Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File:                     PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier:          Awjx9i+pY7ZTZw95iKMRm1JLzzugxChMSNaV0epu2gw=
Subject key identifier:   A3:C1:2E:61:98:8A:DB:35:6A:B0:43:A3:84:3F:52:C6:FD:C6:BD:AA
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       0306
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number:          02EC
Signing time:             Sun 19 Oct 2025 03:28:27 +0000
Manifest this update:     Sun 19 Oct 2025 03:28:27 +0000
Manifest next update:     Sun 26 Oct 2025 03:28:27 +0000
Files and hashes:         1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: A3KNtzzoEt8aAblzqOHMwNwyib7n2HY8r5PkIuGxmA8=)
                          2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=)
                          3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=)
                          4: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=)
                          5: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Oct 19 03:28:27 2025 GMT
            Not After : Oct 26 03:28:27 2025 GMT
        Subject: CN=68f45adb-a709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:98:47:de:06:88:6f:9b:b6:48:ba:d6:f4:
                    51:07:d2:2e:d0:23:c4:6d:07:b7:9d:cd:1b:30:b1:
                    29:38:03:14:a7:65:47:70:29:e2:20:c9:bb:70:9d:
                    fc:20:c9:f6:d8:e4:0c:8b:5c:00:8e:76:4e:42:18:
                    d2:de:07:34:83:9e:b3:ac:16:e0:86:90:7b:58:16:
                    7d:2e:14:00:04:94:34:82:30:31:3e:6b:5e:12:ea:
                    51:bf:35:18:f5:aa:b9:ec:76:61:0e:51:03:f7:6f:
                    ef:37:50:1f:f0:d3:a3:1b:e4:01:95:66:b9:f2:f0:
                    b6:ea:ab:e9:4c:cf:8a:3d:83:5e:20:38:58:51:74:
                    a4:dd:71:01:95:fb:87:82:30:39:6c:58:2f:12:bf:
                    5d:77:6e:e7:a2:2b:20:3e:c3:8a:ce:b0:cf:07:29:
                    2f:f5:e0:78:7d:60:13:38:54:77:a1:55:05:6d:7d:
                    08:aa:d8:73:a6:09:07:71:6a:30:4c:46:59:40:7f:
                    79:51:2e:71:0a:68:00:4a:74:40:a4:d0:f3:8f:76:
                    c3:d9:a8:61:cd:e2:45:4e:ca:12:57:4b:7e:ca:a8:
                    fd:be:6a:68:f1:0c:56:c0:2c:0c:6d:fd:1d:b4:01:
                    dd:f7:16:86:b1:bd:6a:bc:18:59:76:d3:3b:da:8e:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:2E:61:98:8A:DB:35:6A:B0:43:A3:84:3F:52:C6:FD:C6:BD:AA
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:52:d3:1e:10:39:de:11:60:ce:d1:27:6e:6d:93:4f:10:28:
         56:9c:42:b9:31:f1:d0:bb:fe:ee:bb:23:2e:1a:1d:3f:73:fe:
         e3:df:de:52:2d:0c:59:75:3a:8e:1e:04:b8:2c:eb:d0:ca:3e:
         34:44:73:fe:64:a3:4a:45:d0:22:c8:ed:13:11:fb:bf:aa:d6:
         64:72:02:6f:c0:43:05:1c:7b:5e:28:a8:86:c1:90:16:dc:ed:
         5c:5c:41:fa:85:1d:e4:eb:92:29:86:d9:27:b0:42:3e:23:6c:
         de:b9:2d:90:08:e8:39:ac:05:1b:30:18:88:0e:96:68:1d:f8:
         7c:3e:0a:fc:3b:52:71:b7:7f:f7:81:86:02:e7:a1:e0:7d:4e:
         99:4a:62:d0:23:9e:d1:8c:97:16:4f:7b:d0:81:55:6d:a1:7e:
         87:bb:30:bc:da:ad:b7:14:1d:40:fd:89:76:22:f9:bd:17:79:
         58:44:2a:97:44:fe:ad:be:a6:4b:57:f3:6a:e7:a7:7d:1e:3a:
         31:ac:57:f3:18:2d:0f:ee:f2:9a:52:b9:05:5c:bc:db:87:94:
         43:9d:85:62:da:23:86:d9:f1:e2:3d:12:65:de:39:09:2c:d0:
         7a:f6:62:c8:12:e1:ff:42:3f:3f:01:c7:48:45:0f:88:4e:14:
         12:db:ab:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2
RjkyNDlGQkQwHhcNMjUxMDE5MDMyODI3WhcNMjUxMDI2MDMyODI3WjAYMRYwFAYD
VQQDEw02OGY0NWFkYi1hNzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxo6YR94GiG+btki61vRRB9Iu0CPEbQe3nc0bMLEpOAMUp2VHcCniIMm7cJ38
IMn22OQMi1wAjnZOQhjS3gc0g56zrBbghpB7WBZ9LhQABJQ0gjAxPmteEupRvzUY
9aq57HZhDlED92/vN1Af8NOjG+QBlWa58vC26qvpTM+KPYNeIDhYUXSk3XEBlfuH
gjA5bFgvEr9dd27noisgPsOKzrDPBykv9eB4fWATOFR3oVUFbX0IqthzpgkHcWow
TEZZQH95US5xCmgASnRApNDzj3bD2ahhzeJFTsoSV0t+yqj9vmpo8QxWwCwMbf0d
tAHd9xaGsb1qvBhZdtM72o6fgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPBLmGY
its1arBDo4Q/Usb9xr2qMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2
NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj
UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHUtMeEDneEWDO0SdubZNPEChWnEK5MfHQu/7uuyMuGh0/c/7j395S
LQxZdTqOHgS4LOvQyj40RHP+ZKNKRdAiyO0TEfu/qtZkcgJvwEMFHHteKKiGwZAW
3O1cXEH6hR3k65IphtknsEI+I2zeuS2QCOg5rAUbMBiIDpZoHfh8Pgr8O1Jxt3/3
gYYC56HgfU6ZSmLQI57RjJcWT3vQgVVtoX6HuzC82q23FB1A/Yl2Ivm9F3lYRCqX
RP6tvqZLV/Nq56d9HjoxrFfzGC0P7vKaUrkFXLzbh5RDnYVi2iOG2fHiPRJl3jkJ
LNB69mLIEuH/Qj8/AcdIRQ+IThQS26um
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:33 2025 by rpki-client