Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File:                     PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier:          1XTrKapaD6rQRmCK+6iRL4JHwPecEte+Et42HojzP9E=
Subject key identifier:   29:33:46:52:AE:95:05:E6:D3:03:F5:FF:89:F9:86:53:EA:F8:9C:EC
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number:          01CB
Signing time:             Sun 19 Oct 2025 05:22:52 +0000
Manifest this update:     Sun 19 Oct 2025 05:22:51 +0000
Manifest next update:     Sun 26 Oct 2025 05:22:51 +0000
Files and hashes:         1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: 5eLImuxo73Ybjfsi7JsdxCFY/B2WJvE8/AhVkugw160=)
                          2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=)
                          3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Oct 19 05:22:51 2025 GMT
            Not After : Oct 26 05:22:51 2025 GMT
        Subject: CN=68f475ac-736c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:26:b8:b9:6c:57:32:68:77:fa:d9:56:a2:
                    ba:ad:aa:0e:a2:ba:fc:6a:4f:84:7c:74:cf:52:61:
                    8b:cd:68:a2:3e:cf:e5:7e:3a:dd:24:83:19:18:4c:
                    b7:e0:47:b3:3b:b1:d6:40:c4:2c:c4:47:69:02:98:
                    5a:50:6a:c1:37:84:c6:7a:4a:78:e8:95:e6:41:ef:
                    71:39:2e:28:6d:cc:46:eb:b8:40:d2:da:41:83:53:
                    c0:9e:90:c8:7e:98:ab:ec:9e:55:a9:82:48:7e:f7:
                    5b:a3:92:17:ab:cf:5c:f5:7a:86:3a:6f:43:19:7d:
                    10:6a:a2:f7:43:1e:36:c7:03:63:95:ae:a0:ef:11:
                    0e:d4:cb:3f:a5:71:ab:fb:9a:d5:00:60:50:15:02:
                    07:2b:52:c6:bd:f6:15:3d:e8:cc:19:0b:9b:97:74:
                    c7:24:b2:ec:96:f0:aa:5c:1f:80:4c:d6:00:eb:69:
                    29:9f:e5:75:64:91:14:9c:48:68:f7:a1:a7:87:c4:
                    cb:a6:9c:d3:52:47:43:1d:8a:79:89:39:0e:cf:a5:
                    fe:95:65:73:ec:07:05:38:2f:70:20:5c:be:b5:f5:
                    51:e7:d3:9b:7a:33:ba:ab:64:28:55:b9:87:56:67:
                    d9:8f:d4:bb:40:9e:98:e3:de:12:c5:a7:ba:7b:60:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:46:52:AE:95:05:E6:D3:03:F5:FF:89:F9:86:53:EA:F8:9C:EC
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:63:d8:36:1d:c7:0a:b1:b1:89:ff:b3:31:cc:9f:6c:68:
         ae:3e:7a:1e:87:85:c4:b1:7d:92:2a:84:74:62:04:3e:bc:81:
         48:ad:34:97:fd:3c:d5:e3:7d:d3:04:3c:db:d5:51:04:f1:be:
         94:42:ea:fc:d7:79:e4:ca:27:35:5b:2a:fd:cb:5c:82:4d:07:
         c9:0d:bf:fe:b0:45:b2:2b:ef:5f:ad:57:6d:c8:be:00:d1:14:
         b4:d3:b0:cf:88:d5:98:7b:77:c4:eb:46:04:d6:a3:d1:65:59:
         4a:51:2d:f3:d5:aa:44:86:83:3b:1a:a8:52:c0:f4:05:d0:8e:
         de:82:53:c5:de:f4:64:67:e6:66:c4:e9:1c:78:4b:1d:17:c1:
         1b:cc:49:b5:90:6e:59:1c:a1:e1:09:cb:4f:30:4f:e7:d1:8d:
         28:bc:8f:ee:8e:02:15:c5:35:1c:8e:cb:09:29:08:e7:51:41:
         6c:ae:3e:1f:2d:77:f1:96:75:7a:82:6a:7a:64:b2:47:32:06:
         c4:be:49:e6:1b:de:0d:77:9e:5d:ab:6e:73:65:e1:06:2b:df:
         ec:0e:16:34:e0:ec:67:86:e0:8f:62:5e:cf:db:3d:1b:8a:4c:
         82:20:8e:46:79:e2:cb:8e:0b:71:73:1a:50:82:df:34:42:98:
         3d:30:6f:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjUxMDE5MDUyMjUxWhcNMjUxMDI2MDUyMjUxWjAYMRYwFAYD
VQQDEw02OGY0NzVhYy03MzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3LMmuLlsVzJod/rZVqK6raoOorr8ak+EfHTPUmGLzWiiPs/lfjrdJIMZGEy3
4EezO7HWQMQsxEdpAphaUGrBN4TGekp46JXmQe9xOS4obcxG67hA0tpBg1PAnpDI
fpir7J5VqYJIfvdbo5IXq89c9XqGOm9DGX0QaqL3Qx42xwNjla6g7xEO1Ms/pXGr
+5rVAGBQFQIHK1LGvfYVPejMGQubl3THJLLslvCqXB+ATNYA62kpn+V1ZJEUnEho
96Gnh8TLppzTUkdDHYp5iTkOz6X+lWVz7AcFOC9wIFy+tfVR59ObejO6q2QoVbmH
VmfZj9S7QJ6Y494Sxae6e2BSKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkzRlKu
lQXm0wP1/4n5hlPq+JzsMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu
bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYpWPYNh3HCrGxif+zMcyfbGiuPnoeh4XEsX2SKoR0YgQ+vIFIrTSX
/TzV433TBDzb1VEE8b6UQur813nkyic1Wyr9y1yCTQfJDb/+sEWyK+9frVdtyL4A
0RS007DPiNWYe3fE60YE1qPRZVlKUS3z1apEhoM7GqhSwPQF0I7eglPF3vRkZ+Zm
xOkceEsdF8EbzEm1kG5ZHKHhCctPME/n0Y0ovI/ujgIVxTUcjssJKQjnUUFsrj4f
LXfxlnV6gmp6ZLJHMgbEvknmG94Nd55dq25zZeEGK9/sDhY04OxnhuCPYl7P2z0b
ikyCII5GeeLLjgtxcxpQgt80Qpg9MG+j
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:13:18 2025 by rpki-client