Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          rnA4FI6LprJFDTxXTITkRj7Qtyko2fArOShC03OUEII=
Subject key identifier:   FE:59:18:37:85:28:60:B4:FE:1A:62:56:41:4B:34:CB:AC:2B:B5:D6
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0B41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0B31
Signing time:             Sat 18 Oct 2025 20:11:10 +0000
Manifest this update:     Sat 18 Oct 2025 20:11:10 +0000
Manifest next update:     Sat 25 Oct 2025 20:11:10 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: Bp6WXGu36WHzpiaskDfjlboNZXhtplAzSktO4ztL/eQ=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: s5FxAXvHyHM95JkI0bpkB+0cESUkZdTctd6oGAI/wW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2881 (0xb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Oct 18 20:11:10 2025 GMT
            Not After : Oct 25 20:11:10 2025 GMT
        Subject: CN=68f3f45e-5fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:ca:0a:58:a2:ab:22:02:3f:71:75:92:b1:
                    80:64:95:15:60:5e:a7:40:e2:68:0c:42:27:6e:b4:
                    e4:f8:25:13:b4:49:89:0d:3d:1c:a2:ef:19:d9:d4:
                    a8:33:0c:ea:15:4d:e4:a6:38:72:3b:d9:d0:fc:f8:
                    f6:1a:59:eb:b9:d5:e9:de:76:31:a7:d0:3c:79:d8:
                    09:76:ff:49:dd:db:e8:fb:e4:43:c3:85:80:4e:c4:
                    31:94:b1:6f:49:03:bd:79:1e:3c:83:30:75:d6:52:
                    d0:38:1b:0d:ac:96:85:05:13:da:c7:4c:f4:3b:b1:
                    f8:4d:6c:aa:bb:ae:00:ca:30:ac:b8:cb:3e:49:07:
                    aa:77:f1:b2:59:a9:d6:a0:3a:79:bb:89:e8:0f:77:
                    64:ca:d7:63:48:48:8e:00:3c:8a:ee:6f:15:6c:11:
                    c6:05:04:1c:e5:56:18:a5:6a:ee:9c:69:66:cc:29:
                    63:fa:a5:a4:c5:10:f8:ff:01:0b:68:27:cd:c4:15:
                    a6:30:30:59:b9:41:a6:a0:be:e6:f0:f4:bd:8a:ca:
                    75:97:3c:8f:d7:f7:02:f3:0e:5b:f6:81:bb:fa:85:
                    52:d1:0b:2a:fb:c2:2d:79:b3:41:e9:06:69:85:de:
                    bc:e3:46:29:1b:00:77:0a:a3:3f:72:c8:8a:de:d6:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:59:18:37:85:28:60:B4:FE:1A:62:56:41:4B:34:CB:AC:2B:B5:D6
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:60:e3:4d:06:94:ea:3c:9a:42:95:e4:d1:78:b4:46:f2:
         00:1b:3e:98:b6:82:44:bd:ea:3b:f0:4f:4e:58:a1:5e:58:fa:
         50:a9:65:33:ed:d4:1e:b7:8d:20:2f:a6:e6:93:7a:4b:d9:fa:
         d2:88:a5:18:54:5e:f8:77:74:29:1e:3b:cb:c7:56:08:6c:52:
         1a:e8:20:0f:66:d7:fc:98:b8:bc:c7:01:0e:7a:cd:bd:68:b9:
         6f:14:28:d2:02:1e:04:ca:bf:b1:a8:f5:69:d2:15:a4:79:30:
         94:75:91:3f:05:f6:9e:d8:dc:68:96:3e:46:00:d5:4e:c1:0d:
         6b:a6:86:cf:1c:52:35:86:a0:86:f8:2d:b0:67:4b:f4:1a:70:
         67:3b:1f:78:86:23:36:1e:db:fc:0a:d0:a9:78:3b:65:ae:46:
         8a:0e:db:15:68:ca:30:03:3d:c2:f3:79:25:2d:98:4d:0c:d7:
         ff:a5:6b:11:58:86:a6:e7:ad:f9:6b:0e:36:6b:51:58:89:57:
         cd:33:e1:b0:e6:ec:a6:53:b1:94:af:12:22:cf:35:76:60:df:
         a4:6a:a1:92:37:c9:81:6a:bc:5b:a8:ce:f8:7f:ca:76:2e:16:
         d0:fb:25:a5:ad:b7:9a:7f:73:34:80:67:a7:fd:99:d4:b1:97:
         84:77:41:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC
NDA0OUU3ODYwHhcNMjUxMDE4MjAxMTEwWhcNMjUxMDI1MjAxMTEwWjAYMRYwFAYD
VQQDEw02OGYzZjQ1ZS01ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJDKCliiqyICP3F1krGAZJUVYF6nQOJoDEInbrTk+CUTtEmJDT0cou8Z2dSo
MwzqFU3kpjhyO9nQ/Pj2GlnrudXp3nYxp9A8edgJdv9J3dvo++RDw4WATsQxlLFv
SQO9eR48gzB11lLQOBsNrJaFBRPax0z0O7H4TWyqu64AyjCsuMs+SQeqd/GyWanW
oDp5u4noD3dkytdjSEiOADyK7m8VbBHGBQQc5VYYpWrunGlmzClj+qWkxRD4/wEL
aCfNxBWmMDBZuUGmoL7m8PS9isp1lzyP1/cC8w5b9oG7+oVS0Qsq+8ItebNB6QZp
hd6840YpGwB3CqM/csiK3ta8ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5ZGDeF
KGC0/hpiVkFLNMusK7XWMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4
RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi
cnVMcGxJaEN6ckMwQko1NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZuWDjTQaU6jyaQpXk0Xi0RvIAGz6YtoJEveo78E9OWKFeWPpQqWUz
7dQet40gL6bmk3pL2frSiKUYVF74d3QpHjvLx1YIbFIa6CAPZtf8mLi8xwEOes29
aLlvFCjSAh4Eyr+xqPVp0hWkeTCUdZE/Bfae2Nxolj5GANVOwQ1rpobPHFI1hqCG
+C2wZ0v0GnBnOx94hiM2Htv8CtCpeDtlrkaKDtsVaMowAz3C83klLZhNDNf/pWsR
WIam5635aw42a1FYiVfNM+Gw5uymU7GUrxIizzV2YN+kaqGSN8mBarxbqM74f8p2
LhbQ+yWlrbeaf3M0gGen/ZnUsZeEd0H2
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:03 2025 by rpki-client