Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File:                     exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier:          hzpbQ93MpcOr7LcO5enHye4yL/KEX0E+O6Ao2Bf6k4Y=
Subject key identifier:   60:33:41:32:CE:26:F4:72:34:3D:CB:CA:9A:1D:66:74:3D:41:13:14
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number:          0235
Signing time:             Sun 19 Oct 2025 04:07:08 +0000
Manifest this update:     Sun 19 Oct 2025 04:07:08 +0000
Manifest next update:     Sun 26 Oct 2025 04:07:08 +0000
Files and hashes:         1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: csu1qy2pCPtr4iJwLwx/pd3CtSuhKpAF2akJxen1CdM=)
                          2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=)
                          3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Oct 19 04:07:08 2025 GMT
            Not After : Oct 26 04:07:08 2025 GMT
        Subject: CN=68f463ec-50fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:10:9f:a9:08:62:06:06:c0:9a:4c:ae:3b:
                    6f:f4:5f:be:77:0a:0d:7e:50:4f:74:1a:5a:4c:9d:
                    f9:62:ee:47:12:86:67:46:e8:15:83:b7:71:ff:6a:
                    59:fb:66:60:e7:29:fb:37:dd:de:ea:ea:52:54:84:
                    01:2d:f6:ae:bd:c1:d9:aa:7d:5f:96:1a:9e:3a:f7:
                    d4:60:6f:91:c5:22:42:13:f7:f2:58:10:c3:fb:8f:
                    ce:ff:02:bc:59:41:21:d0:61:62:52:19:32:a6:48:
                    a4:d2:a5:f0:6e:23:a0:82:75:98:da:7c:87:e6:72:
                    7d:6d:3b:4a:d7:69:44:99:3d:24:ff:ae:47:92:15:
                    00:26:e7:3d:58:9e:11:09:62:5f:0b:e5:10:78:3a:
                    4c:a5:bc:30:d9:f1:2b:ce:ec:b8:ed:79:c4:1c:a4:
                    dc:78:38:e1:79:c5:7c:b7:fc:a9:e1:70:6d:f1:c5:
                    db:8f:ed:57:cc:39:32:f2:22:f0:79:d8:f8:03:d9:
                    4a:7e:12:55:b8:dc:24:c9:69:85:e2:e5:a5:8f:34:
                    37:4a:a0:9b:84:81:7f:50:71:e7:21:8c:a5:14:28:
                    a4:a2:68:c3:3c:46:1e:d6:d6:ac:ec:ed:66:c5:5d:
                    b4:20:04:8a:cc:1a:c6:6b:cb:0a:77:d0:a0:97:e9:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:33:41:32:CE:26:F4:72:34:3D:CB:CA:9A:1D:66:74:3D:41:13:14
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4e:b8:82:d5:c9:06:9e:18:45:f1:0e:61:bf:64:0d:eb:b7:
         6b:b0:77:0a:bb:f8:ef:75:27:43:4e:8f:f1:c2:4e:e4:81:7e:
         be:2b:4d:a0:51:28:9d:0b:0e:8f:4b:5b:2e:4b:e0:77:78:e8:
         39:a5:f6:55:29:ec:0b:36:57:a3:62:84:f4:b9:7c:ed:1c:3b:
         58:e7:41:0d:d4:5c:e5:5a:52:6d:12:c8:0c:c8:ff:e9:b0:e5:
         36:73:28:17:f2:bc:41:dd:88:7e:3d:8c:90:af:4a:51:1a:f0:
         08:12:c3:60:be:dc:fa:55:0b:10:71:ff:f7:c5:20:c9:ea:c6:
         69:69:dd:4b:30:d7:ee:39:05:38:39:45:3c:47:11:bb:94:35:
         ef:fd:c2:36:78:61:3b:fa:f5:65:31:d3:55:da:64:77:a7:13:
         83:cc:3c:c1:ff:50:26:4d:78:52:b5:a1:3f:6f:ec:e5:32:1c:
         76:21:b9:96:aa:82:ee:40:1e:09:26:5a:60:f4:3f:f8:37:55:
         3e:eb:e3:90:f8:04:51:df:17:49:eb:d0:ef:67:49:af:1b:19:
         2c:53:10:46:e3:e1:f0:c2:79:11:a7:d8:d0:0c:fd:0c:19:8f:
         fc:5b:05:01:74:86:3f:a6:c0:4b:31:ea:eb:c8:0b:84:b1:ef:
         3f:77:dc:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3
MEVGMkIxNEMwHhcNMjUxMDE5MDQwNzA4WhcNMjUxMDI2MDQwNzA4WjAYMRYwFAYD
VQQDEw02OGY0NjNlYy01MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQ4Qn6kIYgYGwJpMrjtv9F++dwoNflBPdBpaTJ35Yu5HEoZnRugVg7dx/2pZ
+2Zg5yn7N93e6upSVIQBLfauvcHZqn1flhqeOvfUYG+RxSJCE/fyWBDD+4/O/wK8
WUEh0GFiUhkypkik0qXwbiOggnWY2nyH5nJ9bTtK12lEmT0k/65HkhUAJuc9WJ4R
CWJfC+UQeDpMpbww2fErzuy47XnEHKTceDjhecV8t/yp4XBt8cXbj+1XzDky8iLw
edj4A9lKfhJVuNwkyWmF4uWljzQ3SqCbhIF/UHHnIYylFCikomjDPEYe1tas7O1m
xV20IASKzBrGa8sKd9Cgl+mMtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAzQTLO
JvRyND3LypodZnQ9QRMUMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE
RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR
M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiTriC1ckGnhhF8Q5hv2QN67drsHcKu/jvdSdDTo/xwk7kgX6+K02g
USidCw6PS1suS+B3eOg5pfZVKewLNlejYoT0uXztHDtY50EN1FzlWlJtEsgMyP/p
sOU2cygX8rxB3Yh+PYyQr0pRGvAIEsNgvtz6VQsQcf/3xSDJ6sZpad1LMNfuOQU4
OUU8RxG7lDXv/cI2eGE7+vVlMdNV2mR3pxODzDzB/1AmTXhStaE/b+zlMhx2IbmW
qoLuQB4JJlpg9D/4N1U+6+OQ+ARR3xdJ69DvZ0mvGxksUxBG4+HwwnkRp9jQDP0M
GY/8WwUBdIY/psBLMerryAuEse8/d9wT
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:35:16 2025 by rpki-client