Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
File:                     2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json)
Hash identifier:          YzCTFLfCwPCOFF89HtiDerZLRESkQyRNgyr+/jdkB70=
Subject key identifier:   27:2B:18:E2:08:67:32:D9:4A:90:E1:BC:8B:D9:5E:9A:CD:C3:44:9B
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Certificate issuer:       /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial:       0EE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
Manifest number:          0ED9
Signing time:             Sat 18 Oct 2025 18:15:38 +0000
Manifest this update:     Sat 18 Oct 2025 18:15:37 +0000
Manifest next update:     Sat 25 Oct 2025 18:15:37 +0000
Files and hashes:         1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: rE18prS63N2Wc6ohHHfNwVrjFEl5DXC2RVClGVZd09E=)
                          2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: KyrGSf7V5zfG9F8nLNaSQJ4n2vaZ8LBybDGS/PP9Wq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
                          rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
        Validity
            Not Before: Oct 18 18:15:37 2025 GMT
            Not After : Oct 25 18:15:37 2025 GMT
        Subject: CN=68f3d94a-486f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:a6:60:58:3e:33:82:20:ff:23:88:d5:09:
                    1d:21:eb:34:a1:d1:c2:64:5c:3c:3c:1d:db:7b:b1:
                    a8:69:ba:1e:c9:74:d5:48:fb:0d:ca:b9:a5:de:4e:
                    e4:7a:64:79:85:2c:b3:ce:aa:14:3c:1f:24:cd:8d:
                    94:07:ed:cb:95:6a:a8:8e:64:de:fa:0f:09:57:6e:
                    f0:2b:19:da:f6:9c:f2:d6:a5:c8:83:80:bf:77:e1:
                    15:f0:32:8e:24:bd:ad:8a:90:87:15:dd:24:be:f3:
                    a3:c6:a6:41:da:16:04:f8:75:46:ab:ca:6b:88:b4:
                    27:3c:8e:bd:5d:69:e1:8b:6e:67:cf:0f:c7:7d:1b:
                    84:7a:6e:88:e9:d6:75:3f:66:3e:1b:0e:8f:f3:bb:
                    59:c1:13:3f:a7:bd:26:bf:8b:dd:91:42:f3:5e:7f:
                    cb:2d:63:dd:88:7a:ba:ed:62:46:e4:4f:0c:c4:f4:
                    cd:07:15:8f:36:5c:0c:b6:91:60:6c:37:4c:19:6c:
                    aa:2b:f7:87:cd:13:95:48:e7:e3:1d:37:fa:32:3a:
                    65:91:dc:f0:13:8a:71:67:57:7e:09:05:f6:0d:88:
                    a2:f5:e3:08:de:77:02:82:d6:94:33:12:e6:c3:b1:
                    29:26:13:bb:9c:10:14:3b:c2:39:59:89:f9:df:c7:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:18:E2:08:67:32:D9:4A:90:E1:BC:8B:D9:5E:9A:CD:C3:44:9B
            X509v3 Authority Key Identifier:
                keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:af:25:71:44:96:2c:13:4f:6f:f7:53:39:57:65:8a:de:5d:
         bd:4c:31:05:60:2b:e7:c3:35:39:6a:d0:80:0e:34:85:96:dc:
         d8:8c:9b:46:5a:9c:96:9e:7a:e6:bb:01:aa:ff:ad:73:45:c0:
         8b:2b:a4:b1:4d:bf:05:ab:3f:21:5c:de:96:cf:58:fe:2a:d5:
         2b:1a:a6:44:70:ce:48:5f:6d:74:05:16:38:75:f2:6b:f4:26:
         d9:4e:f0:85:ff:a1:0b:ac:87:98:b7:e7:76:09:bd:47:c7:b9:
         b9:91:69:db:ee:ce:72:43:17:33:e9:da:9b:d2:e0:c6:80:dc:
         aa:1d:98:9f:cf:df:20:0f:b7:25:22:8f:42:d7:16:c4:70:df:
         66:6b:73:7a:2d:c6:73:6a:56:ff:47:6a:25:84:9a:93:2e:d9:
         8d:03:72:d6:f6:7e:64:73:0f:53:61:ff:ca:66:a0:15:b5:3c:
         fd:12:c1:96:88:2a:81:9b:aa:be:39:02:4d:16:1d:33:6a:21:
         5d:df:e9:a6:9d:c6:a2:68:c1:51:f9:10:c0:cb:86:99:b0:d6:
         19:ed:b5:42:c4:fd:1e:4b:87:5b:e5:62:fa:9f:0d:6d:26:40:
         66:9e:58:1f:fa:fb:b8:2a:27:31:63:63:06:01:e6:55:93:71:
         51:9f:fd:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My
NjIzRDk0QTMwHhcNMjUxMDE4MTgxNTM3WhcNMjUxMDI1MTgxNTM3WjAYMRYwFAYD
VQQDEw02OGYzZDk0YS00ODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwxumYFg+M4Ig/yOI1QkdIes0odHCZFw8PB3be7GoaboeyXTVSPsNyrml3k7k
emR5hSyzzqoUPB8kzY2UB+3LlWqojmTe+g8JV27wKxna9pzy1qXIg4C/d+EV8DKO
JL2tipCHFd0kvvOjxqZB2hYE+HVGq8priLQnPI69XWnhi25nzw/HfRuEem6I6dZ1
P2Y+Gw6P87tZwRM/p70mv4vdkULzXn/LLWPdiHq67WJG5E8MxPTNBxWPNlwMtpFg
bDdMGWyqK/eHzROVSOfjHTf6MjplkdzwE4pxZ1d+CQX2DYii9eMI3ncCgtaUMxLm
w7EpJhO7nBAUO8I5WYn538dAIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcrGOII
ZzLZSpDhvIvZXprNw0SbMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx
RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm
cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwryVxRJYsE09v91M5V2WK3l29TDEFYCvnwzU5atCADjSFltzYjJtG
WpyWnnrmuwGq/61zRcCLK6SxTb8Fqz8hXN6Wz1j+KtUrGqZEcM5IX210BRY4dfJr
9CbZTvCF/6ELrIeYt+d2Cb1Hx7m5kWnb7s5yQxcz6dqb0uDGgNyqHZifz98gD7cl
Io9C1xbEcN9ma3N6LcZzalb/R2olhJqTLtmNA3LW9n5kcw9TYf/KZqAVtTz9EsGW
iCqBm6q+OQJNFh0zaiFd3+mmncaiaMFR+RDAy4aZsNYZ7bVCxP0eS4db5WL6nw1t
JkBmnlgf+vu4KicxY2MGAeZVk3FRn/1m
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:10 2025 by rpki-client