Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File:                     40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier:          RkNr12KDz1CPWEAzHTZ3r2T990bfWcBhjw8E1bdqcP0=
Subject key identifier:   76:6B:40:D1:C4:43:44:29:EE:44:08:5D:D2:65:7C:E2:2C:AE:CA:46
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer:       /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial:       0C07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number:          0BF7
Signing time:             Sat 18 Oct 2025 19:40:09 +0000
Manifest this update:     Sat 18 Oct 2025 19:40:07 +0000
Manifest next update:     Sat 25 Oct 2025 19:40:07 +0000
Files and hashes:         1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: FeTGClvWpQI94RuSAFA8ShhYJ7u1oa8/TcleIh2SHuY=)
                          2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=)
                          3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
                          rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Validity
            Not Before: Oct 18 19:40:07 2025 GMT
            Not After : Oct 25 19:40:07 2025 GMT
        Subject: CN=68f3ed18-d269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:48:1a:19:27:35:89:d5:e3:c8:f6:ad:a8:
                    09:0f:34:1f:b1:47:40:22:b9:c1:ea:41:bc:c3:bd:
                    27:f1:3a:e2:be:1b:da:c1:06:9d:2c:2d:b6:7f:32:
                    ca:a4:ba:44:d8:39:e9:81:56:c9:15:8f:cf:2c:24:
                    24:48:ba:87:02:79:e1:27:b5:05:09:3f:e0:ef:0c:
                    0b:ba:a2:44:63:3f:48:1e:d3:4c:4e:98:ec:dd:fc:
                    da:93:be:6e:a1:e9:92:22:33:c1:16:51:60:05:1c:
                    f3:aa:a6:54:af:cf:cb:0f:58:49:0e:df:3c:d4:e6:
                    aa:4e:5f:2f:6c:15:a8:9a:c2:f5:9d:62:a4:ee:42:
                    63:7c:6b:af:4c:df:f6:63:b7:31:cd:0f:89:39:c6:
                    d5:1e:83:27:67:2e:99:e0:b5:2a:22:94:31:fd:a4:
                    de:15:bd:6e:23:de:b4:55:32:a2:3d:d9:b3:2b:94:
                    f9:3d:2c:69:7a:c5:da:8c:c9:40:27:48:b7:2d:3e:
                    5d:2e:41:ef:db:60:ce:f1:03:fe:66:d2:f9:0a:d1:
                    b2:c0:1a:ff:fe:03:17:6a:8b:5d:3d:92:d7:22:a7:
                    19:02:fd:44:7c:e6:d8:f4:ae:bf:df:dc:92:1e:3a:
                    dc:e6:18:66:15:f1:f9:f6:4b:f9:13:3e:ee:de:d7:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:40:D1:C4:43:44:29:EE:44:08:5D:D2:65:7C:E2:2C:AE:CA:46
            X509v3 Authority Key Identifier:
                keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:ab:fb:f2:b6:a0:81:b1:33:35:29:8a:6b:c2:21:97:a4:
         01:e3:2d:0e:3a:e5:d3:30:2b:c0:e1:8d:97:f2:62:4e:f8:07:
         5f:61:39:0d:64:69:7b:de:b7:90:5b:a0:13:03:cd:c8:f1:d4:
         01:bc:58:9c:f0:27:97:d8:78:8c:dd:7e:0c:1e:70:93:42:74:
         b4:82:0a:3f:84:6b:9a:da:61:8f:fd:3c:f1:35:e0:e8:ce:32:
         47:39:85:bd:e3:6f:7c:9b:38:81:85:1c:62:7f:3c:76:3c:8d:
         be:9a:be:0b:44:7d:a9:56:71:86:bc:66:b6:2e:61:e1:3d:87:
         62:26:4a:04:36:2a:f4:ec:42:ca:1a:18:9b:ef:d3:18:da:9f:
         84:ad:05:9b:ea:a5:71:f7:1c:1b:98:4a:91:e5:41:9a:17:8c:
         72:f4:fe:09:a8:4e:4b:78:7f:a2:d0:04:dd:46:d7:ec:dd:88:
         a6:e0:4f:ad:9a:7a:54:74:4e:68:f4:e9:33:c1:8f:9c:6b:74:
         86:75:09:58:3c:40:6f:86:6f:e1:65:9d:2d:71:e2:08:fc:f9:
         a2:e0:96:dc:85:80:6c:17:04:b7:fb:42:ae:08:d2:4e:d5:e2:
         5a:59:af:95:fa:11:0a:58:6a:a8:fd:74:a1:e5:85:92:4b:8b:
         9c:ad:db:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy
NDAyNDYyM0EwHhcNMjUxMDE4MTk0MDA3WhcNMjUxMDI1MTk0MDA3WjAYMRYwFAYD
VQQDEw02OGYzZWQxOC1kMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgFIGhknNYnV48j2ragJDzQfsUdAIrnB6kG8w70n8TrivhvawQadLC22fzLK
pLpE2DnpgVbJFY/PLCQkSLqHAnnhJ7UFCT/g7wwLuqJEYz9IHtNMTpjs3fzak75u
oemSIjPBFlFgBRzzqqZUr8/LD1hJDt881OaqTl8vbBWomsL1nWKk7kJjfGuvTN/2
Y7cxzQ+JOcbVHoMnZy6Z4LUqIpQx/aTeFb1uI960VTKiPdmzK5T5PSxpesXajMlA
J0i3LT5dLkHv22DO8QP+ZtL5CtGywBr//gMXaotdPZLXIqcZAv1EfObY9K6/39yS
Hjrc5hhmFfH59kv5Ez7u3tdgDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZrQNHE
Q0Qp7kQIXdJlfOIsrspGMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy
NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4
ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS9Kv78raggbEzNSmKa8Ihl6QB4y0OOuXTMCvA4Y2X8mJO+AdfYTkN
ZGl73reQW6ATA83I8dQBvFic8CeX2HiM3X4MHnCTQnS0ggo/hGua2mGP/TzxNeDo
zjJHOYW94298mziBhRxifzx2PI2+mr4LRH2pVnGGvGa2LmHhPYdiJkoENir07ELK
Ghib79MY2p+ErQWb6qVx9xwbmEqR5UGaF4xy9P4JqE5LeH+i0ATdRtfs3Yim4E+t
mnpUdE5o9OkzwY+ca3SGdQlYPEBvhm/hZZ0tceII/Pmi4JbchYBsFwS3+0KuCNJO
1eJaWa+V+hEKWGqo/XSh5YWSS4ucrdty
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:59 2025 by rpki-client