d:
         d0:f2:d3:4a:12:4d:07:f0:4e:c3:17:6d:c3:73:ce:35:5f:23:
         26:c7:98:60:97:5e:54:30:f4:c1:93:d6:91:90:39:dd:8a:a2:
         f4:bf:0b:2a:c7:cf:fb:43:b5:12:e0:3e:9a:8f:c4:2b:5f:07:
         76:0f:a2:44:d4:b5:08:c4:6a:fc:ae:f7:b5:1b:cd:18:df:b7:
         c4:d6:4a:cb:49:b9:6a:9d:45:fb:48:13:0b:57:00:4d:d8:49:
         b3:98:5a:11:4b:88:73:6b:34:6e:1d:5c:ce:d8:47:de:43:d3:
         fe:8c:4b:f2:30:02:1d:55:6f:34:82:2e:74:f9:49:cf:2a:62:
         1b:f8:13:75:96:b0:a3:d9:8d:01:9e:f5:1f:0d:b8:8c:24:2f:
         c1:f1:95:60:a6:fc:ef:68:b1:31:6f:d2:82:be:5f:98:14:82:
         bf:5b:f8:60:d3:69:cd:e2:34:1f:50:05:e0:52:e5:fd:24:53:
         c9:9d:d6:3d:87:6f:b2:10:2f:43:5d:00:9c:d3:5d:70:bf:cd:
         34:3d:4c:d9:a4:ae:5b:64:a0:ea:3d:d1:a6:45:73:4e:a9:3f:
         f3:4d:4c:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICKMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUxMDE4MTU1OTQ4WhcNMjUxMDI1MTU1OTQ4WjAYMRYwFAYD
VQQDEw02OGYzYjk3NS1iMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApBr/NdWJg0GsI/HfWDhdRaKE6400oNfx8fBbi9bGC61hhDELUEgT8+M8Ijrq
UMg4D/yQh+0PSgrpp8+nTNZts+P3GsGklZkSB5IeO5EyerPZY43Zwx4iniUpbvbH
nnQsnTgYELGwd99iQ+dIFsYIJZhJWrEkeR010Zz8c1E9KmYrrgubFjNOU3++LVYH
PGx9rdCBrwRqXlc0HvcjmENFitMMVzvXjebHGeDtFHJfGKb5NUv7emE2CgeIMD6O
7DUV29YBfZjelzN7KNhD5roz97vk2Wc8H15KJPAqPU4DkgWzwX2l9yB1HbYKyC0a
91jmNTqY+YbUpskx9mbBP3pWSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVUru5D
O5Q4fOaqPtwcD9OiEo6TMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzI4RC9CREFCNjdGNjNBODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVy
UUJsYVdRSlBTM1VJWTlQWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfJsqhXMoIJaSzlOtTF267Fd23KBdpf5Q/mBY6kGWzeahTG03Q8tNK
Ek0H8E7DF23Dc841XyMmx5hgl15UMPTBk9aRkDndiqL0vwsqx8/7Q7US4D6aj8Qr
Xwd2D6JE1LUIxGr8rve1G80Y37fE1krLSblqnUX7SBMLVwBN2EmzmFoRS4hzazRu
HVzO2EfeQ9P+jEvyMAIdVW80gi50+UnPKmIb+BN1lrCj2Y0BnvUfDbiMJC/B8ZVg
pvzvaLExb9KCvl+YFIK/W/hg02nN4jQfUAXgUuX9JFPJndY9h2+yEC9DXQCc011w
v800PUzZpK5bZKDqPdGmRXNOqT/zTUx1
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:45 2025 by rpki-client