Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File:                     4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier:          wDznNRvdidobvwRWLWoX+K4h6klYBs2O6BQkDQDw94E=
Subject key identifier:   7F:B9:BE:8F:C5:80:47:B0:D3:0B:9D:AA:89:61:5D:8A:AA:85:14:4D
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer:       /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number:          01C2
Signing time:             Sun 19 Oct 2025 05:26:14 +0000
Manifest this update:     Sun 19 Oct 2025 05:26:12 +0000
Manifest next update:     Sun 26 Oct 2025 05:26:12 +0000
Files and hashes:         1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: fL//FP7Iy6vKRG6q0D/PLOApg2JJt10F8Uv13VsbkMo=)
                          2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
                          rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
        Validity
            Not Before: Oct 19 05:26:12 2025 GMT
            Not After : Oct 26 05:26:12 2025 GMT
        Subject: CN=68f47675-fb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:80:ad:f1:79:a2:d0:9f:41:98:b1:a8:3e:
                    96:0d:a6:de:7a:fb:e1:a0:89:2f:0d:48:83:99:1b:
                    18:9d:92:f3:cd:b7:5a:82:7c:aa:6f:36:fb:7c:70:
                    7c:23:5f:32:00:c3:b6:d6:59:db:83:17:43:81:e3:
                    65:18:50:2b:cb:7e:b1:a9:cb:ea:2d:dc:94:b8:77:
                    ba:3d:9e:5f:be:61:92:7b:31:81:49:4c:6f:92:b3:
                    d9:71:1a:11:43:e3:68:d5:e9:0b:aa:47:93:a2:11:
                    07:53:a8:7c:63:f0:96:6d:07:af:5b:48:1b:96:3b:
                    90:71:22:60:99:e2:0a:9e:6e:48:59:8b:e5:a9:db:
                    29:4b:7f:55:fb:e1:77:da:f9:b3:b2:47:fd:aa:14:
                    e7:7c:cd:c6:f8:ad:32:86:0e:ce:2b:44:08:8a:04:
                    1a:1f:c4:9a:0d:e2:67:a9:79:d6:ec:33:2f:d5:96:
                    82:70:13:61:d9:13:25:55:7a:6b:f8:60:7c:40:0e:
                    70:08:49:f0:02:e0:68:52:2b:36:63:a5:e2:e1:1d:
                    46:7d:88:d1:48:24:d7:b7:95:d6:0a:52:5b:58:bb:
                    16:21:96:b5:a8:b2:62:08:bf:6b:78:aa:1c:4d:21:
                    80:c5:2e:aa:08:fa:c9:0f:96:0b:c2:ef:4e:4c:24:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B9:BE:8F:C5:80:47:B0:D3:0B:9D:AA:89:61:5D:8A:AA:85:14:4D
            X509v3 Authority Key Identifier:
                keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:97:ae:91:30:04:99:b1:af:53:49:90:c0:3f:f2:80:81:0a:
         2b:4c:9f:7b:e7:99:51:e4:1a:0f:b9:99:de:7a:cd:38:b2:19:
         11:06:45:8d:06:bf:b0:c2:e6:ea:fb:e0:95:95:97:0c:6c:ef:
         82:7e:ce:9e:f7:db:3d:42:c6:83:36:f2:ac:cc:62:69:41:b4:
         a1:55:0b:2d:0e:e8:a6:a3:54:cb:4f:b3:77:15:1b:62:7e:b8:
         74:70:0f:6e:d1:da:8c:a8:17:35:a6:5c:fe:fb:ae:86:8e:6a:
         7c:6e:72:3e:07:84:ef:4a:32:58:5a:5a:34:33:08:63:e5:62:
         4e:72:22:88:72:74:34:74:2a:b8:83:90:a4:3c:09:3f:f7:08:
         e4:44:c1:bd:41:f7:1a:93:9e:2d:4e:62:5c:f0:5f:6e:2f:e0:
         ab:6b:ae:ee:17:ec:f2:be:1b:69:0f:32:ac:e2:77:1e:65:3d:
         be:70:00:d2:65:24:dd:d0:24:a8:96:fd:6b:23:ed:a2:17:29:
         d6:a7:5b:34:2c:2d:61:5e:0f:67:62:d7:de:28:50:48:89:20:
         fe:cf:c1:87:23:53:34:dd:be:9f:7f:52:03:ee:77:ef:fc:46:
         16:5a:5e:a3:d6:9d:24:9f:c1:0b:ff:c7:ed:9e:1a:82:c3:39:
         92:3f:2f:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD
MzY1NTREQUUwHhcNMjUxMDE5MDUyNjEyWhcNMjUxMDI2MDUyNjEyWjAYMRYwFAYD
VQQDEw02OGY0NzY3NS1mYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iKArfF5otCfQZixqD6WDabeevvhoIkvDUiDmRsYnZLzzbdagnyqbzb7fHB8
I18yAMO21lnbgxdDgeNlGFAry36xqcvqLdyUuHe6PZ5fvmGSezGBSUxvkrPZcRoR
Q+No1ekLqkeTohEHU6h8Y/CWbQevW0gbljuQcSJgmeIKnm5IWYvlqdspS39V++F3
2vmzskf9qhTnfM3G+K0yhg7OK0QIigQaH8SaDeJnqXnW7DMv1ZaCcBNh2RMlVXpr
+GB8QA5wCEnwAuBoUis2Y6Xi4R1GfYjRSCTXt5XWClJbWLsWIZa1qLJiCL9reKoc
TSGAxS6qCPrJD5YLwu9OTCRQnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+5vo/F
gEew0wudqolhXYqqhRRNMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB
Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n
TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBql66RMASZsa9TSZDAP/KAgQorTJ9755lR5BoPuZnees04shkRBkWN
Br+wwubq++CVlZcMbO+Cfs6e99s9QsaDNvKszGJpQbShVQstDuimo1TLT7N3FRti
frh0cA9u0dqMqBc1plz++66Gjmp8bnI+B4TvSjJYWlo0Mwhj5WJOciKIcnQ0dCq4
g5CkPAk/9wjkRMG9Qfcak54tTmJc8F9uL+Cra67uF+zyvhtpDzKs4nceZT2+cADS
ZSTd0CSolv1rI+2iFynWp1s0LC1hXg9nYtfeKFBIiSD+z8GHI1M03b6ff1ID7nfv
/EYWWl6j1p0kn8EL/8ftnhqCwzmSPy+G
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:46 2025 by rpki-client