Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
File:                     jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json)
Hash identifier:          3AeoehXKB5brZEue5igHxihyiar3ZxzQTdhuEzoR+6U=
Subject key identifier:   CE:2C:AC:16:1D:27:08:9A:82:92:E0:D1:53:4A:86:B0:8F:4B:F4:97
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Certificate issuer:       /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
Manifest number:          0133
Signing time:             Sun 19 Oct 2025 07:21:23 +0000
Manifest this update:     Sun 19 Oct 2025 07:21:22 +0000
Manifest next update:     Sun 26 Oct 2025 07:21:22 +0000
Files and hashes:         1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: bQTrmwIVjgnnNmBTa18ZqV/lrq0M+6vJntrf3qYeOxw=)
                          2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: G17ALsZLxeT9rUtyM+i2zf7iC28VSeb9B4i0ScAYOoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
                          rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
        Validity
            Not Before: Oct 19 07:21:22 2025 GMT
            Not After : Oct 26 07:21:22 2025 GMT
        Subject: CN=68f49172-a6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:0c:da:dd:41:4c:92:1e:1c:31:9a:c4:77:
                    52:81:ac:55:5a:e9:b4:0c:c1:01:86:f4:77:c1:09:
                    da:22:53:8d:32:b7:56:3d:c7:fb:b2:0f:50:75:21:
                    1e:90:dc:07:5b:62:98:2f:6f:7e:2f:74:ba:88:9d:
                    06:e3:62:ff:f3:cc:37:44:f5:e9:e9:a4:60:d9:74:
                    1e:1e:93:a0:ad:d1:7a:9b:e6:46:cb:67:51:f1:df:
                    7d:4d:1b:94:09:b1:c3:f4:9c:21:a8:7e:ed:7e:6c:
                    58:a5:b2:cb:dd:11:ac:d3:28:85:9e:d3:4c:ad:8d:
                    f1:3f:d5:f2:e3:ab:26:dd:fe:8f:38:8e:b5:e1:7c:
                    11:4d:27:b1:38:8b:f0:41:6c:a9:62:83:0c:a0:88:
                    6f:3c:93:60:9c:95:f0:fb:a7:6d:9c:45:d6:be:06:
                    c7:ea:e8:14:62:37:92:73:af:7d:ca:60:43:ee:ae:
                    4d:0e:64:23:2d:d0:0f:46:fd:cf:0e:0a:ce:b6:9a:
                    86:b8:05:05:61:e2:39:8b:34:39:b8:f5:f3:05:5a:
                    cf:e5:d2:d6:0f:68:43:3f:77:29:e7:c1:c0:ad:9b:
                    83:5b:fd:33:09:70:f1:d3:7e:07:1a:4b:65:4b:33:
                    db:b7:9b:07:49:aa:02:63:56:35:37:fd:b1:e3:b5:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:AC:16:1D:27:08:9A:82:92:E0:D1:53:4A:86:B0:8F:4B:F4:97
            X509v3 Authority Key Identifier:
                keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:5b:f5:2f:e7:b0:5d:30:72:50:27:dc:c5:83:73:dc:cd:4c:
         0f:de:eb:b6:00:4a:61:2c:5b:6d:91:93:8e:80:aa:6d:5f:b1:
         a0:3c:bf:b4:a8:40:cc:a6:cd:e4:70:c3:3c:be:61:30:3f:65:
         cc:e0:81:5d:27:ed:9a:e6:7c:6e:e1:72:07:26:45:6a:7e:1b:
         ce:9b:17:f0:09:d3:14:07:c7:8b:28:07:a3:25:d8:7a:53:bb:
         bb:ba:41:89:e5:f7:af:c9:e6:0c:7e:f0:bb:a8:42:f4:f0:45:
         10:47:2a:bd:4f:85:14:48:2b:9c:22:30:63:3a:b7:f8:ba:56:
         b0:13:8e:22:80:51:d9:d8:cc:bc:dd:e5:24:3c:70:79:10:fd:
         c6:69:2c:d9:14:b2:1d:95:a7:44:56:f3:55:15:5f:28:dc:8f:
         a5:10:16:e2:06:ea:b3:77:eb:7d:d3:c6:ac:70:e4:b5:6b:d1:
         34:90:04:65:20:30:f9:47:75:7f:d7:32:cf:ff:e1:a2:1d:9e:
         47:0b:8d:4e:3a:01:2a:86:a2:23:52:14:f9:46:3b:15:3f:35:
         46:be:f4:77:34:61:ca:1e:73:f2:af:f8:7a:19:90:9e:ef:e4:
         13:f4:8e:03:ba:4e:cf:d2:5f:22:51:4b:dd:e2:a0:e9:ba:76:
         6e:3d:9e:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlEOTMxMTAvBgNVBAUTKDhDQzUzQTk5Mjk3RjFDQzBBMEJGQkRFQkYyNEUxMzJC
MEQ4NDFDNzYwHhcNMjUxMDE5MDcyMTIyWhcNMjUxMDI2MDcyMTIyWjAYMRYwFAYD
VQQDEw02OGY0OTE3Mi1hNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWgM2t1BTJIeHDGaxHdSgaxVWum0DMEBhvR3wQnaIlONMrdWPcf7sg9QdSEe
kNwHW2KYL29+L3S6iJ0G42L/88w3RPXp6aRg2XQeHpOgrdF6m+ZGy2dR8d99TRuU
CbHD9JwhqH7tfmxYpbLL3RGs0yiFntNMrY3xP9Xy46sm3f6POI614XwRTSexOIvw
QWypYoMMoIhvPJNgnJXw+6dtnEXWvgbH6ugUYjeSc699ymBD7q5NDmQjLdAPRv3P
DgrOtpqGuAUFYeI5izQ5uPXzBVrP5dLWD2hDP3cp58HArZuDW/0zCXDx034HGktl
SzPbt5sHSaoCY1Y1N/2x47U3OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4srBYd
JwiagpLg0VNKhrCPS/SXMB8GA1UdIwQYMBaAFIzFOpkpfxzAoL+96/JOEysNhBx2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUQ5My9DQ0JBQUFEQUQ2
QTkxMUVFQUNEMzE2NjhDNEY5QUUwMi9qTVU2bVNsX0hNQ2d2NzNyOGs0VEt3MkVI
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pNVTZtU2xfSE1DZ3Y3M3I4azRUS3cyRUhIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUQ5My9DQ0JBQUFEQUQ2QTkxMUVFQUNEMzE2NjhDNEY5QUUwMi9qTVU2bVNsX0hN
Q2d2NzNyOGs0VEt3MkVISFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6W/Uv57BdMHJQJ9zFg3PczUwP3uu2AEphLFttkZOOgKptX7GgPL+0
qEDMps3kcMM8vmEwP2XM4IFdJ+2a5nxu4XIHJkVqfhvOmxfwCdMUB8eLKAejJdh6
U7u7ukGJ5fevyeYMfvC7qEL08EUQRyq9T4UUSCucIjBjOrf4ulawE44igFHZ2My8
3eUkPHB5EP3GaSzZFLIdladEVvNVFV8o3I+lEBbiBuqzd+t908ascOS1a9E0kARl
IDD5R3V/1zLP/+GiHZ5HC41OOgEqhqIjUhT5RjsVPzVGvvR3NGHKHnPyr/h6GZCe
7+QT9I4Duk7P0l8iUUvd4qDpunZuPZ47
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:23 2025 by rpki-client