Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
File:                     q6uaWObZNbfys4ayc-NP3Dhg0pk.mft (raw, json)
Hash identifier:          CFfnybK5jGRm96ScE1ypBaTRG4rcCGwImGG1g0MK/Sk=
Subject key identifier:   29:EF:D8:DB:E1:10:A2:29:26:B8:13:D7:D0:6F:74:22:EA:C6:38:06
Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99
Certificate issuer:       /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
Manifest number:          021D
Signing time:             Sun 19 Oct 2025 04:22:06 +0000
Manifest this update:     Sun 19 Oct 2025 04:22:06 +0000
Manifest next update:     Sun 26 Oct 2025 04:22:06 +0000
Files and hashes:         1: q6uaWObZNbfys4ayc-NP3Dhg0pk.crl (hash: P36qc0JmXpOSzyNFRTVPp+YfCoLPo6RSTGp17mltD7Y=)
                          2: 0CDB293E6E3F11ED9DF20483C4F9AE02.roa (hash: HhHwFRrPmQKTZVgKvpvG7bpVWezUYsnBZKOPfKCB+PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl
                          rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915802F, serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
        Validity
            Not Before: Oct 19 04:22:06 2025 GMT
            Not After : Oct 26 04:22:06 2025 GMT
        Subject: CN=68f4676e-0ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:86:c7:a3:df:33:03:51:ee:a2:ae:ab:53:
                    df:83:40:c0:a1:18:67:0e:e0:da:bc:d0:93:1e:c8:
                    33:bf:80:07:0f:3a:41:f0:24:6f:49:b7:02:04:db:
                    ac:af:48:53:f0:72:67:5d:f9:fb:be:da:4e:d9:18:
                    28:53:ca:15:3d:e5:87:c1:ec:3a:13:85:42:17:b0:
                    04:57:d4:d7:aa:d1:a4:ac:a0:93:b8:f1:35:7b:89:
                    e9:02:b8:5c:8c:9b:71:2b:8c:3f:c2:44:80:66:f0:
                    1d:7d:1a:45:53:8c:04:42:30:1e:ae:26:df:8a:ee:
                    35:2e:43:5d:c6:9c:4a:35:2f:22:a3:64:39:76:46:
                    55:b2:39:a2:a0:81:21:6d:52:5f:ab:74:81:75:1f:
                    64:3d:3a:4b:61:2c:70:6e:ca:8f:26:35:fa:ff:0b:
                    23:e2:7d:17:fc:39:bd:9d:ca:0a:0f:58:85:22:f9:
                    00:c0:1f:6f:9f:29:32:dd:14:34:e2:6e:47:57:fc:
                    b3:97:04:55:59:97:78:e1:49:c9:69:30:78:be:ee:
                    c6:aa:ff:39:f9:0a:bb:84:5d:37:f3:1b:9f:ad:84:
                    22:17:61:9c:03:88:3a:84:9f:f4:1e:8c:fc:6e:9a:
                    4a:41:d8:22:4d:51:35:3b:5f:eb:8f:63:aa:12:ed:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:D8:DB:E1:10:A2:29:26:B8:13:D7:D0:6F:74:22:EA:C6:38:06
            X509v3 Authority Key Identifier:
                keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a5:73:12:70:f7:9f:1e:8e:21:30:8c:24:16:38:eb:8a:cd:
         1d:0b:18:21:aa:8a:16:e4:78:88:7e:2c:2b:3c:52:41:79:bc:
         06:d7:a2:b2:87:74:16:e9:c3:4d:0d:84:ba:a3:1c:5d:f1:ef:
         c0:f3:ed:78:28:d2:a5:3a:25:96:5b:31:7a:82:de:91:cd:3d:
         24:d0:8d:23:04:d6:30:a5:7f:ea:a8:ad:8e:3c:0d:2d:f4:ae:
         25:4a:21:66:d3:5d:28:33:44:b9:c5:00:8b:72:d9:cf:80:4e:
         35:d6:9b:bd:54:75:20:d9:fd:dc:d0:4e:0b:fc:4d:28:25:68:
         d5:18:39:fe:73:d3:30:75:3e:55:38:52:f7:7e:59:c9:3f:7a:
         98:bf:4b:ad:70:e3:81:c5:df:87:a9:d2:89:df:7f:3b:c8:24:
         86:df:a9:30:f8:d4:c6:89:c8:49:d7:92:08:83:71:37:e1:a9:
         16:c6:2a:ce:56:27:f0:98:22:ca:4e:fd:47:70:31:d5:a2:f9:
         8f:bb:c1:7e:43:31:15:27:b2:b3:27:f8:b9:fd:aa:b7:cc:c9:
         c3:05:20:21:af:dd:8c:50:75:4f:65:e9:6e:51:c5:6d:0b:c1:
         e1:63:30:26:72:c7:47:c6:b7:52:7b:0f:af:be:7f:83:ea:2a:
         2e:b9:29:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwMkYxMTAvBgNVBAUTKEFCQUI5QTU4RTZEOTM1QjdGMkIzODZCMjczRTM0RkRD
Mzg2MEQyOTkwHhcNMjUxMDE5MDQyMjA2WhcNMjUxMDI2MDQyMjA2WjAYMRYwFAYD
VQQDEw02OGY0Njc2ZS0wYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsuiGx6PfMwNR7qKuq1Pfg0DAoRhnDuDavNCTHsgzv4AHDzpB8CRvSbcCBNus
r0hT8HJnXfn7vtpO2RgoU8oVPeWHwew6E4VCF7AEV9TXqtGkrKCTuPE1e4npArhc
jJtxK4w/wkSAZvAdfRpFU4wEQjAeribfiu41LkNdxpxKNS8io2Q5dkZVsjmioIEh
bVJfq3SBdR9kPTpLYSxwbsqPJjX6/wsj4n0X/Dm9ncoKD1iFIvkAwB9vnyky3RQ0
4m5HV/yzlwRVWZd44UnJaTB4vu7Gqv85+Qq7hF038xufrYQiF2GcA4g6hJ/0Hoz8
bppKQdgiTVE1O1/rj2OqEu0usQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnv2Nvh
EKIpJrgT19BvdCLqxjgGMB8GA1UdIwQYMBaAFKurmljm2TW38rOGsnPjT9w4YNKZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyRi9FNzRCRUUyMjZF
M0IxMUVEQUI4ODZFNTVDNEY5QUUwMi9xNnVhV09iWk5iZnlzNGF5Yy1OUDNEaGcw
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E2dWFXT2JaTmJmeXM0YXljLU5QM0RoZzBway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODAyRi9FNzRCRUUyMjZFM0IxMUVEQUI4ODZFNTVDNEY5QUUwMi9xNnVhV09iWk5i
ZnlzNGF5Yy1OUDNEaGcwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvpXMScPefHo4hMIwkFjjris0dCxghqooW5HiIfiwrPFJBebwG16Ky
h3QW6cNNDYS6oxxd8e/A8+14KNKlOiWWWzF6gt6RzT0k0I0jBNYwpX/qqK2OPA0t
9K4lSiFm010oM0S5xQCLctnPgE411pu9VHUg2f3c0E4L/E0oJWjVGDn+c9MwdT5V
OFL3flnJP3qYv0utcOOBxd+HqdKJ3387yCSG36kw+NTGichJ15IIg3E34akWxirO
VifwmCLKTv1HcDHVovmPu8F+QzEVJ7KzJ/i5/aq3zMnDBSAhr92MUHVPZeluUcVt
C8HhYzAmcsdHxrdSew+vvn+D6iouuSkT
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:42 2025 by rpki-client