Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          lNGTyf1j4mIuthupqdKSfUU+e+gBVd5l2riuzcnncu0=
Subject key identifier:   9D:6A:DB:D4:B0:24:11:79:7C:85:B8:9F:25:4F:FB:4B:4D:27:E8:36
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       0306
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          02EE
Signing time:             Sun 19 Oct 2025 03:30:46 +0000
Manifest this update:     Sun 19 Oct 2025 03:30:46 +0000
Manifest next update:     Sun 26 Oct 2025 03:30:45 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: 4cK9QwNKw+CsIiQZCYFfc2+htXdQ4kuPqNmdtFxpycs=)
                          2: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: oF4weljdyCKoRiSGG2z17wTaQsEcpMts8sv9D62jJPE=)
                          3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: D7GG+9V9VetFTo3WS2746v47jcVH9mGxmAznj65oILQ=)
                          4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: TJ9ECbrNmrbj5mhfI5HTyIvIslW5iwcIqu2ptc1cXhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Oct 19 03:30:46 2025 GMT
            Not After : Oct 26 03:30:45 2025 GMT
        Subject: CN=68f45b66-6b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:9e:ec:61:2d:ee:da:1e:6e:9b:c2:3c:12:
                    4a:21:2d:62:cf:a4:36:3a:c7:1e:f0:72:1a:6f:76:
                    6d:f3:d3:a9:08:f5:60:28:10:49:ce:30:d6:48:89:
                    c2:4d:ec:4a:35:fe:f7:10:80:9d:95:74:5f:65:d1:
                    97:80:24:3d:f6:e0:aa:51:93:a4:ef:34:bf:9f:0a:
                    4c:cc:da:fe:c8:c6:b8:4d:d8:bc:bc:0e:d4:cf:9f:
                    e7:f8:f6:81:0b:11:83:4d:8a:e6:34:4e:b4:3d:24:
                    16:dd:28:08:ef:3f:e2:aa:25:40:68:d2:3d:f5:e4:
                    32:09:1b:12:df:79:ee:3f:de:f6:83:73:46:ae:69:
                    d8:48:1c:95:18:0c:d2:c2:1b:7d:89:54:fb:82:a8:
                    2f:00:99:97:5d:ce:ac:45:0e:b3:20:0b:b5:2e:b0:
                    19:15:18:39:dc:50:88:7e:07:90:ac:f8:c0:af:e3:
                    cd:3d:56:6a:32:41:e4:cf:ed:96:1d:96:f8:8a:8d:
                    9e:f9:57:64:a9:a3:b5:86:f0:69:ce:30:1b:d0:95:
                    23:e6:45:50:82:87:d5:1a:2d:2e:64:c7:c6:22:08:
                    0b:36:9c:bd:75:47:0b:51:fa:f2:75:28:cc:6d:95:
                    27:4e:ef:da:76:fa:6d:6c:8b:df:35:a1:53:59:f6:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:DB:D4:B0:24:11:79:7C:85:B8:9F:25:4F:FB:4B:4D:27:E8:36
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:3f:8e:4e:9d:66:09:3b:f6:2a:dd:49:52:b1:ae:d6:2a:
         cb:b1:17:08:b0:58:4e:87:02:d4:82:46:12:f1:51:8e:c5:a5:
         c8:b1:14:e8:85:de:da:42:08:d5:57:d3:cd:e1:dc:6a:20:66:
         87:e0:e1:a7:88:52:42:0f:fb:40:de:21:07:1e:e5:42:2f:67:
         26:77:2d:26:17:4e:c9:d5:e5:fb:b5:65:eb:9a:b8:38:44:6e:
         99:c7:03:36:36:5e:6b:4e:82:57:5f:23:a2:ef:a3:32:22:2c:
         ff:39:fa:54:dc:09:12:80:3d:06:90:6e:04:6c:88:de:d6:08:
         a7:61:a2:48:71:f0:38:0b:b8:e2:3e:36:11:31:4e:2c:52:78:
         72:19:f2:67:96:27:b2:b6:8d:9e:ed:5e:af:06:fa:d4:cc:59:
         28:fa:ab:30:78:3d:8f:55:fe:c2:1b:e6:bc:19:5b:21:19:c6:
         29:53:fd:9f:cf:b4:93:9a:da:c7:83:d0:fd:fd:8a:4b:57:f9:
         89:37:bf:62:52:c1:12:79:be:61:2f:d6:61:a0:0c:42:fd:f7:
         4e:c5:df:57:01:a5:0b:25:3b:6a:65:50:f5:a4:08:7c:bd:2b:
         e1:e7:dc:51:71:69:cd:d5:b8:d7:34:42:6b:e1:09:86:aa:9b:
         eb:74:55:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjUxMDE5MDMzMDQ2WhcNMjUxMDI2MDMzMDQ1WjAYMRYwFAYD
VQQDEw02OGY0NWI2Ni02Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyGe7GEt7toebpvCPBJKIS1iz6Q2Osce8HIab3Zt89OpCPVgKBBJzjDWSInC
TexKNf73EICdlXRfZdGXgCQ99uCqUZOk7zS/nwpMzNr+yMa4Tdi8vA7Uz5/n+PaB
CxGDTYrmNE60PSQW3SgI7z/iqiVAaNI99eQyCRsS33nuP972g3NGrmnYSByVGAzS
wht9iVT7gqgvAJmXXc6sRQ6zIAu1LrAZFRg53FCIfgeQrPjAr+PNPVZqMkHkz+2W
HZb4io2e+VdkqaO1hvBpzjAb0JUj5kVQgofVGi0uZMfGIggLNpy9dUcLUfrydSjM
bZUnTu/advptbIvfNaFTWfY8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1q29Sw
JBF5fIW4nyVP+0tNJ+g2MB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr
by1LMGVjZWtESmtDT0RhNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfxz+OTp1mCTv2Kt1JUrGu1irLsRcIsFhOhwLUgkYS8VGOxaXIsRTo
hd7aQgjVV9PN4dxqIGaH4OGniFJCD/tA3iEHHuVCL2cmdy0mF07J1eX7tWXrmrg4
RG6ZxwM2Nl5rToJXXyOi76MyIiz/OfpU3AkSgD0GkG4EbIje1ginYaJIcfA4C7ji
PjYRMU4sUnhyGfJnlieyto2e7V6vBvrUzFko+qsweD2PVf7CG+a8GVshGcYpU/2f
z7STmtrHg9D9/YpLV/mJN79iUsESeb5hL9ZhoAxC/fdOxd9XAaULJTtqZVD1pAh8
vSvh59xRcWnN1bjXNEJr4QmGqpvrdFXa
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:03 2025 by rpki-client