Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File:                     xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier:          zeuMboGhnO4UCjw6LFnZvqkPv1RCTMkIP7GZePIMtwM=
Subject key identifier:   34:E2:04:AA:D9:14:FB:06:B8:7C:77:C8:BC:89:D3:B5:4C:B6:33:27
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer:       /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial:       2368
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number:          2336
Signing time:             Sat 18 Oct 2025 16:05:26 +0000
Manifest this update:     Sat 18 Oct 2025 16:05:25 +0000
Manifest next update:     Sat 25 Oct 2025 16:05:25 +0000
Files and hashes:         1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: mLi3PGUNBL59zjqPs2zLfhmCsvQSYR8Wyvgthtk+ixM=)
                          2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=)
                          3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=)
                          4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
                          rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9064 (0x2368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
        Validity
            Not Before: Oct 18 16:05:25 2025 GMT
            Not After : Oct 25 16:05:25 2025 GMT
        Subject: CN=68f3bac6-e7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:fe:04:1b:c3:e0:4a:da:0b:6d:17:ab:05:
                    5c:28:5c:64:31:ab:25:0b:00:33:d4:63:ce:3f:e6:
                    4b:ad:fe:36:14:d0:93:e8:58:a7:98:45:db:09:a9:
                    a4:3e:4c:7d:a0:68:15:96:83:ae:08:ab:5a:b4:ea:
                    67:dd:1c:1e:d7:a0:8d:86:0b:4a:6d:8d:1d:0a:d2:
                    dd:62:ed:1a:fa:5c:87:db:36:2a:d5:b3:f2:d7:85:
                    a0:de:5c:e2:1f:4d:79:b7:e3:d5:24:b2:61:de:7a:
                    2d:2c:2e:71:4b:ed:6a:0d:56:e2:53:94:3a:d6:cd:
                    de:0d:03:06:29:52:1e:4e:a5:fb:6e:fa:a5:26:8f:
                    2e:e9:4e:8f:0a:60:dd:20:09:84:07:10:6e:c9:a7:
                    2b:d8:3d:cd:f3:5d:a3:4d:7e:8d:82:f9:3d:ae:47:
                    b4:09:4d:00:8c:9d:67:e1:65:6f:e8:20:28:9a:b4:
                    de:15:b2:b4:24:95:a4:e5:db:55:67:7e:d1:05:5e:
                    30:d7:6c:37:a6:29:87:89:8f:df:88:23:49:95:95:
                    32:dc:0d:9b:53:c8:d1:1f:7d:06:c3:2e:86:5b:da:
                    3f:f0:a1:f3:47:0a:76:c5:92:f3:e1:dc:9d:57:45:
                    db:ef:8f:25:9c:d7:f4:ce:b3:79:45:a2:b1:3a:71:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:04:AA:D9:14:FB:06:B8:7C:77:C8:BC:89:D3:B5:4C:B6:33:27
            X509v3 Authority Key Identifier:
                keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:3b:e8:5a:54:33:de:74:98:24:55:50:cb:39:2c:ff:b0:
         1a:04:33:1a:05:28:36:d6:2e:57:8d:95:47:1a:c3:c2:90:dd:
         8a:82:fa:73:f2:18:3b:f6:46:e7:12:d9:99:46:42:9e:c3:7a:
         be:dd:cf:2d:31:96:af:cb:6e:fc:f1:bd:7d:9d:b6:2d:6c:37:
         68:3b:91:06:6b:83:9c:17:41:6b:ed:cc:22:11:61:62:3c:d6:
         a6:6b:84:74:5c:06:f6:95:6c:fe:23:55:cc:3b:d1:e1:eb:cf:
         8f:b9:06:71:4b:13:dd:68:8d:d4:3c:5c:ff:54:e3:a5:2d:b2:
         07:a3:17:0a:2f:a6:af:26:f0:c9:a2:bf:c5:cd:e8:15:5d:05:
         c7:52:4a:c8:47:f4:0e:8b:3d:db:4f:c5:d3:b0:43:63:94:48:
         3f:8a:b1:01:c0:b0:55:1a:0d:a7:d5:42:db:2d:55:2d:01:f0:
         2b:f1:b5:21:83:74:2e:ca:b7:ce:eb:ec:96:9b:3c:c0:7a:44:
         da:2a:a5:40:7b:19:d9:38:99:69:25:73:75:11:0c:1f:73:29:
         60:4a:b2:33:8d:20:7c:ef:1f:92:60:53:ed:7d:1d:2c:a3:02:
         4f:5e:f4:97:60:11:47:8c:c1:aa:02:4b:9d:fa:94:ea:1f:c6:
         8b:6a:ff:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE
NDUyODk0MTEwHhcNMjUxMDE4MTYwNTI1WhcNMjUxMDI1MTYwNTI1WjAYMRYwFAYD
VQQDEw02OGYzYmFjNi1lN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukj+BBvD4EraC20XqwVcKFxkMaslCwAz1GPOP+ZLrf42FNCT6FinmEXbCamk
Pkx9oGgVloOuCKtatOpn3Rwe16CNhgtKbY0dCtLdYu0a+lyH2zYq1bPy14Wg3lzi
H015t+PVJLJh3notLC5xS+1qDVbiU5Q61s3eDQMGKVIeTqX7bvqlJo8u6U6PCmDd
IAmEBxBuyacr2D3N812jTX6Ngvk9rke0CU0AjJ1n4WVv6CAomrTeFbK0JJWk5dtV
Z37RBV4w12w3pimHiY/fiCNJlZUy3A2bU8jRH30Gwy6GW9o/8KHzRwp2xZLz4dyd
V0Xb748lnNf0zrN5RaKxOnFLwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTiBKrZ
FPsGuHx3yLyJ07VMtjMnMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3
RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ
YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKLjvoWlQz3nSYJFVQyzks/7AaBDMaBSg21i5XjZVHGsPCkN2Kgvpz
8hg79kbnEtmZRkKew3q+3c8tMZavy2788b19nbYtbDdoO5EGa4OcF0Fr7cwiEWFi
PNama4R0XAb2lWz+I1XMO9Hh68+PuQZxSxPdaI3UPFz/VOOlLbIHoxcKL6avJvDJ
or/FzegVXQXHUkrIR/QOiz3bT8XTsENjlEg/irEBwLBVGg2n1ULbLVUtAfAr8bUh
g3QuyrfO6+yWmzzAekTaKqVAexnZOJlpJXN1EQwfcylgSrIzjSB87x+SYFPtfR0s
owJPXvSXYBFHjMGqAkud+pTqH8aLav/o
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:06 2025 by rpki-client