Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
File:                     AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json)
Hash identifier:          SduWozrtoVpgfTA7MUiPXJbQL4QbYchwjq/mBCpk45I=
Subject key identifier:   08:8B:2D:AF:3A:C7:8D:FF:58:1E:12:26:7E:C1:C4:32:1D:E2:D2:53
Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
Certificate issuer:       /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Certificate serial:       052E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
Manifest number:          0730
Signing time:             Sun 19 Oct 2025 01:17:00 +0000
Manifest this update:     Sun 19 Oct 2025 01:17:00 +0000
Manifest next update:     Sun 26 Oct 2025 01:17:00 +0000
Files and hashes:         1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: 71tRnQ7XsO1OVLR+Hf4eDQguFZYDi9uzYcUxGPvyCn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
        Validity
            Not Before: Oct 19 01:17:00 2025 GMT
            Not After : Oct 26 01:17:00 2025 GMT
        Subject: CN=68f43c0c-c155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:12:36:76:ab:66:05:52:37:e6:0a:14:2a:
                    47:c7:4d:ee:7a:9f:b1:ca:77:14:e2:e8:28:5d:61:
                    38:86:f9:d8:a3:fd:ea:49:5a:a9:b4:d6:15:59:1c:
                    50:75:9e:e5:c7:50:46:e3:a1:33:6b:bf:a1:99:44:
                    68:7b:b6:ce:3f:bb:33:2f:aa:c5:1e:e5:b4:5c:4d:
                    7c:db:15:79:ca:7a:c9:e0:e9:1e:9e:1f:08:aa:56:
                    82:0c:55:24:cd:5b:dd:82:83:65:2f:f4:d4:6f:db:
                    a1:46:e4:17:48:ea:80:e0:1c:5c:7b:f8:55:e4:7c:
                    fa:68:9a:58:b5:4a:a0:26:a2:49:9b:29:e3:27:04:
                    05:b1:33:1c:e7:a7:b7:aa:f4:5c:e1:ff:22:73:41:
                    27:b5:21:1e:3a:c1:10:c2:25:90:c2:15:e6:b1:7b:
                    52:a9:41:50:0b:1e:25:01:dd:ad:13:90:be:e8:3c:
                    ed:63:2f:ae:bb:ad:02:ee:4a:57:93:f0:3d:12:ac:
                    42:a2:fe:ab:bb:c0:9f:78:51:45:34:aa:86:8d:3b:
                    78:60:0d:54:79:fd:df:ef:59:74:c3:9b:18:8e:95:
                    c1:5e:f6:79:7c:e2:af:f0:03:76:a3:94:5f:84:fb:
                    90:db:75:a2:8f:d1:69:d7:7e:41:44:fc:4c:42:bd:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:2D:AF:3A:C7:8D:FF:58:1E:12:26:7E:C1:C4:32:1D:E2:D2:53
            X509v3 Authority Key Identifier:
                keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:3e:53:0a:4b:f8:c2:e2:98:b3:c0:21:37:d5:e0:75:b2:
         a0:d7:86:fb:62:2d:16:34:2e:a8:9a:4e:2f:36:93:13:02:50:
         d5:15:61:ce:15:38:b9:52:34:df:fb:4a:ab:39:2a:ec:c1:28:
         db:ab:2d:eb:f8:b2:5b:78:83:fa:0f:ef:24:bb:ef:82:88:fd:
         92:e7:53:aa:9f:84:bb:f1:ed:af:bf:2d:26:ce:95:95:95:02:
         f8:1f:4e:8c:ee:e9:68:80:59:49:14:df:6f:72:9f:8a:c5:61:
         e0:cb:b6:3a:ca:a8:5c:37:15:24:99:ef:8e:0a:c5:fa:b5:ca:
         43:3b:db:1a:25:04:89:87:11:49:36:6a:80:3d:08:b5:16:93:
         5e:51:c3:d7:33:88:53:2a:66:2f:f7:61:3b:8e:9f:47:ed:9a:
         79:c3:cb:c4:8b:97:13:a1:46:ea:80:f8:e3:9a:3e:36:92:8e:
         87:b7:86:40:ee:d7:63:3b:4e:ba:46:27:8f:47:d9:69:8a:a5:
         6d:fa:8e:1b:42:f8:2d:12:47:e4:13:71:9b:e4:de:86:ff:f6:
         52:0f:d5:28:ec:8d:b1:cb:83:4d:f7:5c:82:ca:81:d4:6b:96:
         4e:59:05:9e:a9:b8:ab:cf:8b:ed:e1:7b:28:fb:b2:cc:b6:7a:
         4c:e6:26:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1
OERGMDVBOEEwHhcNMjUxMDE5MDExNzAwWhcNMjUxMDI2MDExNzAwWjAYMRYwFAYD
VQQDEw02OGY0M2MwYy1jMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq3ASNnarZgVSN+YKFCpHx03uep+xyncU4ugoXWE4hvnYo/3qSVqptNYVWRxQ
dZ7lx1BG46Eza7+hmURoe7bOP7szL6rFHuW0XE182xV5ynrJ4Okenh8IqlaCDFUk
zVvdgoNlL/TUb9uhRuQXSOqA4Bxce/hV5Hz6aJpYtUqgJqJJmynjJwQFsTMc56e3
qvRc4f8ic0EntSEeOsEQwiWQwhXmsXtSqUFQCx4lAd2tE5C+6DztYy+uu60C7kpX
k/A9EqxCov6ru8CfeFFFNKqGjTt4YA1Uef3f71l0w5sYjpXBXvZ5fOKv8AN2o5Rf
hPuQ23Wij9Fp135BRPxMQr0qswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiLLa86
x43/WB4SJn7BxDId4tJTMB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC
QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz
ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLxD5TCkv4wuKYs8AhN9XgdbKg14b7Yi0WNC6omk4vNpMTAlDVFWHO
FTi5UjTf+0qrOSrswSjbqy3r+LJbeIP6D+8ku++CiP2S51Oqn4S78e2vvy0mzpWV
lQL4H06M7ulogFlJFN9vcp+KxWHgy7Y6yqhcNxUkme+OCsX6tcpDO9saJQSJhxFJ
NmqAPQi1FpNeUcPXM4hTKmYv92E7jp9H7Zp5w8vEi5cToUbqgPjjmj42ko6Ht4ZA
7tdjO066RiePR9lpiqVt+o4bQvgtEkfkE3Gb5N6G//ZSD9Uo7I2xy4NN91yCyoHU
a5ZOWQWeqbirz4vt4Xso+7LMtnpM5ibR
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:11 2025 by rpki-client