Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File:                     UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier:          TBdJ6HRK1SaEPQrSO6C3xeqOUVG8RQq0Gmxi0rJrKfw=
Subject key identifier:   EA:FB:94:B6:2B:4C:B7:39:D0:A3:F0:8E:CC:E3:1C:51:91:AD:7B:90
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number:          096F
Signing time:             Sat 18 Oct 2025 21:17:59 +0000
Manifest this update:     Sat 18 Oct 2025 21:17:59 +0000
Manifest next update:     Sat 25 Oct 2025 21:17:59 +0000
Files and hashes:         1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: Od3duCVZV7ifRhnLMJRvitMKTZhjqE9TLtkM4GQCQZY=)
                          2: 11DBC0ACEB3211EFBDFC3E0FC4F9AE02.roa (hash: zYdZV0PmY995jxBgObVxrNeEKm4srCzVt7whFrsxdT8=)
                          3: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: nXVtsybD/p0SClRwWP9c2+ZIMGXniljjDK2EFaKpa7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Oct 18 21:17:59 2025 GMT
            Not After : Oct 25 21:17:59 2025 GMT
        Subject: CN=68f40407-8542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:10:91:b0:ec:fa:fb:58:55:9b:45:03:ef:
                    10:11:a1:eb:fb:33:4c:c7:d2:f2:ed:c3:3e:51:8c:
                    02:c8:85:fe:b4:6b:7a:5e:08:6d:7f:a3:84:d1:de:
                    1a:1f:8c:ef:df:17:dd:71:1c:5d:13:19:08:a4:e5:
                    39:1f:a8:29:21:37:63:3d:89:90:80:fe:ce:4d:87:
                    9b:3c:12:67:9c:6a:2d:df:56:58:49:2e:02:59:62:
                    e1:87:1b:a1:d9:a1:e9:ed:f5:cb:c6:2a:4c:89:86:
                    e8:07:8c:ee:e9:cb:92:6f:af:e3:0b:c0:f1:6e:19:
                    ab:b3:13:bf:25:fc:d7:21:aa:7c:1e:cb:e2:17:1c:
                    1d:01:95:24:7e:fa:63:9d:42:b8:b7:55:ae:bd:17:
                    08:52:97:e6:77:be:c1:ee:e0:69:79:61:5b:fe:99:
                    2d:3b:ba:2a:9a:96:99:7d:5e:2b:cc:66:a4:d3:9a:
                    2e:31:99:68:9f:81:29:0c:2b:f4:56:12:5e:09:af:
                    cf:3d:6f:bb:bd:c5:17:6e:4f:59:ba:46:b8:71:ac:
                    df:88:40:6c:f0:f9:40:93:36:c0:a4:70:0e:6d:06:
                    46:42:20:6f:ed:b8:23:64:28:dd:f9:5e:6f:d5:a3:
                    c1:d1:eb:c8:7c:f2:0e:7b:82:c3:9d:d8:65:b0:87:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:94:B6:2B:4C:B7:39:D0:A3:F0:8E:CC:E3:1C:51:91:AD:7B:90
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:5d:41:05:9f:9f:43:0c:21:0d:17:e2:63:7d:ca:e7:57:
         95:0a:d7:2d:d1:8f:62:36:08:17:1f:ae:f1:66:67:21:db:bc:
         03:39:70:e5:53:21:02:02:4f:1f:a1:91:0b:29:df:36:84:b8:
         66:42:5f:82:2a:78:33:63:90:1b:de:96:68:97:f6:e2:3a:0b:
         20:bc:1e:03:75:ea:ae:2e:f5:0e:9a:e4:14:6d:82:f8:f5:62:
         6b:3d:1f:27:f4:ab:a3:42:19:cb:04:5b:3f:b2:5f:79:da:e0:
         88:c7:48:9b:52:4d:8e:a3:14:bf:72:e9:b9:6a:10:38:77:cb:
         8e:ce:80:9b:0d:5a:80:c4:2e:49:95:2b:a0:71:93:63:01:18:
         4f:e7:84:ba:15:ec:d4:4b:f7:fc:d3:73:17:d4:48:eb:db:2d:
         11:00:a6:2f:87:e1:fb:09:9b:ff:89:fc:53:f8:1a:c3:fb:9f:
         77:3d:b4:56:36:b1:d4:ed:ec:2e:01:ce:55:7f:d6:f3:ae:67:
         ce:01:3b:ef:e9:2e:d4:5b:a1:06:6d:bd:b2:99:f6:eb:c7:ae:
         cf:c8:60:83:17:6e:90:55:a4:27:95:da:0d:f0:23:4b:a7:85:
         b5:8e:e7:c3:e0:4b:dd:f5:b2:2a:ab:59:95:79:2e:92:4c:f1:
         b6:f4:aa:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3
QTI2REJEMjUwHhcNMjUxMDE4MjExNzU5WhcNMjUxMDI1MjExNzU5WjAYMRYwFAYD
VQQDEw02OGY0MDQwNy04NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrgQkbDs+vtYVZtFA+8QEaHr+zNMx9Ly7cM+UYwCyIX+tGt6Xghtf6OE0d4a
H4zv3xfdcRxdExkIpOU5H6gpITdjPYmQgP7OTYebPBJnnGot31ZYSS4CWWLhhxuh
2aHp7fXLxipMiYboB4zu6cuSb6/jC8DxbhmrsxO/JfzXIap8HsviFxwdAZUkfvpj
nUK4t1WuvRcIUpfmd77B7uBpeWFb/pktO7oqmpaZfV4rzGak05ouMZlon4EpDCv0
VhJeCa/PPW+7vcUXbk9Zuka4cazfiEBs8PlAkzbApHAObQZGQiBv7bgjZCjd+V5v
1aPB0evIfPIOe4LDndhlsIcBdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr7lLYr
TLc50KPwjszjHFGRrXuQMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC
OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS
MzZWczRKN1RZZXQ2SnR2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfqF1BBZ+fQwwhDRfiY33K51eVCtct0Y9iNggXH67xZmch27wDOXDl
UyECAk8foZELKd82hLhmQl+CKngzY5Ab3pZol/biOgsgvB4DdequLvUOmuQUbYL4
9WJrPR8n9KujQhnLBFs/sl952uCIx0ibUk2OoxS/cum5ahA4d8uOzoCbDVqAxC5J
lSugcZNjARhP54S6FezUS/f803MX1Ejr2y0RAKYvh+H7CZv/ifxT+BrD+593PbRW
NrHU7ewuAc5Vf9bzrmfOATvv6S7UW6EGbb2ymfbrx67PyGCDF26QVaQnldoN8CNL
p4W1jufD4Evd9bIqq1mVeS6STPG29KrF
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:31 2025 by rpki-client