Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
File:                     EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json)
Hash identifier:          5hW9VFeGQfbf3hOt5fCkFMBP/DyC8PeTkDMYmaVwqq0=
Subject key identifier:   48:B8:EE:1B:BB:7B:D5:65:E7:EA:EC:6F:B7:F6:C3:30:F7:59:B1:22
Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
Certificate issuer:       /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Certificate serial:       0528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
Manifest number:          0523
Signing time:             Sun 19 Oct 2025 01:17:47 +0000
Manifest this update:     Sun 19 Oct 2025 01:17:46 +0000
Manifest next update:     Sun 26 Oct 2025 01:17:46 +0000
Files and hashes:         1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: oMbWf6j5+Xq/P7J7i+0AFywarCiWTCkVKiu0C91dGgU=)
                          2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: 1SDUjxswczItuTI8MlragdwYcpc+MmzkvH2OuJBcoLw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl
                          rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
        Validity
            Not Before: Oct 19 01:17:46 2025 GMT
            Not After : Oct 26 01:17:46 2025 GMT
        Subject: CN=68f43c3b-d4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:d8:cd:67:86:ea:3b:9a:11:c1:3d:f2:c2:
                    06:ba:4a:e7:17:14:7a:ec:cd:79:53:39:e8:4a:1f:
                    49:b1:b7:f5:56:b1:a9:c2:4e:3b:c6:0c:da:10:88:
                    b9:10:0c:79:02:f1:0a:67:ad:0e:a7:70:db:42:5e:
                    c9:37:6b:24:7b:fd:67:a2:b5:1c:4e:5e:8a:b5:06:
                    60:45:27:16:1c:27:97:31:95:3d:c5:8f:df:9b:ae:
                    8f:01:ae:b7:d2:df:35:de:a2:46:7f:5d:9b:94:ae:
                    ec:07:7a:23:0d:bb:5c:0f:28:76:14:97:26:37:23:
                    b3:26:08:64:56:f6:34:2b:5b:fa:7c:ad:73:58:84:
                    4f:f9:e6:79:0f:bb:55:84:f2:d8:e8:a2:8d:72:7b:
                    5f:c9:af:43:d6:0a:6f:42:89:1c:46:d4:4e:75:96:
                    18:3c:ee:ae:77:c8:bf:8d:3c:53:df:48:44:37:7b:
                    8e:b4:54:ac:b9:96:e2:fc:ea:b6:48:57:d5:7f:a8:
                    31:71:7c:a5:02:fb:ac:90:66:82:a4:a3:a1:b9:27:
                    52:23:10:d7:97:e3:c4:4f:b1:63:12:72:5c:94:7a:
                    b4:ad:02:23:cf:e8:cb:4a:d8:ea:11:1d:df:22:f6:
                    a8:c4:e8:d0:fa:50:ca:ea:1e:9f:65:a1:5d:a7:d6:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B8:EE:1B:BB:7B:D5:65:E7:EA:EC:6F:B7:F6:C3:30:F7:59:B1:22
            X509v3 Authority Key Identifier:
                keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:64:de:72:0b:6b:06:62:51:cf:b3:46:d0:4d:f4:3c:70:
         5f:47:cc:a5:f4:55:c1:80:19:b1:9f:0f:65:2d:fc:81:06:bc:
         07:92:c6:04:fb:43:1c:d8:da:5b:e2:bc:92:d1:46:d2:3b:d4:
         c3:69:27:47:96:f7:ab:17:22:3a:4c:f3:ca:53:11:04:9e:9e:
         70:73:8e:4c:d6:76:de:f0:74:fe:f7:9c:53:27:91:63:a0:ff:
         d0:76:60:70:54:e5:cf:f4:63:91:cd:7f:2b:12:d5:9c:f6:14:
         c7:b6:a0:a2:8d:0c:e4:f6:bd:80:36:b1:96:d3:b4:c6:78:0d:
         7c:c1:c6:65:b1:e9:4f:4c:30:0c:9a:1f:36:a9:77:8b:b7:ef:
         54:31:44:9c:10:f0:27:41:4f:da:7d:b8:60:28:11:44:69:20:
         63:4e:f3:80:0b:f8:36:79:59:ef:06:d8:da:12:a1:20:57:ab:
         0e:32:f2:84:6b:4a:15:76:96:59:30:cf:46:3c:88:de:56:fe:
         b0:29:05:41:68:a8:c8:e8:7f:d6:6b:ab:f8:4d:a9:3c:d1:14:
         82:1b:5b:f4:96:d2:dc:5e:30:06:15:9b:b3:2e:9b:cf:a3:0c:
         94:97:a0:90:f3:01:5a:46:b2:f1:24:2f:81:72:ca:ea:d6:db:
         96:1e:d5:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwRjYxMTAvBgNVBAUTKDEzMkNDQUVBQzEwNEUyQTM0NDVCNjMzNzYxMDU0REM4
RDcxMDdBMTMwHhcNMjUxMDE5MDExNzQ2WhcNMjUxMDI2MDExNzQ2WjAYMRYwFAYD
VQQDEw02OGY0M2MzYi1kNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvXYzWeG6juaEcE98sIGukrnFxR67M15UznoSh9Jsbf1VrGpwk47xgzaEIi5
EAx5AvEKZ60Op3DbQl7JN2ske/1norUcTl6KtQZgRScWHCeXMZU9xY/fm66PAa63
0t813qJGf12blK7sB3ojDbtcDyh2FJcmNyOzJghkVvY0K1v6fK1zWIRP+eZ5D7tV
hPLY6KKNcntfya9D1gpvQokcRtROdZYYPO6ud8i/jTxT30hEN3uOtFSsuZbi/Oq2
SFfVf6gxcXylAvuskGaCpKOhuSdSIxDXl+PET7FjEnJclHq0rQIjz+jLStjqER3f
IvaoxOjQ+lDK6h6fZaFdp9ZIYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi47hu7
e9Vl5+rsb7f2wzD3WbEiMB8GA1UdIwQYMBaAFBMsyurBBOKjRFtjN2EFTcjXEHoT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzBGNi8xODVEQUZENjFD
RUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRxTkVXMk0zWVFWTnlOY1Fl
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V5eks2c0VFNHFORVcyTTNZUVZOeU5jUWVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzBGNi8xODVEQUZENjFDRUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRx
TkVXMk0zWVFWTnlOY1FlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4imTecgtrBmJRz7NG0E30PHBfR8yl9FXBgBmxnw9lLfyBBrwHksYE
+0Mc2Npb4ryS0UbSO9TDaSdHlverFyI6TPPKUxEEnp5wc45M1nbe8HT+95xTJ5Fj
oP/QdmBwVOXP9GORzX8rEtWc9hTHtqCijQzk9r2ANrGW07TGeA18wcZlselPTDAM
mh82qXeLt+9UMUScEPAnQU/afbhgKBFEaSBjTvOAC/g2eVnvBtjaEqEgV6sOMvKE
a0oVdpZZMM9GPIjeVv6wKQVBaKjI6H/Wa6v4Tak80RSCG1v0ltLcXjAGFZuzLpvP
owyUl6CQ8wFaRrLxJC+Bcsrq1tuWHtW7
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:07 2025 by rpki-client