Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File:                     jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier:          YHxY/TlW7t6vj9FL2faT0YhXnDJdpQ59cotDAuh/mCE=
Subject key identifier:   AB:AF:27:53:1F:3C:93:4F:02:4D:56:35:90:76:C1:3F:A5:06:FB:BC
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       0502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number:          04F7
Signing time:             Sun 19 Oct 2025 01:28:36 +0000
Manifest this update:     Sun 19 Oct 2025 01:28:35 +0000
Manifest next update:     Sun 26 Oct 2025 01:28:35 +0000
Files and hashes:         1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: TQV1tl9e08l28eRi3oGn4SVNqa89uYHZGvLU/zszmKw=)
                          2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
                          3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Oct 19 01:28:35 2025 GMT
            Not After : Oct 26 01:28:35 2025 GMT
        Subject: CN=68f43ec3-094d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:05:d3:38:88:33:75:58:72:01:4b:5a:a7:
                    4f:da:de:d3:f4:da:ee:90:d6:74:40:f6:db:ab:df:
                    3f:98:1d:21:6a:d5:56:1e:2a:65:29:71:8b:6c:06:
                    91:a1:52:12:1f:41:19:26:a7:7a:fb:65:76:91:8b:
                    9c:bd:12:b2:17:f4:a6:af:18:25:c3:c8:d4:8a:26:
                    e2:21:4a:90:08:a5:89:3a:d6:c6:7f:08:0f:6d:8e:
                    10:63:09:f8:74:b8:ed:bd:6e:4f:47:57:a9:73:82:
                    25:b1:5e:dc:28:91:51:3f:f4:a2:94:cf:d3:86:40:
                    e3:74:c1:7f:83:9b:6e:95:95:43:6c:67:24:63:cd:
                    ec:55:2a:20:08:dc:20:35:03:24:c7:3e:74:ce:91:
                    ca:74:7d:17:46:ec:ad:ee:77:af:44:54:f3:72:84:
                    3f:11:a0:44:d9:44:45:c6:79:8c:b2:b2:ec:77:49:
                    de:1f:e2:3f:37:6d:fb:0a:af:07:8c:ad:3a:0a:ff:
                    e8:e0:29:a1:ac:6d:23:95:fb:f7:98:e3:36:e8:a5:
                    e3:2f:42:54:05:eb:e7:b9:48:a6:71:b9:7d:ac:fd:
                    17:41:99:ae:c6:97:9f:d5:23:07:09:0c:9b:39:7f:
                    51:b1:ff:98:48:e9:53:83:e0:c5:a2:6d:4d:0f:05:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AF:27:53:1F:3C:93:4F:02:4D:56:35:90:76:C1:3F:A5:06:FB:BC
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:be:a5:76:8e:c8:5e:d0:ef:2b:39:94:f8:9d:74:55:04:d4:
         0f:85:02:d0:bb:3e:1e:0d:3a:86:ce:5d:7e:ca:69:dd:e1:2f:
         27:d7:be:87:32:6a:45:02:82:d4:b0:b3:5a:1d:aa:38:17:84:
         26:62:42:81:42:4e:7d:64:98:07:21:50:d8:50:d7:7d:e0:3e:
         97:fc:77:2c:d0:e4:83:53:05:d5:b4:6e:09:07:c8:b5:03:97:
         f4:dd:0d:48:eb:a0:ec:72:c4:3e:aa:15:da:ee:2c:8f:4c:d6:
         44:32:c8:30:7d:c3:58:1e:c3:fb:85:6a:25:17:db:cb:cf:01:
         89:58:c0:ff:81:ea:fa:cd:c2:3a:28:4a:a3:7e:a4:f6:65:61:
         cd:3b:27:71:45:81:84:2d:66:2e:3b:8b:e5:7b:e2:ef:94:8f:
         83:4f:3f:fe:a5:fb:b5:d2:10:95:57:c4:b9:19:d1:a7:c6:45:
         d8:e1:40:4d:da:55:10:58:3b:a7:c1:30:c9:5c:6a:46:ab:c2:
         17:00:28:fd:7f:b0:c3:85:7f:26:2f:09:b9:dd:d4:f7:64:3a:
         41:fd:f5:92:56:7b:b5:a8:62:35:38:2c:bd:1d:be:15:c0:59:
         6f:f6:2c:ca:77:0a:e1:89:85:94:93:a8:6e:6d:24:95:07:93:
         43:37:94:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz
QzE5QUYwNTAwHhcNMjUxMDE5MDEyODM1WhcNMjUxMDI2MDEyODM1WjAYMRYwFAYD
VQQDEw02OGY0M2VjMy0wOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0dQF0ziIM3VYcgFLWqdP2t7T9NrukNZ0QPbbq98/mB0hatVWHiplKXGLbAaR
oVISH0EZJqd6+2V2kYucvRKyF/Smrxglw8jUiibiIUqQCKWJOtbGfwgPbY4QYwn4
dLjtvW5PR1epc4IlsV7cKJFRP/SilM/ThkDjdMF/g5tulZVDbGckY83sVSogCNwg
NQMkxz50zpHKdH0XRuyt7nevRFTzcoQ/EaBE2URFxnmMsrLsd0neH+I/N237Cq8H
jK06Cv/o4CmhrG0jlfv3mOM26KXjL0JUBevnuUimcbl9rP0XQZmuxpef1SMHCQyb
OX9Rsf+YSOlTg+DFom1NDwVkoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuvJ1Mf
PJNPAk1WNZB2wT+lBvu8MB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw
QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh
WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNvqV2jshe0O8rOZT4nXRVBNQPhQLQuz4eDTqGzl1+ymnd4S8n176H
MmpFAoLUsLNaHao4F4QmYkKBQk59ZJgHIVDYUNd94D6X/Hcs0OSDUwXVtG4JB8i1
A5f03Q1I66DscsQ+qhXa7iyPTNZEMsgwfcNYHsP7hWolF9vLzwGJWMD/ger6zcI6
KEqjfqT2ZWHNOydxRYGELWYuO4vle+LvlI+DTz/+pfu10hCVV8S5GdGnxkXY4UBN
2lUQWDunwTDJXGpGq8IXACj9f7DDhX8mLwm53dT3ZDpB/fWSVnu1qGI1OCy9Hb4V
wFlv9izKdwrhiYWUk6hubSSVB5NDN5SZ
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:58 2025 by rpki-client