Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
File:                     _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json)
Hash identifier:          Iw+DuPph5yc7Y9neOmPhF79M/75gG/e8YWlsxj/R5bU=
Subject key identifier:   46:CF:1D:2D:8E:E3:C6:92:51:D3:33:5D:F3:2E:12:B4:EC:51:7B:37
Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B
Certificate issuer:       /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B
Certificate serial:       102E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
Manifest number:          1026
Signing time:             Sat 18 Oct 2025 17:59:57 +0000
Manifest this update:     Sat 18 Oct 2025 17:59:56 +0000
Manifest next update:     Sat 25 Oct 2025 17:59:56 +0000
Files and hashes:         1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: f5k57JTYa3JdoGj2GBPzw+LyLsc8c4k9LkC5GxDsn+Q=)
                          2: 378459525C6511E989D03610C4F9AE02.roa (hash: IiQprXM45ceBxjHWm+F/2TXqvKDyfsIZ5gHCOtJkT5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4142 (0x102e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B
        Validity
            Not Before: Oct 18 17:59:56 2025 GMT
            Not After : Oct 25 17:59:56 2025 GMT
        Subject: CN=68f3d59d-14cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:e4:0a:9b:9b:7f:a4:0d:b5:6e:5a:fa:c6:
                    c1:02:25:19:a2:9d:1d:ed:27:b5:95:49:d7:ae:08:
                    63:94:6e:9b:2a:76:f2:50:16:06:60:b2:31:8c:6b:
                    4d:18:71:94:bd:f2:77:5f:72:80:31:ef:31:7a:bd:
                    3b:05:ec:68:d2:54:9d:fe:b0:ea:97:77:fd:9a:f1:
                    fd:1a:25:6a:a2:5d:d3:82:74:f3:30:22:20:df:0b:
                    34:d4:46:6b:ff:ed:f1:13:91:40:82:11:17:47:6c:
                    f1:91:ae:75:83:64:f1:c3:67:86:f2:b4:6a:57:f2:
                    81:0c:f6:fc:bc:9f:a7:af:97:8e:98:75:8b:7d:9b:
                    2e:26:2d:40:ed:27:83:f0:17:d9:68:91:01:29:fd:
                    cd:10:ab:83:99:1c:17:0a:a5:92:4c:49:f1:14:88:
                    be:6c:9c:71:8c:85:ce:a3:44:61:d2:b6:8f:c9:91:
                    27:2a:3c:c0:4f:a6:0a:19:5d:ad:6f:6e:5c:57:9c:
                    a4:63:9a:5f:1d:ef:ea:4b:2a:48:e1:e6:65:fe:42:
                    48:7e:f4:31:51:14:d4:aa:75:ef:3a:f5:f1:bb:24:
                    28:57:f4:62:e7:ad:da:c0:6b:65:63:ed:93:87:1c:
                    39:e3:f2:91:3a:9d:da:9c:a7:a1:59:1b:55:f1:ef:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:1D:2D:8E:E3:C6:92:51:D3:33:5D:F3:2E:12:B4:EC:51:7B:37
            X509v3 Authority Key Identifier:
                keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:78:f9:d2:8c:2c:e1:d7:15:27:54:a8:f1:d6:70:72:50:
         b8:07:31:29:32:5e:74:a2:ea:7e:3d:2e:dc:4b:bd:04:bc:6c:
         ad:27:22:16:27:cc:5c:fd:99:1d:9a:4a:b4:85:70:a9:fe:76:
         95:06:31:07:cf:77:1e:4e:d5:5f:8b:7a:ad:0c:ac:48:67:a3:
         4f:9f:66:1c:03:73:9b:94:e1:a0:19:84:54:20:da:e6:0e:bd:
         c2:7c:bd:a7:6d:b1:78:2d:1e:e2:95:bf:ed:95:00:bf:52:e4:
         14:20:69:e5:54:b5:af:7c:9d:b2:f5:f8:03:a0:95:3b:4c:f9:
         c7:14:2b:9b:2d:ca:1e:60:d7:53:10:12:d8:fe:b4:a7:ff:71:
         66:aa:5d:9e:f5:91:fb:26:c0:56:69:1d:e0:a6:04:94:98:c8:
         cc:e8:9f:03:15:5d:d6:2a:b6:9d:66:17:fa:53:9e:81:1f:82:
         d9:82:9a:95:a1:5f:fc:b1:59:90:94:3b:23:7a:6c:5a:4e:6c:
         d1:53:dd:50:7d:28:17:cc:1b:b7:ea:de:cc:2f:13:f0:c9:c4:
         48:98:11:c1:78:25:74:45:77:d1:40:c7:a1:c8:58:51:09:dc:
         5c:f7:79:65:f9:b7:3a:89:8b:59:fd:5e:b7:93:e2:da:bf:96:
         95:2f:e8:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC
MjZGRUQwNEIwHhcNMjUxMDE4MTc1OTU2WhcNMjUxMDI1MTc1OTU2WjAYMRYwFAYD
VQQDEw02OGYzZDU5ZC0xNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufbkCpubf6QNtW5a+sbBAiUZop0d7Se1lUnXrghjlG6bKnbyUBYGYLIxjGtN
GHGUvfJ3X3KAMe8xer07Bexo0lSd/rDql3f9mvH9GiVqol3TgnTzMCIg3ws01EZr
/+3xE5FAghEXR2zxka51g2Txw2eG8rRqV/KBDPb8vJ+nr5eOmHWLfZsuJi1A7SeD
8BfZaJEBKf3NEKuDmRwXCqWSTEnxFIi+bJxxjIXOo0Rh0raPyZEnKjzAT6YKGV2t
b25cV5ykY5pfHe/qSypI4eZl/kJIfvQxURTUqnXvOvXxuyQoV/Ri563awGtlY+2T
hxw54/KROp3anKehWRtV8e9TywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbPHS2O
48aSUdMzXfMuErTsUXs3MB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG
OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw
c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4THj50ows4dcVJ1So8dZwclC4BzEpMl50oup+PS7cS70EvGytJyIW
J8xc/Zkdmkq0hXCp/naVBjEHz3ceTtVfi3qtDKxIZ6NPn2YcA3OblOGgGYRUINrm
Dr3CfL2nbbF4LR7ilb/tlQC/UuQUIGnlVLWvfJ2y9fgDoJU7TPnHFCubLcoeYNdT
EBLY/rSn/3Fmql2e9ZH7JsBWaR3gpgSUmMjM6J8DFV3WKradZhf6U56BH4LZgpqV
oV/8sVmQlDsjemxaTmzRU91QfSgXzBu36t7MLxPwycRImBHBeCV0RXfRQMehyFhR
Cdxc93ll+bc6iYtZ/V63k+Lav5aVL+iQ
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:01 2025 by rpki-client