Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          LTSy0DUJSc/FmMHPvooQAwa2B4NwSx909+FkfWuTlb4=
Subject key identifier:   18:7D:53:81:F4:FC:D7:6A:ED:10:87:72:58:DE:41:53:3A:4D:DD:BB
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       092E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          092E
Signing time:             Sat 18 Oct 2025 21:19:02 +0000
Manifest this update:     Sat 18 Oct 2025 21:19:01 +0000
Manifest next update:     Sat 25 Oct 2025 21:19:01 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: RYKccSynhazeCviz8AyXwxsL7vjJhPSw6ohf2UMWT8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Oct 18 21:19:01 2025 GMT
            Not After : Oct 25 21:19:01 2025 GMT
        Subject: CN=68f40445-f659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:4a:eb:4f:b8:ed:95:ed:d6:4f:30:49:9e:
                    80:98:ed:2a:d4:60:68:47:6d:08:b0:d3:27:38:1b:
                    43:50:f9:6f:dd:11:78:0e:28:de:1d:d0:46:c9:dc:
                    ca:00:d5:3f:8b:b1:29:fd:10:17:5f:2f:ac:11:5b:
                    d2:60:b0:0c:ed:99:c1:24:22:d4:6f:67:01:02:b4:
                    d6:68:02:2d:aa:e1:6f:ac:23:b2:b2:b4:88:30:f1:
                    af:04:99:3b:cb:c5:13:03:b4:c8:84:48:61:0a:14:
                    b4:51:15:21:bc:4b:af:9d:02:e5:44:90:f9:73:11:
                    e1:04:3f:11:7d:78:ef:bd:41:c9:39:f7:e5:1c:40:
                    57:0b:98:51:c2:ab:63:4f:da:c4:45:34:0c:f6:cd:
                    be:5b:cd:21:b8:46:c3:cd:17:af:0d:64:31:4c:6e:
                    9a:a2:ef:bf:54:b0:cc:75:c6:65:c2:cf:f0:b0:fd:
                    b7:ce:86:9e:b1:87:92:a2:82:89:c4:c2:ff:4f:d4:
                    de:e1:f6:f9:15:eb:e1:4c:d7:6d:c8:d2:75:6e:f0:
                    88:c5:d0:6d:4d:90:4d:96:7b:dd:8a:61:cd:40:ba:
                    c8:9b:93:8c:f7:a6:7a:71:68:53:cc:13:a7:32:6c:
                    c6:66:28:c4:f4:f0:d9:56:2d:30:7f:58:5a:99:a6:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:53:81:F4:FC:D7:6A:ED:10:87:72:58:DE:41:53:3A:4D:DD:BB
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:c0:d4:9a:b2:10:98:2c:d8:e4:e9:57:5d:78:0f:8e:34:
         75:02:6e:e5:05:25:f6:dc:c8:1b:6c:4e:93:d6:f8:fa:48:92:
         1c:f6:1b:83:56:08:40:d8:20:5c:0d:77:4c:d3:36:66:29:c3:
         60:ad:71:1d:e3:9e:b6:08:94:f4:e1:b3:eb:d3:aa:c5:c9:f2:
         69:71:59:7a:c6:b7:4f:49:42:76:a9:aa:08:27:27:ef:77:38:
         3e:b0:ff:63:f8:bc:d9:8f:c5:8b:4a:18:a8:05:8d:e1:e7:6b:
         30:40:5a:7d:d7:a4:62:79:88:22:fe:c5:8a:cc:d5:c1:f9:25:
         e8:0f:99:62:83:ec:4a:0f:43:84:cd:3a:38:d3:00:41:b4:f1:
         77:69:19:9c:b4:9b:c1:ad:c6:59:fe:38:a9:e7:04:64:b0:1a:
         63:99:2b:fa:a6:4d:13:fd:4f:c6:58:16:52:67:09:16:1a:1c:
         0d:3f:ae:cb:6b:78:04:6b:cd:2d:34:ae:4f:11:65:bb:96:5a:
         be:4e:fe:11:d7:95:83:c3:58:3b:db:a7:d5:a9:52:95:07:34:
         09:25:0f:ab:c5:9d:f9:1b:cd:7d:57:ab:69:41:cd:26:c9:42:
         52:b5:f7:36:2a:0a:64:78:d6:61:6a:da:8a:ed:30:34:26:59:
         2d:f0:74:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw
RDU3RUE2MTYwHhcNMjUxMDE4MjExOTAxWhcNMjUxMDI1MjExOTAxWjAYMRYwFAYD
VQQDEw02OGY0MDQ0NS1mNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttRK60+47ZXt1k8wSZ6AmO0q1GBoR20IsNMnOBtDUPlv3RF4DijeHdBGydzK
ANU/i7Ep/RAXXy+sEVvSYLAM7ZnBJCLUb2cBArTWaAItquFvrCOysrSIMPGvBJk7
y8UTA7TIhEhhChS0URUhvEuvnQLlRJD5cxHhBD8RfXjvvUHJOfflHEBXC5hRwqtj
T9rERTQM9s2+W80huEbDzRevDWQxTG6aou+/VLDMdcZlws/wsP23zoaesYeSooKJ
xML/T9Te4fb5FevhTNdtyNJ1bvCIxdBtTZBNlnvdimHNQLrIm5OM96Z6cWhTzBOn
MmzGZijE9PDZVi0wf1hamab1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh9U4H0
/Ndq7RCHcljeQVM6Td27MB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD
NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w
aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN
NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCKMsDUmrIQmCzY5OlXXXgPjjR1Am7lBSX23MgbbE6T1vj6SJIc9huD
VghA2CBcDXdM0zZmKcNgrXEd4562CJT04bPr06rFyfJpcVl6xrdPSUJ2qaoIJyfv
dzg+sP9j+LzZj8WLShioBY3h52swQFp916RieYgi/sWKzNXB+SXoD5lig+xKD0OE
zTo40wBBtPF3aRmctJvBrcZZ/jip5wRksBpjmSv6pk0T/U/GWBZSZwkWGhwNP67L
a3gEa80tNK5PEWW7llq+Tv4R15WDw1g726fVqVKVBzQJJQ+rxZ35G819V6tpQc0m
yUJStfc2KgpkeNZhatqK7TA0Jlkt8HTb
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:28:25 2025 by rpki-client