Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
File:                     ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json)
Hash identifier:          5VFLg37JjqqfmVAz6IvkQHmpSP+Sga8s/Q6+nC413S0=
Subject key identifier:   AC:A8:D5:DA:4C:47:BE:DC:80:3E:57:BE:01:A1:0A:06:CE:FF:47:66
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
Manifest number:          0285
Signing time:             Sun 19 Oct 2025 03:51:44 +0000
Manifest this update:     Sun 19 Oct 2025 03:51:43 +0000
Manifest next update:     Sun 26 Oct 2025 03:51:43 +0000
Files and hashes:         1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: 9C3YSVjQTp7SCJZmcXmvVi3ZHxnSrBZ/PaPoME2lRy8=)
                          2: 66751A7C729211F0B01C9076C4F9AE02.roa (hash: DA2+T0X/BOsOoqnN72VPgqBzBOjbaGsjnoVczpg928Y=)
                          3: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=)
                          4: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=)
                          5: EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (hash: aOZDWn1qMroB3T8wskNnWN128J45BAOnAdMKsBqc0yc=)
                          6: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Oct 19 03:51:43 2025 GMT
            Not After : Oct 26 03:51:43 2025 GMT
        Subject: CN=68f4604f-0dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:d1:e7:e4:cc:bf:e4:11:16:c3:dd:4b:a9:
                    38:2e:92:07:3a:e8:76:48:40:c8:f8:ea:88:86:66:
                    e2:aa:44:f4:db:96:fa:28:97:23:58:cc:0c:84:8d:
                    b6:f2:40:5e:85:3c:b0:e0:bc:5a:63:f5:c5:09:d5:
                    cb:34:06:e6:53:04:01:33:a5:ca:28:6b:22:1f:4a:
                    a6:a6:26:bd:97:14:68:80:7b:0a:d7:f1:5f:6b:f2:
                    cf:9d:fc:77:fa:51:ce:6e:77:51:42:a3:f4:3a:10:
                    e1:d9:08:4a:7b:50:c9:9e:6e:dc:4b:51:e0:2b:fc:
                    4a:af:fc:11:09:9a:ba:f6:bc:1a:c5:57:5f:5e:af:
                    f2:e2:f2:f7:e6:69:99:61:4a:c0:25:fc:cf:a1:85:
                    c9:a5:d3:78:cc:d1:9c:85:be:93:55:9a:82:25:7e:
                    5e:c6:67:88:aa:c8:29:05:3b:22:d4:3d:53:a5:79:
                    9f:48:02:38:a4:e3:e9:a9:25:c2:1c:25:6d:d0:68:
                    13:bd:b1:88:48:19:ee:aa:e3:fe:22:25:5e:0e:d1:
                    a8:1d:28:3d:ea:f8:47:e8:44:e7:a2:bd:cb:de:95:
                    7f:0d:86:27:90:5a:02:b6:b5:dd:c1:f8:b4:30:f9:
                    19:54:ae:31:cd:82:18:1b:15:ea:69:7c:5a:ac:2c:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A8:D5:DA:4C:47:BE:DC:80:3E:57:BE:01:A1:0A:06:CE:FF:47:66
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:81:85:74:fe:1c:ae:7c:1b:6f:78:4c:63:27:27:08:d9:
         85:04:b1:fb:e7:1f:a9:a7:b8:78:02:d4:57:a1:d2:2b:35:aa:
         4b:5b:b7:dc:ca:c0:cb:7b:b3:92:82:27:29:3c:28:f1:4a:9e:
         58:98:04:96:15:6b:14:05:d7:bd:a5:3d:bc:4a:91:bb:7f:77:
         c3:76:5d:77:08:b8:7b:4e:44:4a:be:93:63:79:d6:1f:cf:44:
         96:b6:72:78:3d:9d:79:c4:8f:e6:f4:2e:47:94:ac:22:41:98:
         fb:7f:a5:4b:3f:0d:5d:e7:3d:9f:1e:f2:61:01:df:39:a1:14:
         31:83:ef:e1:21:e8:b1:5f:28:c2:62:1f:28:5c:91:3b:3a:1c:
         ab:54:62:78:e6:d4:72:02:04:1b:3a:86:e4:36:8a:d2:05:d2:
         11:91:0f:f0:cb:3e:22:76:64:bd:5b:88:66:9b:69:15:e9:5c:
         c3:11:2d:78:75:a0:c3:15:8d:e8:85:70:10:33:b3:6f:b7:a2:
         11:95:c9:4d:d0:8c:dc:eb:0b:71:c3:38:a0:63:11:85:65:00:
         77:3b:64:9f:ad:94:57:b5:fc:44:2e:0e:a3:e7:19:b8:1f:b2:
         8b:4b:bb:73:c4:45:42:ef:18:b0:6e:24:c0:d0:3a:05:8c:5f:
         6d:c9:cd:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2
MEFCNDdBREMwHhcNMjUxMDE5MDM1MTQzWhcNMjUxMDI2MDM1MTQzWjAYMRYwFAYD
VQQDEw02OGY0NjA0Zi0wZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxvR5+TMv+QRFsPdS6k4LpIHOuh2SEDI+OqIhmbiqkT025b6KJcjWMwMhI22
8kBehTyw4LxaY/XFCdXLNAbmUwQBM6XKKGsiH0qmpia9lxRogHsK1/Ffa/LPnfx3
+lHObndRQqP0OhDh2QhKe1DJnm7cS1HgK/xKr/wRCZq69rwaxVdfXq/y4vL35mmZ
YUrAJfzPoYXJpdN4zNGchb6TVZqCJX5exmeIqsgpBTsi1D1TpXmfSAI4pOPpqSXC
HCVt0GgTvbGISBnuquP+IiVeDtGoHSg96vhH6ETnor3L3pV/DYYnkFoCtrXdwfi0
MPkZVK4xzYIYGxXqaXxarCzjuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyo1dpM
R77cgD5XvgGhCgbO/0dmMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4
M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ
YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbg4GFdP4crnwbb3hMYycnCNmFBLH75x+pp7h4AtRXodIrNapLW7fc
ysDLe7OSgicpPCjxSp5YmASWFWsUBde9pT28SpG7f3fDdl13CLh7TkRKvpNjedYf
z0SWtnJ4PZ15xI/m9C5HlKwiQZj7f6VLPw1d5z2fHvJhAd85oRQxg+/hIeixXyjC
Yh8oXJE7OhyrVGJ45tRyAgQbOobkNorSBdIRkQ/wyz4idmS9W4hmm2kV6VzDES14
daDDFY3ohXAQM7Nvt6IRlclN0Izc6wtxwzigYxGFZQB3O2SfrZRXtfxELg6j5xm4
H7KLS7tzxEVC7xiwbiTA0DoFjF9tyc2/
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:36:31 2025 by rpki-client