Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          IKhuxOFt6Z57hVAbQJrGI4ba33Btazq+hC1285rGsl4=
Subject key identifier:   A7:D4:18:2E:88:AA:B2:F8:9E:D7:1B:E2:BC:06:EC:8B:B2:89:A4:0B
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          316A
Signing time:             Mon 20 Oct 2025 15:35:14 +0000
Manifest this update:     Mon 20 Oct 2025 15:35:14 +0000
Manifest next update:     Mon 27 Oct 2025 15:35:14 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: jZy6DY5V0n83eM2vhHQuNXBion2JyNc7VwpBZJsZx6E=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          14: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          15: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: UHXUpkRugKy6EgznS2JdZNiK+nJDr8X2Oqzd4iIrz1M=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 15:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12928 (0x3280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Oct 20 15:35:14 2025 GMT
            Not After : Oct 27 15:35:14 2025 GMT
        Subject: CN=68f656b2-2163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:ac:58:22:d0:0c:96:fb:a8:8e:7e:80:3c:
                    44:7b:85:bc:04:82:0c:f6:aa:57:ba:42:89:47:ff:
                    24:6e:9d:ed:6c:82:3f:14:0c:16:b1:df:15:29:06:
                    7f:0b:35:1b:54:e9:c9:d1:d6:a9:79:eb:16:e7:76:
                    69:ff:f9:98:d0:d5:c0:ee:47:43:3e:8c:38:53:d4:
                    7b:bd:44:bf:e8:be:55:99:95:2a:c3:27:cc:d9:ad:
                    6b:eb:2f:93:4b:17:ba:82:e7:35:8c:40:5e:57:89:
                    4e:95:e0:1a:0b:d6:b6:5d:03:06:cb:a6:b3:0c:5c:
                    7f:78:ec:86:c3:f2:9e:c2:4b:8d:b1:a0:1c:77:28:
                    26:5b:a7:ac:85:cf:0f:9e:fb:08:43:51:3f:ba:23:
                    58:a9:49:b2:ae:55:d1:db:da:db:dc:94:e0:bb:37:
                    35:1e:f2:5a:55:5d:70:12:ca:e3:04:2c:8f:24:ee:
                    2e:ad:e7:6e:9d:d6:55:e9:dc:19:00:a4:12:26:ed:
                    fc:dd:09:10:1a:5a:77:2a:9d:ca:e8:d1:55:09:fb:
                    44:c9:48:d8:d9:6a:5b:8f:2e:18:c2:14:c2:73:51:
                    75:9c:00:10:5a:30:98:39:82:c2:97:a7:44:fb:79:
                    65:c3:fe:99:6f:fe:0f:b5:8b:f7:94:d6:73:fc:3e:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:18:2E:88:AA:B2:F8:9E:D7:1B:E2:BC:06:EC:8B:B2:89:A4:0B
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:7a:4a:7a:4e:31:63:be:ca:4a:7f:57:86:a9:5a:84:a1:
         ba:c0:dc:87:8e:4e:15:2c:4a:7b:28:35:42:d3:16:11:5a:2c:
         e8:6f:12:88:59:09:03:b2:74:3d:eb:dd:69:72:ed:e0:5a:68:
         e8:64:2f:ac:df:0a:da:2d:ac:22:eb:d4:11:15:47:bc:69:13:
         6d:b4:61:a7:72:9c:74:7b:ee:fb:4c:ea:52:20:7d:98:0f:fe:
         18:37:d9:a9:a4:4d:a5:3d:7c:20:56:8a:e5:4f:3e:c4:ac:c1:
         eb:2c:fc:4e:7e:1e:da:fa:cf:b6:2a:98:42:58:b3:9e:5a:1a:
         c8:a8:69:9d:59:d0:c9:7e:45:4c:09:26:95:ce:5e:61:f1:73:
         1b:e8:77:7d:b3:c7:c3:92:33:a7:06:3f:9e:6e:ed:0e:af:13:
         ce:68:7e:07:09:5b:d5:80:28:b1:5a:de:ba:58:ed:49:2b:73:
         7b:24:8a:a7:3b:3d:9c:51:6c:47:4c:b8:81:3b:81:99:73:79:
         90:ba:4d:b5:5e:a9:d4:98:94:5f:65:5e:f5:99:1c:6f:89:e5:
         09:f0:ec:f9:d7:6e:23:c0:fd:de:d1:d1:27:2c:bf:d6:e2:dc:
         2c:3c:47:40:64:82:9b:47:61:bc:f8:39:a1:94:90:24:a9:09:
         9e:1a:c2:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjUxMDIwMTUzNTE0WhcNMjUxMDI3MTUzNTE0WjAYMRYwFAYD
VQQDEw02OGY2NTZiMi0yMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApr2sWCLQDJb7qI5+gDxEe4W8BIIM9qpXukKJR/8kbp3tbII/FAwWsd8VKQZ/
CzUbVOnJ0dapeesW53Zp//mY0NXA7kdDPow4U9R7vUS/6L5VmZUqwyfM2a1r6y+T
Sxe6guc1jEBeV4lOleAaC9a2XQMGy6azDFx/eOyGw/KewkuNsaAcdygmW6eshc8P
nvsIQ1E/uiNYqUmyrlXR29rb3JTguzc1HvJaVV1wEsrjBCyPJO4uredundZV6dwZ
AKQSJu383QkQGlp3Kp3K6NFVCftEyUjY2Wpbjy4YwhTCc1F1nAAQWjCYOYLCl6dE
+3llw/6Zb/4PtYv3lNZz/D4u3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfUGC6I
qrL4ntcb4rwG7IuyiaQLMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0U3NS9EMjJFRjNENkZGNEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdE
SmJlLUNCX1pLR3g1dnFhb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCDHpKek4xY77KSn9XhqlahKG6wNyHjk4VLEp7KDVC0xYRWizobxKI
WQkDsnQ9691pcu3gWmjoZC+s3wraLawi69QRFUe8aRNttGGncpx0e+77TOpSIH2Y
D/4YN9mppE2lPXwgVorlTz7ErMHrLPxOfh7a+s+2KphCWLOeWhrIqGmdWdDJfkVM
CSaVzl5h8XMb6Hd9s8fDkjOnBj+ebu0OrxPOaH4HCVvVgCixWt66WO1JK3N7JIqn
Oz2cUWxHTLiBO4GZc3mQuk21XqnUmJRfZV71mRxvieUJ8Oz5124jwP3e0dEnLL/W
4twsPEdAZIKbR2G8+DmhlJAkqQmeGsLn
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:38:46 2025 by rpki-client