Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
File:                     6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json)
Hash identifier:          TToQ2Nr3nUwN2ThIJlXTA5jg1cRC5PWYneDaUUzB43g=
Subject key identifier:   93:3D:FF:23:CC:3E:17:A8:68:01:94:98:75:F4:CB:36:44:F2:0F:E4
Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A
Certificate issuer:       /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
Manifest number:          0126
Signing time:             Sun 19 Oct 2025 07:29:29 +0000
Manifest this update:     Sun 19 Oct 2025 07:29:28 +0000
Manifest next update:     Sun 26 Oct 2025 07:29:28 +0000
Files and hashes:         1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: OUENZnLRcusfA3jw7iYLEMwOV2Ck+1nXGVByiFS+K10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C, serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
        Validity
            Not Before: Oct 19 07:29:28 2025 GMT
            Not After : Oct 26 07:29:28 2025 GMT
        Subject: CN=68f49359-663f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5c:07:ff:05:72:21:57:78:af:65:ef:69:29:
                    8b:b8:c2:d2:2f:f1:57:a2:87:35:29:6f:d2:49:73:
                    7a:b4:05:89:6f:e5:8a:42:2c:cc:8a:03:8f:53:3e:
                    b1:48:f5:0b:ba:bd:de:ff:67:fc:18:3a:ce:a2:85:
                    80:6e:ba:dd:18:8c:0f:68:7b:7f:3e:97:1f:a9:05:
                    b2:c9:1c:62:48:55:e2:0f:0e:f8:1e:86:9d:28:de:
                    d1:3a:8f:e9:58:49:fb:1b:e8:f6:92:eb:78:80:3e:
                    c3:31:98:65:6b:a3:dd:a7:9e:97:71:b8:4b:94:c4:
                    68:b0:aa:84:73:05:49:2c:f5:1a:93:4a:d4:4a:77:
                    f5:64:a8:13:be:27:a4:b7:e5:db:39:52:29:13:8e:
                    02:e3:11:94:bb:0c:ec:07:ff:12:81:fa:94:75:c7:
                    53:25:05:27:df:61:c0:c1:66:49:d8:f9:89:f3:33:
                    23:c3:1c:ba:71:30:18:55:f6:52:20:ff:4f:55:53:
                    9a:6d:c2:51:2b:3a:53:d1:2c:d6:45:50:8a:bc:b9:
                    46:65:77:e5:f7:09:53:d2:a5:b1:21:11:c6:26:33:
                    50:19:df:72:93:67:07:44:00:67:2b:60:9e:13:e6:
                    bf:34:95:ef:c7:ef:51:8c:ba:6c:3d:b0:d5:6d:83:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3D:FF:23:CC:3E:17:A8:68:01:94:98:75:F4:CB:36:44:F2:0F:E4
            X509v3 Authority Key Identifier:
                keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:10:c5:8f:e7:c9:f9:c7:a0:ec:e7:92:e9:83:86:9a:96:
         0b:ff:62:c8:42:fb:82:b1:b0:10:fc:84:ab:1c:ef:21:cc:93:
         63:8f:42:55:a3:11:b7:b2:ac:7d:e6:36:15:9d:77:e6:91:be:
         a8:a4:7a:9d:45:2c:57:cd:12:b2:a0:4d:f4:26:a5:bb:2e:06:
         f1:1b:dd:85:84:d0:00:4d:5d:07:cb:31:08:28:16:7e:33:d1:
         c6:86:0e:b8:03:a5:28:e4:2d:44:18:37:45:e2:cf:2d:e6:bd:
         09:65:64:4b:ad:7e:2e:b8:de:1c:19:76:ae:81:5c:25:5c:49:
         24:8e:36:d4:0e:31:d3:c0:3b:32:e1:04:50:17:1d:f9:d8:cf:
         b2:1f:08:bb:31:09:08:52:97:e4:72:42:63:13:a9:e0:c0:ee:
         66:ba:c1:ae:50:76:46:10:5f:bc:6b:03:15:84:82:a9:26:77:
         c0:44:4e:c8:09:41:73:92:98:8a:7b:1b:22:a9:33:58:86:80:
         b2:ed:59:63:e1:df:8e:1c:e1:7c:76:95:8c:26:56:be:01:75:
         4c:22:69:14:cc:53:a8:f7:44:6e:f4:1f:d2:8c:47:3d:bf:0e:
         d8:e7:6b:a6:3c:53:94:4c:2b:9f:33:fb:91:6a:ad:da:8b:17:
         05:a8:3f:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0MUMxMTAvBgNVBAUTKEVBRTk1NEY5NEQxQjQ3QkZGQjMzMTM0QjIzQUE2QTkx
MDNFOEZCOUEwHhcNMjUxMDE5MDcyOTI4WhcNMjUxMDI2MDcyOTI4WjAYMRYwFAYD
VQQDEw02OGY0OTM1OS02NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7lwH/wVyIVd4r2XvaSmLuMLSL/FXooc1KW/SSXN6tAWJb+WKQizMigOPUz6x
SPULur3e/2f8GDrOooWAbrrdGIwPaHt/PpcfqQWyyRxiSFXiDw74HoadKN7ROo/p
WEn7G+j2kut4gD7DMZhla6Pdp56XcbhLlMRosKqEcwVJLPUak0rUSnf1ZKgTviek
t+XbOVIpE44C4xGUuwzsB/8SgfqUdcdTJQUn32HAwWZJ2PmJ8zMjwxy6cTAYVfZS
IP9PVVOabcJRKzpT0SzWRVCKvLlGZXfl9wlT0qWxIRHGJjNQGd9yk2cHRABnK2Ce
E+a/NJXvx+9RjLpsPbDVbYOyIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM9/yPM
PheoaAGUmHX0yzZE8g/kMB8GA1UdIwQYMBaAFOrpVPlNG0e/+zMTSyOqapED6Pua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxQy81RDQzOThEOEU3
MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi82dWxVLVUwYlI3XzdNeE5MSTZwcWtRUG8t
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ1bFUtVTBiUjdfN014TkxJNnBxa1FQby01by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTQxQy81RDQzOThEOEU3MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi82dWxVLVUwYlI3
XzdNeE5MSTZwcWtRUG8tNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNZhDFj+fJ+ceg7OeS6YOGmpYL/2LIQvuCsbAQ/ISrHO8hzJNjj0JV
oxG3sqx95jYVnXfmkb6opHqdRSxXzRKyoE30JqW7LgbxG92FhNAATV0HyzEIKBZ+
M9HGhg64A6Uo5C1EGDdF4s8t5r0JZWRLrX4uuN4cGXaugVwlXEkkjjbUDjHTwDsy
4QRQFx352M+yHwi7MQkIUpfkckJjE6ngwO5musGuUHZGEF+8awMVhIKpJnfARE7I
CUFzkpiKexsiqTNYhoCy7Vlj4d+OHOF8dpWMJla+AXVMImkUzFOo90Ru9B/SjEc9
vw7Y52umPFOUTCufM/uRaq3aixcFqD+/
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:48 2025 by rpki-client