Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File:                     Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier:          upeFI3WmTAB6F2x9bwfTpmpri8QfIx5ZvA2PVilpj9w=
Subject key identifier:   72:AB:4C:E6:CD:9E:78:27:F3:0C:65:65:C9:7B:F1:60:C6:06:3A:78
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       0916
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number:          08FA
Signing time:             Sat 18 Oct 2025 21:27:53 +0000
Manifest this update:     Sat 18 Oct 2025 21:27:53 +0000
Manifest next update:     Sat 25 Oct 2025 21:27:53 +0000
Files and hashes:         1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: g8RJY/091zm0eemhY7Nb7CA4HTzJ2hSvHVkfAbZ1Wjo=)
                          2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=)
                          3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=)
                          4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=)
                          5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Oct 18 21:27:53 2025 GMT
            Not After : Oct 25 21:27:53 2025 GMT
        Subject: CN=68f40659-610e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:92:27:ba:2a:c0:55:84:1f:10:13:b6:13:
                    66:11:07:45:f7:d9:ff:4f:54:16:eb:ee:35:0d:68:
                    51:bb:d6:57:c6:05:4c:92:32:3a:6a:dc:c6:b4:8b:
                    b4:95:45:26:f6:72:05:e8:3b:03:c7:7a:a9:6c:3f:
                    44:8e:84:0f:b7:50:59:0d:98:84:15:2f:4f:c9:37:
                    b7:b0:93:db:87:7f:db:14:58:22:7d:3c:be:31:2a:
                    2a:1d:57:02:dd:11:ea:cf:32:a2:39:ec:53:9f:ff:
                    fd:94:12:8a:1e:e6:4f:f9:8d:03:66:18:4c:bd:07:
                    a2:46:d7:cd:b8:e1:81:d5:aa:83:34:71:bc:eb:a7:
                    ad:db:ee:21:13:c2:96:29:ce:10:9f:42:a8:06:61:
                    b1:8d:c9:7b:dd:06:b2:6e:0e:c9:31:d4:b4:4d:46:
                    58:72:4f:bf:90:0e:98:82:33:2e:7d:55:31:c4:64:
                    34:38:d5:5c:d5:b6:ac:a8:95:90:64:dd:f1:72:70:
                    56:8a:43:f6:04:f9:00:3c:c6:96:df:1a:1b:e8:32:
                    91:55:f9:6f:e8:b6:62:ad:97:6b:c9:6b:ad:5a:3e:
                    93:9c:d0:b1:2d:f9:dd:12:ad:98:0c:2d:0b:5e:cd:
                    45:06:c0:7d:51:91:db:b2:2e:2d:9d:fe:76:fa:32:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AB:4C:E6:CD:9E:78:27:F3:0C:65:65:C9:7B:F1:60:C6:06:3A:78
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:9a:1e:1d:f3:f0:2a:6f:5c:10:83:50:97:72:97:f9:eb:
         81:01:11:65:cc:32:d2:b1:4e:e6:85:93:67:2f:d0:89:9c:9b:
         c0:dd:15:e9:a7:b0:a0:22:b9:69:cb:25:2b:ae:58:92:25:33:
         db:52:60:6d:df:88:65:9e:c8:1b:d8:ad:4c:f4:33:fb:c4:69:
         fc:10:95:7d:6d:24:5f:5f:1e:f9:43:66:a6:c4:78:d0:43:81:
         25:27:0c:a2:dd:38:7c:f9:be:b0:ba:1b:a4:85:ad:98:53:82:
         b5:37:4c:2b:ea:1e:3b:f0:20:e4:fa:bb:8a:8f:19:3f:73:70:
         99:3b:64:5e:db:6a:64:7e:c0:e6:43:14:34:2f:a9:29:62:8a:
         a2:72:96:66:8b:ee:43:41:7a:49:37:20:13:86:4d:a5:87:80:
         fa:3a:3e:77:25:39:0a:ff:b5:91:02:4b:6f:80:0e:17:d3:4b:
         17:88:66:f6:9a:1d:a3:43:15:fc:1b:3a:8e:c4:ae:9f:02:00:
         e0:f1:4d:32:03:20:96:9b:1f:60:c3:1d:6c:49:8b:77:71:ee:
         6f:19:ab:90:b3:33:59:25:5a:52:98:63:12:07:aa:94:2b:3d:
         58:cd:f0:56:de:9f:f5:b2:d3:8b:07:f6:9e:98:5a:1c:ac:b1:
         1f:34:17:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG
MzlEQkM4NjYwHhcNMjUxMDE4MjEyNzUzWhcNMjUxMDI1MjEyNzUzWjAYMRYwFAYD
VQQDEw02OGY0MDY1OS02MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2P+SJ7oqwFWEHxATthNmEQdF99n/T1QW6+41DWhRu9ZXxgVMkjI6atzGtIu0
lUUm9nIF6DsDx3qpbD9EjoQPt1BZDZiEFS9PyTe3sJPbh3/bFFgifTy+MSoqHVcC
3RHqzzKiOexTn//9lBKKHuZP+Y0DZhhMvQeiRtfNuOGB1aqDNHG866et2+4hE8KW
Kc4Qn0KoBmGxjcl73Qaybg7JMdS0TUZYck+/kA6YgjMufVUxxGQ0ONVc1basqJWQ
ZN3xcnBWikP2BPkAPMaW3xob6DKRVflv6LZirZdryWutWj6TnNCxLfndEq2YDC0L
Xs1FBsB9UZHbsi4tnf52+jLQVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKrTObN
nngn8wxlZcl78WDGBjp4MB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5
RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV
eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9XZoeHfPwKm9cEINQl3KX+euBARFlzDLSsU7mhZNnL9CJnJvA3RXp
p7CgIrlpyyUrrliSJTPbUmBt34hlnsgb2K1M9DP7xGn8EJV9bSRfXx75Q2amxHjQ
Q4ElJwyi3Th8+b6wuhukha2YU4K1N0wr6h478CDk+ruKjxk/c3CZO2Re22pkfsDm
QxQ0L6kpYoqicpZmi+5DQXpJNyAThk2lh4D6Oj53JTkK/7WRAktvgA4X00sXiGb2
mh2jQxX8GzqOxK6fAgDg8U0yAyCWmx9gwx1sSYt3ce5vGauQszNZJVpSmGMSB6qU
Kz1YzfBW3p/1stOLB/aemFocrLEfNBdH
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:50 2025 by rpki-client