Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
File:                     snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json)
Hash identifier:          iCcVAixVGxjV7FAND85h6Ifilu7v/H69vd6tR5SCj4o=
Subject key identifier:   3C:19:98:D3:B2:CF:87:64:11:42:80:BA:88:26:4C:0F:8B:07:34:7A
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Certificate issuer:       /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial:       052D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
Manifest number:          0526
Signing time:             Sun 19 Oct 2025 01:18:14 +0000
Manifest this update:     Sun 19 Oct 2025 01:18:13 +0000
Manifest next update:     Sun 26 Oct 2025 01:18:13 +0000
Files and hashes:         1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: /FLNfsdkXgQCUDlYJctWi3ZJ2o+0garUJ0puoq8Z9XI=)
                          2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
                          rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
        Validity
            Not Before: Oct 19 01:18:13 2025 GMT
            Not After : Oct 26 01:18:13 2025 GMT
        Subject: CN=68f43c56-1773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:bc:a6:26:e5:22:00:26:ef:ec:f1:f5:25:
                    24:b7:76:f3:7f:ba:57:3b:e4:74:94:9b:f2:d3:04:
                    51:d6:73:91:cf:9c:22:87:67:e7:38:b1:82:53:b1:
                    4d:0d:eb:df:df:2f:df:be:27:98:1e:75:cb:d3:b1:
                    e4:8d:52:6b:22:ac:e4:4d:b6:6b:eb:77:20:29:af:
                    f1:9a:49:1c:fc:02:69:3e:d6:95:19:bf:f7:0a:88:
                    78:88:9f:2a:88:cb:9f:4b:31:8b:ae:0d:f7:cf:30:
                    25:e5:26:9c:c5:8c:a0:4c:25:ee:2f:f2:ed:20:d6:
                    e6:9a:4d:8b:6b:42:9a:24:c9:a9:9a:c2:ea:c8:3a:
                    e5:c8:24:de:8b:d5:fe:58:1e:b5:3b:4a:f2:bb:d3:
                    84:f9:d9:15:9d:e2:e3:f2:17:a9:c1:ae:fb:c0:1d:
                    8c:3e:41:2d:23:65:29:3a:1c:63:5c:58:bd:f9:01:
                    b5:64:b5:ce:f0:ca:e1:5f:63:bf:a9:6e:e8:c2:88:
                    de:8a:35:5e:2e:1f:62:56:ac:9f:64:82:54:d0:79:
                    f3:90:c0:f1:d7:a5:61:ed:32:37:86:3b:d6:40:1c:
                    1c:11:85:36:32:82:ba:c5:f5:b4:13:1b:f8:80:bc:
                    ef:21:69:9c:cb:5c:38:41:fc:39:1d:55:a5:38:81:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:98:D3:B2:CF:87:64:11:42:80:BA:88:26:4C:0F:8B:07:34:7A
            X509v3 Authority Key Identifier:
                keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:10:e7:c7:ec:88:1f:fd:26:ea:b9:98:87:80:a4:10:2f:04:
         97:44:b5:8d:f2:ef:da:37:03:52:25:04:85:20:e5:df:ee:e8:
         23:9b:99:11:be:8e:0c:76:3c:33:35:f8:15:a9:1e:8a:95:bf:
         47:fa:0b:49:38:a8:5f:a2:35:e6:b7:c1:92:ba:31:04:f5:1f:
         ac:ea:8c:c2:54:ef:c4:d2:88:89:ab:63:a7:bc:43:85:86:61:
         0c:1e:f7:b3:9d:55:62:3b:91:59:55:81:7b:ac:a9:07:d6:3a:
         b3:c9:38:ab:7c:45:3e:b7:c2:e8:b5:c8:1b:25:19:33:c5:94:
         03:44:e9:36:cf:ae:72:66:ff:41:3c:71:13:ba:b2:90:c2:fc:
         2f:34:ac:d6:46:55:c2:e0:15:b5:e6:dd:d9:8a:90:f4:d4:4e:
         60:28:58:42:0b:7d:0d:0f:b1:d9:46:80:3e:38:67:2e:26:a2:
         99:e3:83:7b:cf:83:cc:aa:05:ba:72:81:e8:1d:60:89:aa:1c:
         b0:02:aa:a2:35:20:25:7a:ca:04:c2:2a:22:b8:29:87:70:43:
         2a:06:ac:3d:43:b4:88:13:c3:c1:49:14:bc:96:b7:4b:af:be:
         aa:50:cd:1b:f1:e2:86:12:d3:6c:96:b4:d3:8d:5e:b9:6a:33:
         08:07:d1:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE
NTA1MzMyMTAwHhcNMjUxMDE5MDExODEzWhcNMjUxMDI2MDExODEzWjAYMRYwFAYD
VQQDEw02OGY0M2M1Ni0xNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAO8piblIgAm7+zx9SUkt3bzf7pXO+R0lJvy0wRR1nORz5wih2fnOLGCU7FN
Devf3y/fvieYHnXL07HkjVJrIqzkTbZr63cgKa/xmkkc/AJpPtaVGb/3Coh4iJ8q
iMufSzGLrg33zzAl5SacxYygTCXuL/LtINbmmk2La0KaJMmpmsLqyDrlyCTei9X+
WB61O0ryu9OE+dkVneLj8hepwa77wB2MPkEtI2UpOhxjXFi9+QG1ZLXO8MrhX2O/
qW7owojeijVeLh9iVqyfZIJU0HnzkMDx16Vh7TI3hjvWQBwcEYU2MoK6xfW0Exv4
gLzvIWmcy1w4Qfw5HVWlOIGV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwZmNOy
z4dkEUKAuogmTA+LBzR6MB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF
OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2
VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClEOfH7Igf/SbquZiHgKQQLwSXRLWN8u/aNwNSJQSFIOXf7ugjm5kR
vo4MdjwzNfgVqR6Klb9H+gtJOKhfojXmt8GSujEE9R+s6ozCVO/E0oiJq2OnvEOF
hmEMHveznVViO5FZVYF7rKkH1jqzyTirfEU+t8LotcgbJRkzxZQDROk2z65yZv9B
PHETurKQwvwvNKzWRlXC4BW15t3ZipD01E5gKFhCC30ND7HZRoA+OGcuJqKZ44N7
z4PMqgW6coHoHWCJqhywAqqiNSAlesoEwioiuCmHcEMqBqw9Q7SIE8PBSRS8lrdL
r76qUM0b8eKGEtNslrTTjV65ajMIB9Fk
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:05:43 2025 by rpki-client