Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File:                     dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier:          FofiwM+th8KL+b0QzaRRcTianQzQcpn0RTOAslGveZk=
Subject key identifier:   38:12:39:15:76:0B:0D:05:EA:50:C8:2D:36:65:30:05:AE:92:C6:09
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number:          0243
Signing time:             Sun 19 Oct 2025 04:11:15 +0000
Manifest this update:     Sun 19 Oct 2025 04:11:15 +0000
Manifest next update:     Sun 26 Oct 2025 04:11:15 +0000
Files and hashes:         1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: rWEBnJvARsPPiW8kUt+lv0R1V/TTIljcDHMV8keBGtM=)
                          2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: ICqDWqIBMrxZ5863INyqF5h5cmSlZ8OH5+rodgjND+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Oct 19 04:11:15 2025 GMT
            Not After : Oct 26 04:11:15 2025 GMT
        Subject: CN=68f464e3-b234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:a9:18:44:52:48:b2:53:07:f4:8d:60:17:
                    50:a3:e3:46:f7:c7:c2:6a:9f:a3:1a:ff:7a:1c:38:
                    80:3e:da:f5:15:47:b6:0a:6b:dd:2f:78:8f:59:74:
                    97:b4:98:b4:9a:25:c3:0c:a2:0e:ce:81:0d:51:01:
                    22:04:bf:33:90:a9:3e:02:16:8e:96:af:11:52:6b:
                    20:2d:58:f1:0b:46:e9:6c:43:b1:57:a7:c5:bd:cf:
                    e0:4b:e5:e3:4a:ea:6d:a8:93:40:c0:55:22:7f:5f:
                    80:9a:e6:84:9f:9a:01:63:55:e9:34:7d:e9:d4:5f:
                    04:d0:62:45:29:3c:1b:51:75:89:c9:ed:0e:1e:69:
                    62:96:00:ec:32:b7:0b:8f:9c:4a:17:99:94:20:50:
                    66:58:7f:64:c5:e5:1f:b3:69:29:40:4b:b4:50:63:
                    4f:4f:02:a9:57:30:26:88:cb:9a:c2:bc:97:82:96:
                    23:07:90:1a:9f:25:c8:1b:d3:47:c5:82:e7:1e:eb:
                    13:2c:03:1f:2e:28:52:71:9a:88:58:3c:f8:bd:5d:
                    98:23:7b:9d:9b:a4:91:e5:b2:44:4d:81:85:b7:82:
                    58:9e:f1:5c:f1:43:c7:db:58:8b:0e:aa:db:ce:cf:
                    24:2e:58:70:05:62:56:c8:c1:63:7f:bb:74:e5:09:
                    1b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:12:39:15:76:0B:0D:05:EA:50:C8:2D:36:65:30:05:AE:92:C6:09
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:98:45:17:b7:77:f5:ce:04:13:5e:2a:e9:ec:2f:c4:c6:82:
         65:54:a3:54:35:e8:55:7c:7a:48:35:56:ad:7e:a3:33:94:1d:
         60:75:3f:6e:91:6f:4a:d2:ac:2f:d4:72:19:fb:e5:7d:ca:1c:
         34:74:86:ad:f2:bb:ee:a6:17:d7:40:ed:05:27:a0:73:4a:f4:
         f7:90:02:41:e9:03:ff:7c:c8:e7:1b:4e:a5:5e:18:79:55:8e:
         4b:17:4a:1d:1e:5f:be:cd:b7:cc:6f:3d:fe:f3:20:6a:6e:c8:
         70:cd:b6:9a:e8:c4:e2:c8:cd:59:5e:2c:bf:28:89:56:0e:9e:
         fa:1d:0d:d6:50:d3:11:2e:a2:dd:f7:54:19:d4:12:db:e2:0e:
         f7:ae:68:0c:91:93:9f:96:23:9b:57:6b:1a:3a:3e:04:8b:40:
         60:85:39:99:c5:52:8e:18:e8:9a:b4:d6:44:fd:de:18:85:39:
         cf:d6:be:79:75:82:a4:e6:8c:dd:74:1b:9c:77:da:ac:16:38:
         94:5a:3b:9d:7d:8f:09:ad:d2:a7:52:7b:a8:15:78:64:4f:49:
         20:5d:3a:22:5a:16:9b:fd:ed:45:05:d9:35:1b:2d:aa:fc:66:
         f7:14:d4:60:8b:41:b4:6a:0c:f3:fc:14:7f:d2:84:08:a6:42:
         f4:7d:10:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4
OURBNkI3RTUwHhcNMjUxMDE5MDQxMTE1WhcNMjUxMDI2MDQxMTE1WjAYMRYwFAYD
VQQDEw02OGY0NjRlMy1iMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm1ipGERSSLJTB/SNYBdQo+NG98fCap+jGv96HDiAPtr1FUe2CmvdL3iPWXSX
tJi0miXDDKIOzoENUQEiBL8zkKk+AhaOlq8RUmsgLVjxC0bpbEOxV6fFvc/gS+Xj
SuptqJNAwFUif1+AmuaEn5oBY1XpNH3p1F8E0GJFKTwbUXWJye0OHmlilgDsMrcL
j5xKF5mUIFBmWH9kxeUfs2kpQEu0UGNPTwKpVzAmiMuawryXgpYjB5AanyXIG9NH
xYLnHusTLAMfLihScZqIWDz4vV2YI3udm6SR5bJETYGFt4JYnvFc8UPH21iLDqrb
zs8kLlhwBWJWyMFjf7t05QkbmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgSORV2
Cw0F6lDILTZlMAWuksYJMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2
QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i
MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgmEUXt3f1zgQTXirp7C/ExoJlVKNUNehVfHpINVatfqMzlB1gdT9u
kW9K0qwv1HIZ++V9yhw0dIat8rvuphfXQO0FJ6BzSvT3kAJB6QP/fMjnG06lXhh5
VY5LF0odHl++zbfMbz3+8yBqbshwzbaa6MTiyM1ZXiy/KIlWDp76HQ3WUNMRLqLd
91QZ1BLb4g73rmgMkZOfliObV2saOj4Ei0BghTmZxVKOGOiatNZE/d4YhTnP1r55
dYKk5ozddBucd9qsFjiUWjudfY8JrdKnUnuoFXhkT0kgXToiWhab/e1FBdk1Gy2q
/Gb3FNRgi0G0agzz/BR/0oQIpkL0fRDb
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:25 2025 by rpki-client