Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
File:                     inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json)
Hash identifier:          dGx/BaUmWQy+mrO7y3EUYZSY43s/KnDOeLmQ4HSNTSE=
Subject key identifier:   3A:1C:94:A3:19:3F:AA:9B:D3:5F:64:64:9A:FA:00:7F:DB:61:CB:D6
Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
Certificate issuer:       /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
Manifest number:          0202
Signing time:             Sun 19 Oct 2025 04:46:25 +0000
Manifest this update:     Sun 19 Oct 2025 04:46:25 +0000
Manifest next update:     Sun 26 Oct 2025 04:46:25 +0000
Files and hashes:         1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: q7kNjvSL/ZBswvMsWY6nnglQpwV2vSp7HbR7iYDUWUk=)
                          2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: 0cSwyQIrwsLrX5HCGrd1L+L8tXaOyusCzdo4wFfko7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
                          rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
        Validity
            Not Before: Oct 19 04:46:25 2025 GMT
            Not After : Oct 26 04:46:25 2025 GMT
        Subject: CN=68f46d21-204d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:0c:8e:41:fd:9d:f9:82:6b:34:2c:a7:11:
                    70:eb:31:61:f5:8c:92:0d:d9:ec:14:4a:da:9c:a8:
                    65:43:b5:73:68:63:02:29:08:b3:8e:4c:70:1d:45:
                    c5:bb:49:88:6e:d4:98:b4:60:b2:f2:b5:be:4b:ef:
                    8d:3b:12:a7:7c:47:72:11:b4:77:62:b9:3f:18:51:
                    aa:3f:1d:48:c0:12:92:b8:8d:b1:8a:51:ca:fa:00:
                    81:57:87:58:29:e8:39:71:fa:b2:59:e3:8d:17:8d:
                    f7:53:db:a4:2c:cc:1e:31:49:15:33:eb:4c:7f:f6:
                    0a:69:0f:da:48:34:da:86:ff:e8:d9:ea:fa:ea:f6:
                    7b:35:80:18:71:e6:da:58:b6:19:73:3f:b2:96:1b:
                    06:e7:7d:d9:9e:c0:85:e4:04:34:a8:f0:a3:44:97:
                    9c:3d:d8:16:3a:17:a4:90:52:aa:dc:06:6c:d6:15:
                    2a:c2:91:34:a3:f5:7e:5d:bc:6a:46:e4:e7:79:09:
                    76:dc:0f:9c:40:08:1e:55:7c:5b:f7:b2:50:17:a0:
                    fc:9c:40:b3:82:51:a0:8b:fd:aa:46:05:31:06:36:
                    71:36:ba:a4:40:29:7b:17:2b:df:23:45:4f:ba:c6:
                    ba:8b:9a:02:ad:b6:9b:2b:6a:27:cf:3d:54:d4:73:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1C:94:A3:19:3F:AA:9B:D3:5F:64:64:9A:FA:00:7F:DB:61:CB:D6
            X509v3 Authority Key Identifier:
                keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:eb:3f:b5:b4:90:6c:b1:ea:bd:2f:23:82:12:8d:d4:f3:
         3c:55:64:aa:61:ef:f5:4d:74:d1:60:44:72:fa:36:c3:d3:5c:
         ff:7e:06:94:b4:00:0a:5a:ce:f0:34:a9:a2:29:bf:23:13:26:
         87:54:77:49:92:67:ad:2d:e7:0b:fa:56:13:57:fe:de:51:ae:
         bb:a6:e9:13:2f:a0:86:87:f0:05:50:28:fb:b5:13:26:11:f4:
         93:35:ff:cf:71:d2:9e:1b:e4:de:14:71:20:b1:2a:42:37:ce:
         98:67:50:fa:9d:22:e1:22:e2:77:ca:a3:74:80:48:fc:fb:bc:
         eb:f0:72:e0:eb:16:33:f4:de:5d:1a:b9:55:8c:67:07:58:8b:
         b2:33:af:89:45:72:8f:32:5f:ff:7e:7d:4a:19:62:a9:81:b0:
         36:d8:fc:cf:84:1c:81:fc:69:f6:6b:a4:23:48:2f:10:fd:a6:
         98:ab:2b:ba:ca:14:14:a3:b3:69:26:36:9a:fd:de:74:9e:ae:
         97:b9:c4:35:58:42:3d:31:78:22:25:12:2e:63:8c:e5:cd:d2:
         4f:e4:d9:de:8d:9c:5c:ff:23:7b:7e:6d:58:fd:fc:14:8d:38:
         36:87:35:64:a7:fa:28:98:f6:45:4c:6a:69:38:47:5a:46:c2:
         a1:8c:47:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB
NTM2RjM2NzMwHhcNMjUxMDE5MDQ0NjI1WhcNMjUxMDI2MDQ0NjI1WjAYMRYwFAYD
VQQDEw02OGY0NmQyMS0yMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA15oMjkH9nfmCazQspxFw6zFh9YySDdnsFEranKhlQ7VzaGMCKQizjkxwHUXF
u0mIbtSYtGCy8rW+S++NOxKnfEdyEbR3Yrk/GFGqPx1IwBKSuI2xilHK+gCBV4dY
Keg5cfqyWeONF433U9ukLMweMUkVM+tMf/YKaQ/aSDTahv/o2er66vZ7NYAYceba
WLYZcz+ylhsG533ZnsCF5AQ0qPCjRJecPdgWOhekkFKq3AZs1hUqwpE0o/V+Xbxq
RuTneQl23A+cQAgeVXxb97JQF6D8nECzglGgi/2qRgUxBjZxNrqkQCl7FyvfI0VP
usa6i5oCrbabK2onzz1U1HO95wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoclKMZ
P6qb019kZJr6AH/bYcvWMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF
MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu
d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ4es/tbSQbLHqvS8jghKN1PM8VWSqYe/1TXTRYERy+jbD01z/fgaU
tAAKWs7wNKmiKb8jEyaHVHdJkmetLecL+lYTV/7eUa67pukTL6CGh/AFUCj7tRMm
EfSTNf/PcdKeG+TeFHEgsSpCN86YZ1D6nSLhIuJ3yqN0gEj8+7zr8HLg6xYz9N5d
GrlVjGcHWIuyM6+JRXKPMl//fn1KGWKpgbA22PzPhByB/Gn2a6QjSC8Q/aaYqyu6
yhQUo7NpJjaa/d50nq6XucQ1WEI9MXgiJRIuY4zlzdJP5NnejZxc/yN7fm1Y/fwU
jTg2hzVkp/oomPZFTGppOEdaRsKhjEeq
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:48:02 2025 by rpki-client