Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File:                     JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier:          o41brGFUqUFI5ApHVSC2wttgYlF/hkodVrE0g5MiFXY=
Subject key identifier:   B1:55:01:97:B5:B8:60:8D:DF:17:55:FC:71:71:86:4A:C0:08:77:12
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer:       /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number:          C7
Signing time:             Sun 19 Oct 2025 08:53:33 +0000
Manifest this update:     Sun 19 Oct 2025 08:53:32 +0000
Manifest next update:     Sun 26 Oct 2025 08:53:32 +0000
Files and hashes:         1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: ekv3UQxLg83UGAJdBYyljUrt8552//KwLHi64h/mRdU=)
                          2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
        Validity
            Not Before: Oct 19 08:53:32 2025 GMT
            Not After : Oct 26 08:53:32 2025 GMT
        Subject: CN=68f4a70d-224d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:07:4c:b0:37:31:cc:c8:cb:6b:34:d0:a1:
                    c6:85:42:09:7d:d1:dd:c8:df:da:cd:aa:f3:37:92:
                    63:69:cc:d0:eb:f5:46:7b:0a:d6:90:a5:60:b2:79:
                    e5:d3:74:8f:ff:43:e7:ac:46:b0:8a:51:1c:0e:8e:
                    c0:12:e1:fc:8f:8f:74:8a:5b:e8:66:65:61:8a:53:
                    32:25:68:61:e4:d7:6c:e9:3b:05:c6:1c:86:b2:1c:
                    ab:c8:e5:2d:64:05:55:86:c9:13:a9:10:23:e7:c7:
                    cb:26:02:7d:b2:27:72:d8:61:bb:f9:ee:4c:15:c2:
                    70:26:0a:f7:fa:58:f0:ad:ea:18:97:f0:71:39:90:
                    9f:15:5b:3a:32:e1:c7:4d:f3:7d:f3:05:9d:37:de:
                    af:2f:44:74:c6:e1:8a:ab:44:e7:91:7d:fb:74:03:
                    41:74:64:50:48:fa:eb:c7:2f:f9:95:6e:db:81:88:
                    d6:95:6c:20:7e:e8:bf:6f:32:e9:a9:b9:9d:29:40:
                    99:3e:24:f1:a5:89:2a:d3:df:94:fe:57:fa:b3:f1:
                    80:ab:e7:ad:be:51:8b:28:8f:a8:1c:df:c0:88:dc:
                    cf:14:f5:a7:91:b5:30:1c:c7:90:a8:a5:53:24:87:
                    32:23:a5:6e:55:2a:a2:02:0f:d1:6d:e2:5a:03:bb:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:01:97:B5:B8:60:8D:DF:17:55:FC:71:71:86:4A:C0:08:77:12
            X509v3 Authority Key Identifier:
                keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:37:1a:f4:e6:33:84:17:70:eb:bb:94:16:41:ac:fb:61:
         64:8d:15:e5:f3:2e:a7:24:e2:2e:db:85:fc:93:e9:06:a8:5c:
         be:61:14:5a:ca:72:35:36:67:10:4c:5e:08:f1:25:71:91:77:
         67:6b:90:ca:6e:29:54:5a:86:b4:49:84:69:7b:67:f7:be:7b:
         d5:55:68:4a:3d:c9:ca:19:bc:b7:c6:ae:27:51:32:e3:ec:52:
         2f:5d:cc:39:c8:88:7a:16:8d:db:49:8f:4a:d4:64:12:c7:ba:
         26:15:34:48:d3:02:63:4e:ab:37:e6:bf:e9:af:dd:02:0d:1e:
         4d:6b:d4:13:2d:de:fc:ea:76:d8:ec:b5:63:fc:bf:77:85:12:
         c2:63:6f:f6:55:64:a1:15:73:d6:d2:55:00:e6:29:02:80:27:
         0c:24:91:e2:e2:c2:bc:7a:8c:36:ee:67:c6:fc:96:e2:86:f0:
         18:24:97:48:d7:2e:65:15:4d:2a:a0:10:18:d6:03:72:9c:5b:
         e3:37:95:47:d9:93:01:5e:d8:06:7a:60:f4:65:30:af:02:a9:
         3a:ba:15:cc:d4:7a:17:3e:47:b8:ac:e9:d7:78:31:c5:6b:db:
         ef:f2:e6:18:cc:b1:f0:47:12:24:e8:aa:46:8c:12:93:26:7c:
         eb:71:1c:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1
RjE2M0FFNDMwHhcNMjUxMDE5MDg1MzMyWhcNMjUxMDI2MDg1MzMyWjAYMRYwFAYD
VQQDEw02OGY0YTcwZC0yMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ioHTLA3MczIy2s00KHGhUIJfdHdyN/azarzN5JjaczQ6/VGewrWkKVgsnnl
03SP/0PnrEawilEcDo7AEuH8j490ilvoZmVhilMyJWhh5Nds6TsFxhyGshyryOUt
ZAVVhskTqRAj58fLJgJ9sidy2GG7+e5MFcJwJgr3+ljwreoYl/BxOZCfFVs6MuHH
TfN98wWdN96vL0R0xuGKq0TnkX37dANBdGRQSPrrxy/5lW7bgYjWlWwgfui/bzLp
qbmdKUCZPiTxpYkq09+U/lf6s/GAq+etvlGLKI+oHN/AiNzPFPWnkbUwHMeQqKVT
JIcyI6VuVSqiAg/RbeJaA7tJiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFVAZe1
uGCN3xdV/HFxhkrACHcSMB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm
MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaYTca9OYzhBdw67uUFkGs+2FkjRXl8y6nJOIu24X8k+kGqFy+YRRa
ynI1NmcQTF4I8SVxkXdna5DKbilUWoa0SYRpe2f3vnvVVWhKPcnKGby3xq4nUTLj
7FIvXcw5yIh6Fo3bSY9K1GQSx7omFTRI0wJjTqs35r/pr90CDR5Na9QTLd786nbY
7LVj/L93hRLCY2/2VWShFXPW0lUA5ikCgCcMJJHi4sK8eow27mfG/JbihvAYJJdI
1y5lFU0qoBAY1gNynFvjN5VH2ZMBXtgGemD0ZTCvAqk6uhXM1HoXPke4rOnXeDHF
a9vv8uYYzLHwRxIk6KpGjBKTJnzrcRz4
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:29 2025 by rpki-client