Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
File:                     276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json)
Hash identifier:          34RN6RUaCaHMRNbfXsXzHc62gnyXOU740978OzRB2Zg=
Subject key identifier:   0E:8E:F4:4D:A6:EA:A0:FA:99:8B:18:BA:BF:B6:03:DD:1A:0B:AB:9E
Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0
Certificate issuer:       /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
Manifest number:          07A9
Signing time:             Sat 18 Oct 2025 22:43:55 +0000
Manifest this update:     Sat 18 Oct 2025 22:43:55 +0000
Manifest next update:     Sat 25 Oct 2025 22:43:55 +0000
Files and hashes:         1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: ouzIScHEjQm9I9TQnP+UaBntag5HhDneXur8IWcLjvM=)
                          2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: rhQRS5c9b4woxqf3Lh4ekB6IlqaEB8oCpxpphU5va4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl
                          rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
        Validity
            Not Before: Oct 18 22:43:55 2025 GMT
            Not After : Oct 25 22:43:55 2025 GMT
        Subject: CN=68f4182b-475e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:99:5d:f2:9d:46:71:23:6e:ab:6b:cd:58:
                    a3:da:73:1f:a1:61:52:b9:0b:a1:75:57:25:cc:25:
                    38:fc:70:c8:e1:9c:27:83:a2:8f:c7:be:75:61:34:
                    cb:2d:4c:85:fe:bb:cb:6a:d8:7c:96:9a:ac:da:9a:
                    88:98:31:33:c6:fc:1f:e2:c7:54:8b:e1:9e:61:46:
                    61:91:ff:1f:90:5c:dd:2f:c3:1a:8a:3b:8e:be:e1:
                    0c:33:e3:28:b4:cf:2b:88:fb:68:28:f8:70:d5:76:
                    ad:45:64:77:db:bc:b8:06:b1:b7:71:c6:cd:ac:9f:
                    96:f9:8e:35:d3:3f:4c:ea:57:b7:3c:5d:99:05:b0:
                    9d:74:54:bd:a7:f7:d0:a1:bc:74:cf:8f:70:cf:d9:
                    48:1b:1a:62:11:29:5c:23:c2:d5:27:a2:af:30:1b:
                    6e:a8:eb:72:e0:4f:22:68:fd:7b:7c:cc:5e:42:a7:
                    2b:b3:49:5a:53:df:d5:32:5b:50:05:02:7e:44:b8:
                    76:44:af:56:32:57:8e:71:15:4b:0d:91:94:43:35:
                    b7:2c:29:29:33:ff:9d:77:8a:8b:cc:70:bc:c8:cd:
                    fd:73:57:f5:7a:1f:fe:37:9e:9d:8c:a9:a8:bf:38:
                    94:89:70:e7:e2:f2:c9:d6:69:48:09:b2:39:97:04:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8E:F4:4D:A6:EA:A0:FA:99:8B:18:BA:BF:B6:03:DD:1A:0B:AB:9E
            X509v3 Authority Key Identifier:
                keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:ff:34:20:f5:e7:cb:1e:a5:1d:e0:20:f0:8a:b9:6d:be:2c:
         76:f0:6a:8a:67:a4:04:e3:c7:33:2f:2b:01:2d:3f:ca:cb:a5:
         40:4e:55:29:e3:74:34:bf:23:46:b7:32:9e:8e:9b:66:9a:ac:
         1d:fe:c3:b5:d3:c8:f0:f7:5e:d6:f4:b6:1f:f7:78:57:2c:35:
         b6:13:3b:db:86:22:44:e4:2e:7d:3e:cd:fd:e8:3a:cd:3f:54:
         e6:4f:b4:0b:15:b6:a6:1e:af:eb:62:e6:b9:73:28:dc:fd:89:
         ba:4b:b8:53:9c:9e:25:83:8f:95:5e:50:cc:bc:03:2a:f5:c9:
         fc:c5:3b:d0:ed:e4:35:1e:4c:d0:86:16:bd:fe:6c:80:70:d0:
         0d:9a:af:d2:a4:fb:88:8d:21:58:a3:23:58:85:d7:0e:a6:92:
         82:15:2c:71:db:8e:44:58:f3:d8:7a:88:e1:26:9b:3b:a5:72:
         fc:cc:89:e0:2f:ae:8d:15:86:73:32:78:c2:db:51:d3:ba:21:
         4f:6c:63:93:40:c6:0e:71:e4:76:63:5e:63:e2:22:ed:c2:42:
         7a:1a:19:85:12:6d:ca:bb:7f:f4:13:c3:3c:e0:a9:c4:3f:ce:
         c5:74:23:22:dc:2f:ac:76:f9:5a:7c:4f:26:70:e3:b5:df:84:
         25:f1:0f:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1
QkU5ODFCRjAwHhcNMjUxMDE4MjI0MzU1WhcNMjUxMDI1MjI0MzU1WjAYMRYwFAYD
VQQDEw02OGY0MTgyYi00NzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKyZXfKdRnEjbqtrzVij2nMfoWFSuQuhdVclzCU4/HDI4Zwng6KPx751YTTL
LUyF/rvLath8lpqs2pqImDEzxvwf4sdUi+GeYUZhkf8fkFzdL8MaijuOvuEMM+Mo
tM8riPtoKPhw1XatRWR327y4BrG3ccbNrJ+W+Y410z9M6le3PF2ZBbCddFS9p/fQ
obx0z49wz9lIGxpiESlcI8LVJ6KvMBtuqOty4E8iaP17fMxeQqcrs0laU9/VMltQ
BQJ+RLh2RK9WMleOcRVLDZGUQzW3LCkpM/+dd4qLzHC8yM39c1f1eh/+N56djKmo
vziUiXDn4vLJ1mlICbI5lwQ2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6O9E2m
6qD6mYsYur+2A90aC6ueMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx
OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDAzQS85MjZCNDNFODIxOTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BU
dmdXN1cyQWg5MVJiNllHX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDk/zQg9efLHqUd4CDwirltvix28GqKZ6QE48czLysBLT/Ky6VATlUp
43Q0vyNGtzKejptmmqwd/sO108jw917W9LYf93hXLDW2EzvbhiJE5C59Ps396DrN
P1TmT7QLFbamHq/rYua5cyjc/Ym6S7hTnJ4lg4+VXlDMvAMq9cn8xTvQ7eQ1HkzQ
hha9/myAcNANmq/SpPuIjSFYoyNYhdcOppKCFSxx245EWPPYeojhJps7pXL8zIng
L66NFYZzMnjC21HTuiFPbGOTQMYOceR2Y15j4iLtwkJ6GhmFEm3Ku3/0E8M84KnE
P87FdCMi3C+sdvlafE8mcOO134Ql8Q+t
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:50 2025 by rpki-client