Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File:                     P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier:          J9B43zND5CLLVesKutuBETaSb46MqI98savMNoEo5oU=
Subject key identifier:   C8:6A:E5:2A:D1:D9:56:07:C0:8B:58:59:4E:89:5E:09:DA:9B:85:3D
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer:       /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial:       048C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number:          06D6
Signing time:             Sun 19 Oct 2025 01:56:44 +0000
Manifest this update:     Sun 19 Oct 2025 01:56:44 +0000
Manifest next update:     Sun 26 Oct 2025 01:56:44 +0000
Files and hashes:         1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 13L2weeciU8wunetXQnKBdms8w4xc5rMg9d518UxknQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
                          rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
        Validity
            Not Before: Oct 19 01:56:44 2025 GMT
            Not After : Oct 26 01:56:44 2025 GMT
        Subject: CN=68f4455c-d5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:b5:57:ad:34:ae:e8:7e:33:89:4f:3f:73:
                    3e:b0:64:5a:d6:84:47:62:dc:12:db:c6:57:21:75:
                    19:ea:d7:8c:74:d0:b8:62:ad:8a:10:db:55:02:e6:
                    65:2e:85:d5:c2:39:60:6b:83:b5:93:7f:9e:ee:0c:
                    ad:25:44:b3:ba:d0:30:46:e0:52:c3:b9:ef:c7:37:
                    39:9e:c5:44:ba:87:0c:37:3a:ca:89:d6:6a:d7:b9:
                    65:19:c7:aa:f5:87:2c:0d:de:3f:9b:1b:58:4a:eb:
                    51:d0:fb:c4:62:29:d9:f0:90:1b:9b:be:34:5c:49:
                    c1:21:57:d1:13:ce:cb:53:e6:c2:47:20:9f:bb:06:
                    b3:f2:dd:c4:d9:20:b1:de:b6:39:07:c8:6c:79:98:
                    b5:8f:53:f0:c2:5c:a9:f1:1b:b2:3f:92:73:fa:c8:
                    ed:2b:69:10:50:2b:8a:e2:e5:af:6b:0a:eb:57:1c:
                    50:ea:b0:bd:2f:90:8d:01:6e:c6:ec:10:f5:da:bc:
                    1a:70:78:29:fb:bf:32:2c:dd:53:38:f4:83:8d:9e:
                    bb:1b:c5:42:a5:75:44:56:de:0b:a0:d6:2a:0f:f5:
                    c5:0b:5e:05:95:3b:f0:59:fe:e5:a6:72:98:ea:8f:
                    2b:8f:81:14:a6:72:29:4f:a8:52:29:ee:56:82:e2:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6A:E5:2A:D1:D9:56:07:C0:8B:58:59:4E:89:5E:09:DA:9B:85:3D
            X509v3 Authority Key Identifier:
                keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:0c:7f:24:69:e8:2d:a4:db:2a:d0:f0:63:ee:7f:7d:fb:
         5f:26:fd:c8:f2:a5:16:42:56:14:06:dc:1c:9a:51:47:55:99:
         67:cd:96:83:aa:61:98:16:11:bf:37:f7:50:a1:8a:bf:57:38:
         5b:b5:ab:d7:66:fe:ef:a5:60:38:3b:74:de:73:8e:32:49:c1:
         1d:1f:f5:61:4f:df:b6:dd:e4:02:47:d1:e2:44:a1:c3:ea:3b:
         86:0a:4d:9f:0a:49:17:80:d3:2e:99:40:7e:ac:64:b7:99:2e:
         8d:43:07:d4:de:0b:66:b9:3c:7b:cc:db:c8:b8:e1:14:e4:1e:
         22:1d:02:50:2c:6f:db:e2:70:b5:44:91:14:47:25:2a:d9:51:
         0e:c1:54:70:3a:c0:e5:b4:d3:3b:83:01:04:3e:b4:a5:fb:d2:
         96:77:4f:7d:52:cc:e5:08:63:db:65:70:ee:46:29:cd:e7:5f:
         49:e6:1f:28:66:6e:af:10:a9:39:ef:c4:e8:74:cc:52:53:2a:
         93:3d:83:91:cd:bf:e3:3c:40:de:6c:2d:0c:d7:21:cd:02:79:
         1e:96:c0:b3:8e:6b:68:f2:b8:59:50:be:d3:34:27:e9:4b:d7:
         15:b9:00:ad:5e:e9:47:c0:75:4b:6b:49:de:89:5f:d5:6c:db:
         eb:6d:ed:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB
RTBCMzVBMTgwHhcNMjUxMDE5MDE1NjQ0WhcNMjUxMDI2MDE1NjQ0WjAYMRYwFAYD
VQQDEw02OGY0NDU1Yy1kNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKq1V600ruh+M4lPP3M+sGRa1oRHYtwS28ZXIXUZ6teMdNC4Yq2KENtVAuZl
LoXVwjlga4O1k3+e7gytJUSzutAwRuBSw7nvxzc5nsVEuocMNzrKidZq17llGceq
9YcsDd4/mxtYSutR0PvEYinZ8JAbm740XEnBIVfRE87LU+bCRyCfuwaz8t3E2SCx
3rY5B8hseZi1j1Pwwlyp8RuyP5Jz+sjtK2kQUCuK4uWvawrrVxxQ6rC9L5CNAW7G
7BD12rwacHgp+78yLN1TOPSDjZ67G8VCpXVEVt4LoNYqD/XFC14FlTvwWf7lpnKY
6o8rj4EUpnIpT6hSKe5WguLjxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhq5SrR
2VYHwItYWU6JXgnam4U9MB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE
NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf
b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSegx/JGnoLaTbKtDwY+5/fftfJv3I8qUWQlYUBtwcmlFHVZlnzZaD
qmGYFhG/N/dQoYq/VzhbtavXZv7vpWA4O3Tec44yScEdH/VhT9+23eQCR9HiRKHD
6juGCk2fCkkXgNMumUB+rGS3mS6NQwfU3gtmuTx7zNvIuOEU5B4iHQJQLG/b4nC1
RJEURyUq2VEOwVRwOsDltNM7gwEEPrSl+9KWd099UszlCGPbZXDuRinN519J5h8o
Zm6vEKk578TodMxSUyqTPYORzb/jPEDebC0M1yHNAnkelsCzjmto8rhZUL7TNCfp
S9cVuQCtXulHwHVLa0neiV/VbNvrbe2Z
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:39 2025 by rpki-client