Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
File:                     Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft (raw, json)
Hash identifier:          Z3hJ/c4wbihzDjH1CSz0a2H8gUHAI3ivECliUwQflgo=
Subject key identifier:   E5:A2:B1:E9:08:13:EF:B2:C1:EC:0D:35:30:6F:AD:94:CF:C9:A0:B7
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Certificate issuer:       /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
Manifest number:          077B
Signing time:             Sat 18 Oct 2025 22:58:30 +0000
Manifest this update:     Sat 18 Oct 2025 22:58:29 +0000
Manifest next update:     Sat 25 Oct 2025 22:58:29 +0000
Files and hashes:         1: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl (hash: qsjcmI+HMwp6scFwPo1bKWuWTN0WPwEdRkCuias0eU0=)
                          2: 5010A55A8C6411EE9E586967C4F9AE02.roa (hash: 4WaxcSOypw5MR8KdXAghCvA+v2O7hVTdBBBYUHYD0cA=)
                          3: F704E032765811EE8C17A621C4F9AE02.roa (hash: CnCwLn7lDIG3FNQW26Y0bfxtI9n4x8PAcrUkdqYQEww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C2, serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
        Validity
            Not Before: Oct 18 22:58:29 2025 GMT
            Not After : Oct 25 22:58:29 2025 GMT
        Subject: CN=68f41b96-b912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:93:0f:08:ad:af:e1:d4:a4:c5:e3:09:b3:
                    13:97:1c:51:ed:ff:32:67:30:e3:68:68:f4:38:ee:
                    5e:98:3b:1f:ba:52:5a:fd:2f:44:20:39:04:8f:12:
                    b4:26:f3:31:cc:45:51:69:91:37:89:8c:ca:70:b9:
                    81:a5:43:46:34:61:8c:fd:84:34:8b:7c:f6:16:ca:
                    e4:e1:e0:5a:66:54:c3:a2:20:db:84:63:5f:d4:e2:
                    a0:cb:91:ad:ff:f9:60:a2:d0:13:53:a3:c3:4e:b0:
                    4d:06:7d:f8:86:81:6e:6d:9e:48:9e:33:31:a3:37:
                    f7:60:da:15:ea:35:cf:93:1c:2e:b2:6d:bf:b3:fb:
                    8f:85:3f:fc:3e:21:07:77:f5:b2:04:b6:5c:1e:4f:
                    0e:16:a7:ea:65:88:1b:c4:c8:04:8c:4e:3c:25:50:
                    bd:61:31:e8:71:10:7d:27:7c:09:d3:57:64:8b:3e:
                    53:50:e7:f1:bf:e4:0a:4e:93:27:a9:71:4b:30:b6:
                    69:b0:d5:ef:8d:88:c0:d4:1f:80:05:0f:a3:0a:64:
                    bd:40:62:3f:24:b0:3d:7f:3c:1c:bf:c9:8b:bd:4d:
                    3b:02:b0:d9:c7:e5:30:00:00:2e:c9:4d:4c:69:b4:
                    74:90:58:7d:6e:2b:d7:7d:49:9e:df:b1:f5:6f:86:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:B1:E9:08:13:EF:B2:C1:EC:0D:35:30:6F:AD:94:CF:C9:A0:B7
            X509v3 Authority Key Identifier:
                keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:2a:08:83:eb:0d:0e:42:df:b8:aa:3d:87:25:2b:a6:7a:
         41:c6:2f:e2:3a:8e:08:7d:89:bc:e3:5d:fd:c6:80:f2:78:8f:
         dc:5d:f1:27:c9:21:66:6d:85:01:ad:9e:30:c2:d3:58:72:1c:
         0f:3d:d1:cd:94:51:dd:19:4a:9a:c4:df:32:f2:a0:ed:da:b2:
         67:51:9a:5f:23:b5:7c:41:de:9e:f1:4a:5d:2a:16:3b:1a:4e:
         0b:d4:f7:cd:23:1b:a8:ec:eb:d2:b4:50:c9:8a:91:aa:ce:61:
         23:00:1c:5a:83:1b:d5:71:f3:4d:d0:81:d3:7c:a9:bb:82:dd:
         0c:06:f6:e8:58:99:c2:8d:1f:67:90:33:15:fb:9d:44:0a:9e:
         64:55:6b:53:4d:f3:74:6d:92:f5:81:af:3f:5d:fd:d5:82:8b:
         cf:32:a4:3b:36:28:29:f8:7c:bd:fe:70:cc:87:75:c1:66:4e:
         d8:d5:64:02:7d:60:c7:81:76:80:62:e0:c8:ff:c7:a5:e8:d6:
         7d:72:1d:a5:5b:29:ac:92:d7:e9:b2:e5:b0:74:1e:17:35:ff:
         96:e3:58:d7:2c:4b:a0:d1:7c:e6:6a:34:99:74:c4:00:b9:38:
         3a:00:6a:a9:3f:1d:4b:37:49:37:76:a7:05:bf:ca:ae:99:12:
         e1:d5:14:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I1QzIxMTAvBgNVBAUTKDFFRUQyNjNGMDQyOEQ4NEUzRkJFNTE3NTNEMTZENEIz
RDYyNzk3QzQwHhcNMjUxMDE4MjI1ODI5WhcNMjUxMDI1MjI1ODI5WjAYMRYwFAYD
VQQDEw02OGY0MWI5Ni1iOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2G+TDwitr+HUpMXjCbMTlxxR7f8yZzDjaGj0OO5emDsfulJa/S9EIDkEjxK0
JvMxzEVRaZE3iYzKcLmBpUNGNGGM/YQ0i3z2Fsrk4eBaZlTDoiDbhGNf1OKgy5Gt
//lgotATU6PDTrBNBn34hoFubZ5InjMxozf3YNoV6jXPkxwusm2/s/uPhT/8PiEH
d/WyBLZcHk8OFqfqZYgbxMgEjE48JVC9YTHocRB9J3wJ01dkiz5TUOfxv+QKTpMn
qXFLMLZpsNXvjYjA1B+ABQ+jCmS9QGI/JLA9fzwcv8mLvU07ArDZx+UwAAAuyU1M
abR0kFh9bivXfUme37H1b4Y6gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWisekI
E++ywewNNTBvrZTPyaC3MB8GA1UdIwQYMBaAFB7tJj8EKNhOP75RdT0W1LPWJ5fE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDMi83NzlEMDRBMDM2
NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJFNF92bEYxUFJiVXM5WW5s
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1MG1Qd1FvMkU0X3ZsRjFQUmJVczlZbmw4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjVDMi83NzlEMDRBMDM2NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJF
NF92bEYxUFJiVXM5WW5sOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBY4CoIg+sNDkLfuKo9hyUrpnpBxi/iOo4IfYm84139xoDyeI/cXfEn
ySFmbYUBrZ4wwtNYchwPPdHNlFHdGUqaxN8y8qDt2rJnUZpfI7V8Qd6e8UpdKhY7
Gk4L1PfNIxuo7OvStFDJipGqzmEjABxagxvVcfNN0IHTfKm7gt0MBvboWJnCjR9n
kDMV+51ECp5kVWtTTfN0bZL1ga8/Xf3VgovPMqQ7Nigp+Hy9/nDMh3XBZk7Y1WQC
fWDHgXaAYuDI/8el6NZ9ch2lWymsktfpsuWwdB4XNf+W41jXLEug0XzmajSZdMQA
uTg6AGqpPx1LN0k3dqcFv8qumRLh1RRA
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:24 2025 by rpki-client