Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
File:                     RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json)
Hash identifier:          3mViep/EykEh4HQX3Y6IxhzbAaaT3KwKLQC0m/9YV3s=
Subject key identifier:   18:97:95:2B:AE:84:4C:28:A9:5A:CE:CA:53:13:E7:CD:32:18:F8:40
Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7
Certificate issuer:       /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
Certificate serial:       0A66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
Manifest number:          0A60
Signing time:             Sat 18 Oct 2025 20:37:53 +0000
Manifest this update:     Sat 18 Oct 2025 20:37:52 +0000
Manifest next update:     Sat 25 Oct 2025 20:37:52 +0000
Files and hashes:         1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: CXMUvIkajMBqEwKh/ig8dILbYPuWlTodVaHZztpgP5k=)
                          2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl
                          rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2662 (0xa66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
        Validity
            Not Before: Oct 18 20:37:52 2025 GMT
            Not After : Oct 25 20:37:52 2025 GMT
        Subject: CN=68f3faa1-2767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:d0:32:f3:1c:67:61:a1:39:c8:c3:6d:a4:
                    4b:98:a7:63:a5:e2:1c:5a:d4:e5:56:d2:84:a5:32:
                    6a:ff:6a:2b:7c:b1:96:10:07:f4:9e:be:30:58:8b:
                    2b:f7:86:5d:4c:06:8c:cb:6b:4a:7f:d8:c8:31:c8:
                    4f:3c:69:92:75:44:79:51:65:0b:ae:1c:30:ba:ce:
                    98:81:7b:80:20:9f:21:58:cc:26:36:c6:35:ea:c2:
                    8e:22:07:1a:4c:b5:12:8b:91:cf:44:e9:42:52:a4:
                    bc:8c:fc:aa:cf:5d:3c:8d:c0:46:91:5c:71:88:4a:
                    54:62:2c:6d:9d:c8:38:50:d4:0c:de:37:c2:b4:8f:
                    cb:7c:0d:87:bb:42:9c:97:7d:aa:d0:72:20:1d:c4:
                    2d:07:90:bb:2d:1c:97:47:9c:63:48:97:58:b0:c9:
                    b2:1c:26:6b:af:8c:88:9e:8b:eb:10:cf:c6:d9:c4:
                    2f:e3:d9:07:86:a5:07:66:31:d3:ad:c4:16:9c:eb:
                    0c:5b:87:ce:49:4f:04:a4:5a:f5:de:97:a4:67:e1:
                    5c:8b:0b:78:c5:a6:5c:6d:71:6e:2c:2e:f2:c8:5c:
                    f5:ca:c0:11:82:3c:29:83:6a:d7:8f:ec:2c:77:35:
                    e0:00:8f:94:8e:21:b5:7c:75:78:40:e4:71:e0:6b:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:95:2B:AE:84:4C:28:A9:5A:CE:CA:53:13:E7:CD:32:18:F8:40
            X509v3 Authority Key Identifier:
                keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:c9:69:27:2c:74:ab:57:40:97:b7:13:17:2c:2f:b3:a5:f0:
         77:0f:6b:4e:86:b6:ce:60:56:c8:07:89:e7:51:a0:78:03:e6:
         db:70:f9:c8:76:6a:66:cc:84:ea:59:d8:70:38:c1:35:33:c2:
         da:84:16:7d:f1:58:e4:6d:23:7f:92:d1:d3:64:b1:5a:ea:f7:
         40:3a:ed:ff:ae:fd:3f:2e:44:3a:27:d1:90:6d:ae:0f:c7:d6:
         92:5a:91:86:a3:ba:0d:08:db:4c:8f:7e:ee:88:87:01:9b:d8:
         43:17:79:f2:28:32:cb:9b:a6:5a:1b:6e:b2:a2:63:04:e9:77:
         0e:0d:8c:61:f5:ab:53:75:ea:21:19:5b:47:ef:f6:ab:4e:cf:
         3b:01:ec:95:aa:8c:5c:1d:11:bd:76:72:a3:d0:e9:fc:86:80:
         fb:43:44:2f:7b:a0:cb:51:3e:81:29:86:8f:53:48:23:08:48:
         64:25:cf:ea:a7:5f:60:64:40:e9:e4:c9:c7:da:22:fc:8d:e7:
         17:51:c5:81:fe:92:ea:f1:49:f4:1b:9b:54:4f:71:ba:46:e5:
         05:8f:62:27:bd:11:8d:05:f2:ec:40:25:2e:35:0f:91:20:32:
         ef:c2:2d:8e:96:73:2e:b5:02:d1:be:fd:41:ca:05:a5:e1:70:
         08:4a:de:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2
QzczMUZCQTcwHhcNMjUxMDE4MjAzNzUyWhcNMjUxMDI1MjAzNzUyWjAYMRYwFAYD
VQQDEw02OGYzZmFhMS0yNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAocDQMvMcZ2GhOcjDbaRLmKdjpeIcWtTlVtKEpTJq/2orfLGWEAf0nr4wWIsr
94ZdTAaMy2tKf9jIMchPPGmSdUR5UWULrhwwus6YgXuAIJ8hWMwmNsY16sKOIgca
TLUSi5HPROlCUqS8jPyqz108jcBGkVxxiEpUYixtncg4UNQM3jfCtI/LfA2Hu0Kc
l32q0HIgHcQtB5C7LRyXR5xjSJdYsMmyHCZrr4yInovrEM/G2cQv49kHhqUHZjHT
rcQWnOsMW4fOSU8EpFr13pekZ+Fciwt4xaZcbXFuLC7yyFz1ysARgjwpg2rXj+ws
dzXgAI+UjiG1fHV4QORx4GtErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiXlSuu
hEwoqVrOylMT580yGPhAMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx
OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H
YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDIyWknLHSrV0CXtxMXLC+zpfB3D2tOhrbOYFbIB4nnUaB4A+bbcPnI
dmpmzITqWdhwOME1M8LahBZ98VjkbSN/ktHTZLFa6vdAOu3/rv0/LkQ6J9GQba4P
x9aSWpGGo7oNCNtMj37uiIcBm9hDF3nyKDLLm6ZaG26yomME6XcODYxh9atTdeoh
GVtH7/arTs87AeyVqoxcHRG9dnKj0On8hoD7Q0Qve6DLUT6BKYaPU0gjCEhkJc/q
p19gZEDp5MnH2iL8jecXUcWB/pLq8Un0G5tUT3G6RuUFj2InvRGNBfLsQCUuNQ+R
IDLvwi2OlnMutQLRvv1BygWl4XAISt5b
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:38 2025 by rpki-client