Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          3lGusvwda+ZOuDfN2l2C8b+CArJ5YVV2B7z4qmov5jE=
Subject key identifier:   E0:03:28:28:DB:66:5A:0D:07:07:8E:4F:CD:D9:BA:3D:D0:C4:E5:70
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0939
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          0911
Signing time:             Sat 18 Oct 2025 21:29:43 +0000
Manifest this update:     Sat 18 Oct 2025 21:29:42 +0000
Manifest next update:     Sat 25 Oct 2025 21:29:42 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: TTaztqeQQH4AjZOCoMh2e6o+9gKDOkGSH0DcI8b++HU=)
                          2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: rHm1B/MSNJeVi9UgfBbJLqo7QtD6an1CT3aEkcYwbOk=)
                          3: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: Z8zcoQtFS3z9ZE1TqMKGoB34rHpti60MXfkV1lqD5Ws=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Oct 18 21:29:42 2025 GMT
            Not After : Oct 25 21:29:42 2025 GMT
        Subject: CN=68f406c6-09ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:f9:1d:67:bd:d7:d9:1c:97:7c:23:86:a7:
                    44:dd:84:32:a6:38:bb:5f:75:9c:a3:03:9b:9d:93:
                    18:66:12:f5:2a:bb:3d:41:24:b5:57:0a:fb:34:fa:
                    d7:1a:dc:cb:ac:16:d0:8b:84:ed:e8:04:7b:be:b1:
                    18:13:7f:96:f2:ba:a6:34:4c:67:b1:4c:cc:f8:ba:
                    92:c1:08:f4:dd:5d:fd:f8:49:27:ef:c9:7e:f3:66:
                    56:19:93:b5:0b:4f:3e:68:d5:1c:28:2d:8f:bd:dc:
                    13:53:e8:b3:57:15:cf:c4:71:7b:34:7e:b4:a6:97:
                    3d:0d:64:7d:20:03:38:22:4f:f6:23:31:7f:93:07:
                    b6:d3:d2:85:f8:85:18:ef:44:4d:16:6e:e6:4c:34:
                    86:43:83:e9:f2:d4:8a:4f:b4:bb:9c:98:58:fb:5c:
                    df:af:83:87:5d:ec:d4:77:98:6b:27:f9:13:f2:c3:
                    f0:92:79:58:f8:23:89:65:73:08:19:1f:cb:3d:dd:
                    e0:8c:bd:e9:fc:81:6f:db:d3:cc:b7:08:49:d7:4e:
                    6f:c8:8c:8d:d3:cc:be:23:f2:36:a7:84:c9:b6:95:
                    61:a9:8a:95:de:b4:16:de:b7:0e:e0:dd:c9:16:58:
                    d2:dd:a3:21:35:d1:ad:a8:06:c7:c5:04:87:90:13:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:28:28:DB:66:5A:0D:07:07:8E:4F:CD:D9:BA:3D:D0:C4:E5:70
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:db:f5:cb:c2:eb:ad:23:f8:23:9f:42:05:f7:ba:2a:02:99:
         02:5e:bd:79:3b:bd:1b:20:b2:08:05:08:3c:e7:d5:0c:5b:85:
         ba:cc:b9:bf:0a:0b:34:fc:ab:b0:03:2a:d3:49:c5:94:e3:06:
         aa:42:b1:4c:5a:ac:18:5e:67:ae:cb:f3:5f:5c:ab:18:38:98:
         c2:44:d1:5c:cc:60:f2:38:a9:88:c3:d5:92:c5:e7:f4:9f:eb:
         b9:97:a1:38:97:6a:c2:e2:b6:b7:a6:18:c9:c3:ed:01:f6:79:
         23:cc:61:91:f8:a5:b8:c5:b7:79:28:84:51:93:be:2a:3c:be:
         de:ed:cd:ae:3f:0b:82:68:4b:83:aa:2d:94:d0:c6:ab:d9:bc:
         cd:16:73:44:f5:96:6e:d1:d9:8f:b6:10:5b:34:f5:62:49:56:
         41:41:c5:b1:98:de:ce:47:6d:d4:be:90:7e:92:f4:77:06:b6:
         fb:13:35:be:3e:19:a9:6c:93:d6:2f:8d:9f:06:0e:8d:e1:a1:
         84:e9:ac:5c:bd:d6:1f:04:b5:4d:46:d9:9d:90:68:c9:30:0b:
         5e:10:c7:6e:69:3a:81:b1:fe:1b:74:ad:19:bf:d6:11:a7:dc:
         3c:e3:d1:0c:7f:a3:2e:6c:f3:70:37:47:58:fa:bc:56:ec:c3:
         83:67:e6:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2
RUY2Qzk1MTcwHhcNMjUxMDE4MjEyOTQyWhcNMjUxMDI1MjEyOTQyWjAYMRYwFAYD
VQQDEw02OGY0MDZjNi0wOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRr5HWe919kcl3wjhqdE3YQypji7X3WcowObnZMYZhL1Krs9QSS1Vwr7NPrX
GtzLrBbQi4Tt6AR7vrEYE3+W8rqmNExnsUzM+LqSwQj03V39+Ekn78l+82ZWGZO1
C08+aNUcKC2PvdwTU+izVxXPxHF7NH60ppc9DWR9IAM4Ik/2IzF/kwe209KF+IUY
70RNFm7mTDSGQ4Pp8tSKT7S7nJhY+1zfr4OHXezUd5hrJ/kT8sPwknlY+COJZXMI
GR/LPd3gjL3p/IFv29PMtwhJ105vyIyN08y+I/I2p4TJtpVhqYqV3rQW3rcO4N3J
FljS3aMhNdGtqAbHxQSHkBO0nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOADKCjb
ZloNBweOT83Zuj3QxOVwMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD
MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL
LTlzRW1qTlduLXB1OXNsUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBg2/XLwuutI/gjn0IF97oqApkCXr15O70bILIIBQg859UMW4W6zLm/
Cgs0/KuwAyrTScWU4waqQrFMWqwYXmeuy/NfXKsYOJjCRNFczGDyOKmIw9WSxef0
n+u5l6E4l2rC4ra3phjJw+0B9nkjzGGR+KW4xbd5KIRRk74qPL7e7c2uPwuCaEuD
qi2U0Mar2bzNFnNE9ZZu0dmPthBbNPViSVZBQcWxmN7OR23UvpB+kvR3Brb7EzW+
PhmpbJPWL42fBg6N4aGE6axcvdYfBLVNRtmdkGjJMAteEMduaTqBsf4bdK0Zv9YR
p9w849EMf6MubPNwN0dY+rxW7MODZ+Zq
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:56 2025 by rpki-client