Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          1RCbWPggHqq+1ItvGijrqzXmvKHkPLfoE+Ag4kyUIwc=
Subject key identifier:   FB:C8:BF:2E:32:90:CA:4C:83:7B:30:6D:C3:3C:72:29:E3:59:DA:8B
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          FA
Signing time:             Sun 19 Oct 2025 08:07:27 +0000
Manifest this update:     Sun 19 Oct 2025 08:07:26 +0000
Manifest next update:     Sun 26 Oct 2025 08:07:26 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: ANaulWk0zGCBWWU9OBs2/OYy7DXdypP7u08zu+1q5DM=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: V+nudqfqbNoV97hl4ZZQ3M1A1LzH6OKD9ocfKTUUibo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Oct 19 08:07:26 2025 GMT
            Not After : Oct 26 08:07:26 2025 GMT
        Subject: CN=68f49c3f-3891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:12:98:ca:35:90:21:c6:62:11:4d:bb:d0:
                    93:d9:a9:09:4e:3f:e1:38:5b:55:82:58:b8:72:5f:
                    ee:f1:e6:53:16:93:b0:41:a5:7d:cb:7e:62:f3:fe:
                    b4:b6:20:33:90:09:7b:d4:7a:39:43:b8:32:47:06:
                    0f:e0:d8:89:32:ed:25:5f:d4:63:93:de:6f:52:46:
                    f9:d6:42:86:22:4d:c5:2f:b5:e1:d4:fb:62:6d:11:
                    2a:84:a4:71:13:19:bf:b0:a4:6d:8b:f5:cb:1c:55:
                    a6:ff:a1:69:56:10:83:9f:2a:62:32:ca:7f:6f:63:
                    25:89:fe:06:0c:33:01:9a:15:93:ab:9d:61:e8:39:
                    f1:1b:4d:f9:91:cd:99:4f:37:15:14:49:ea:55:cf:
                    92:94:8b:6d:b7:6d:94:a9:0a:8c:92:6e:e6:ab:71:
                    6a:22:2c:0c:17:c3:69:df:f6:19:fc:04:57:88:63:
                    90:34:be:e3:fa:36:3c:1b:2c:5d:46:41:fb:3c:5f:
                    44:b3:0c:08:d6:7e:bc:c4:3e:c4:cb:a6:75:ab:ee:
                    73:1a:e0:58:ec:99:e4:c0:46:9f:e3:33:5d:d4:de:
                    b6:98:c8:50:3b:f3:35:98:ac:c6:f6:ea:ee:bb:9b:
                    d2:22:ef:04:ce:89:3e:7d:67:55:ab:e3:a7:b3:2d:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:BF:2E:32:90:CA:4C:83:7B:30:6D:C3:3C:72:29:E3:59:DA:8B
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:a6:60:7a:d1:1d:48:30:d7:b8:17:24:7e:02:1a:36:35:
         4b:d3:bd:8c:11:b6:34:fb:18:ff:ff:fe:1a:5c:13:71:e1:96:
         ef:32:30:72:49:f5:55:5b:85:23:16:f3:e2:2d:02:4d:2b:6a:
         85:b2:e8:93:c8:69:11:32:be:bc:27:77:34:be:af:97:58:df:
         30:02:9f:74:21:d0:e2:f9:be:5f:7e:f9:b2:3b:29:4b:fe:ac:
         dc:a3:17:f6:9d:3f:c2:d0:66:bf:f5:6c:8e:3c:51:27:23:82:
         66:87:46:eb:e8:29:e9:b6:88:35:01:cc:4d:16:4a:8c:9d:ab:
         78:2d:ad:00:d7:37:5e:b4:57:81:2f:90:dd:1f:46:b2:c3:c3:
         79:68:de:5b:7d:93:ea:9b:ff:48:36:1e:fd:05:04:c5:00:75:
         d1:77:98:7a:31:2f:03:bb:87:38:64:9f:a4:2b:99:df:28:3f:
         39:fa:55:23:16:7a:d5:ff:1d:13:76:1a:fb:35:67:0b:58:10:
         d1:dc:e3:ff:c8:8a:42:e4:1f:31:a0:89:49:b8:2d:2c:07:e0:
         73:be:a4:57:36:51:4a:aa:91:b4:1d:5e:2e:43:c9:3d:0f:93:
         00:25:47:5b:5c:89:bd:9a:d5:1b:32:4b:4c:34:f0:d1:4f:a3:
         d9:e5:ea:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC
RkZENENDQjYwHhcNMjUxMDE5MDgwNzI2WhcNMjUxMDI2MDgwNzI2WjAYMRYwFAYD
VQQDEw02OGY0OWMzZi0zODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ysSmMo1kCHGYhFNu9CT2akJTj/hOFtVgli4cl/u8eZTFpOwQaV9y35i8/60
tiAzkAl71Ho5Q7gyRwYP4NiJMu0lX9Rjk95vUkb51kKGIk3FL7Xh1PtibREqhKRx
Exm/sKRti/XLHFWm/6FpVhCDnypiMsp/b2Mlif4GDDMBmhWTq51h6DnxG035kc2Z
TzcVFEnqVc+SlIttt22UqQqMkm7mq3FqIiwMF8Np3/YZ/ARXiGOQNL7j+jY8Gyxd
RkH7PF9EswwI1n68xD7Ey6Z1q+5zGuBY7JnkwEaf4zNd1N62mMhQO/M1mKzG9uru
u5vSIu8Ezok+fWdVq+Onsy2L9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvIvy4y
kMpMg3swbcM8cinjWdqLMB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy
QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr
ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqAaZgetEdSDDXuBckfgIaNjVL072MEbY0+xj///4aXBNx4ZbvMjBy
SfVVW4UjFvPiLQJNK2qFsuiTyGkRMr68J3c0vq+XWN8wAp90IdDi+b5ffvmyOylL
/qzcoxf2nT/C0Ga/9WyOPFEnI4Jmh0br6Cnptog1AcxNFkqMnat4La0A1zdetFeB
L5DdH0ayw8N5aN5bfZPqm/9INh79BQTFAHXRd5h6MS8Du4c4ZJ+kK5nfKD85+lUj
FnrV/x0Tdhr7NWcLWBDR3OP/yIpC5B8xoIlJuC0sB+BzvqRXNlFKqpG0HV4uQ8k9
D5MAJUdbXIm9mtUbMktMNPDRT6PZ5epp
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:46:46 2025 by rpki-client