Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
File:                     aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json)
Hash identifier:          H9/9oyiqpXePebBTM3x0GkdbTXGh6EXVCDHkYmwq+rU=
Subject key identifier:   D0:F4:43:0C:EF:E4:43:BA:1D:C7:3E:4F:A1:15:C9:70:3C:C5:16:25
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Certificate issuer:       /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
Manifest number:          0130
Signing time:             Sun 19 Oct 2025 07:26:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:26:24 +0000
Manifest next update:     Sun 26 Oct 2025 07:26:24 +0000
Files and hashes:         1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: n3WAUwUq2lkWTirk6wOa2GVr2f55Eg2B8X7ZDK4conY=)
                          2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: WBqt8bWcN7f1UBdrAmgdhcX9VMn7anvz2CtIGPkbbz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
                          rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
        Validity
            Not Before: Oct 19 07:26:24 2025 GMT
            Not After : Oct 26 07:26:24 2025 GMT
        Subject: CN=68f492a0-9a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:e3:50:07:c0:4b:0c:13:42:fa:31:8e:f8:
                    98:3e:67:c1:31:5c:d7:3a:c7:61:f1:f8:93:1b:a3:
                    8b:a4:43:80:54:4a:fb:be:ac:b0:6e:bc:9f:29:75:
                    13:d2:25:6d:fe:eb:71:de:75:b8:15:b3:b7:59:93:
                    4e:e2:c8:84:9c:82:06:2e:dc:cb:14:53:2e:f7:07:
                    e1:a7:7f:aa:5b:40:31:62:98:8b:be:f0:fe:47:9c:
                    14:c9:aa:42:05:c8:d2:28:4a:68:cf:d2:3e:34:12:
                    29:fd:ea:d6:aa:cb:73:fe:e4:9e:de:0b:cf:d1:65:
                    8c:e1:15:84:14:02:e8:75:ca:e2:00:88:3c:3d:2f:
                    8c:45:2a:0e:cf:71:4b:59:b8:09:43:dd:66:76:3f:
                    7b:9f:ca:31:18:dd:25:48:8a:93:3f:2f:97:7b:ba:
                    e1:48:19:5b:5b:25:9a:bb:d4:0d:08:79:5e:47:f8:
                    25:8b:f4:3b:c1:29:e3:a3:85:ce:b2:bd:7e:db:5c:
                    c3:87:53:f0:20:28:cd:98:f5:e5:6d:2b:af:7e:7f:
                    06:95:6a:dc:ff:bf:8c:24:13:87:d4:74:c6:ca:dd:
                    0b:72:a1:8d:4d:86:3f:95:7e:77:f2:09:69:8b:9f:
                    f3:96:ff:e9:c6:a4:35:11:67:60:ac:44:fb:9c:f5:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F4:43:0C:EF:E4:43:BA:1D:C7:3E:4F:A1:15:C9:70:3C:C5:16:25
            X509v3 Authority Key Identifier:
                keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:33:ee:57:c6:05:24:35:93:2e:0a:ce:0f:bd:3e:92:ca:
         ca:de:cf:9c:dc:8a:c7:9c:b1:13:39:b4:b1:d7:ee:ca:70:30:
         cc:aa:42:b4:79:c8:9f:e1:9e:b8:b4:b8:59:b7:19:3f:71:f1:
         44:6c:1d:95:44:13:e9:34:22:f5:a4:67:3e:99:0a:22:aa:e0:
         28:c3:2f:cb:86:e1:a2:a3:53:29:4e:02:93:65:13:60:63:09:
         dd:fb:f2:24:43:be:64:9b:71:c7:94:26:c2:4b:0b:09:06:c4:
         4e:e7:20:b0:96:3a:50:59:c7:98:0e:c0:4a:51:b5:6b:7d:02:
         21:19:a2:8c:81:9e:92:19:3a:01:b5:dc:aa:a2:81:8a:f6:fc:
         c5:8d:67:02:72:88:d2:0c:a7:f3:46:2f:f8:d0:77:ac:b4:b4:
         67:5d:32:77:04:1a:36:ca:2d:37:fb:ac:bf:c4:cf:f5:11:1e:
         10:5a:a5:b4:df:b8:3c:a1:77:26:d0:74:35:52:28:12:18:85:
         e7:30:a0:42:2a:fd:6d:08:ee:dc:88:fb:1d:67:4a:0e:da:56:
         96:2f:34:c4:b4:f7:63:70:05:cb:f7:fb:df:c8:4f:d6:e5:b8:
         e5:f6:2a:0c:ab:ed:a1:5f:54:b0:f2:5c:39:f0:2e:36:70:41:
         84:33:1e:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG
NDlFN0Q1RDAwHhcNMjUxMDE5MDcyNjI0WhcNMjUxMDI2MDcyNjI0WjAYMRYwFAYD
VQQDEw02OGY0OTJhMC05YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo07jUAfASwwTQvoxjviYPmfBMVzXOsdh8fiTG6OLpEOAVEr7vqywbryfKXUT
0iVt/utx3nW4FbO3WZNO4siEnIIGLtzLFFMu9wfhp3+qW0AxYpiLvvD+R5wUyapC
BcjSKEpoz9I+NBIp/erWqstz/uSe3gvP0WWM4RWEFALodcriAIg8PS+MRSoOz3FL
WbgJQ91mdj97n8oxGN0lSIqTPy+Xe7rhSBlbWyWau9QNCHleR/gli/Q7wSnjo4XO
sr1+21zDh1PwICjNmPXlbSuvfn8GlWrc/7+MJBOH1HTGyt0LcqGNTYY/lX538glp
i5/zlv/pxqQ1EWdgrET7nPXwlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFND0Qwzv
5EO6Hcc+T6EVyXA8xRYlMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy
OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L
eXRYeHpxTlFacnIwbm4xZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBm8TPuV8YFJDWTLgrOD70+ksrK3s+c3IrHnLETObSx1+7KcDDMqkK0
ecif4Z64tLhZtxk/cfFEbB2VRBPpNCL1pGc+mQoiquAowy/LhuGio1MpTgKTZRNg
Ywnd+/IkQ75km3HHlCbCSwsJBsRO5yCwljpQWceYDsBKUbVrfQIhGaKMgZ6SGToB
tdyqooGK9vzFjWcCcojSDKfzRi/40HestLRnXTJ3BBo2yi03+6y/xM/1ER4QWqW0
37g8oXcm0HQ1UigSGIXnMKBCKv1tCO7ciPsdZ0oO2laWLzTEtPdjcAXL9/vfyE/W
5bjl9ioMq+2hX1Sw8lw58C42cEGEMx7I
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:02 2025 by rpki-client