Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          8vhQMge6zlpelNhYqC36pGpgHEMHc7iHbsckVTlJjMU=
Subject key identifier:   4F:82:17:47:2C:B3:58:87:6C:23:63:D3:9C:25:99:2C:11:25:BE:07
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          036B
Signing time:             Sun 19 Oct 2025 02:57:08 +0000
Manifest this update:     Sun 19 Oct 2025 02:57:08 +0000
Manifest next update:     Sun 26 Oct 2025 02:57:08 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: efFQ3WW8qH0CUrODLgOWuZPPB+PfPQrCoMlLuhhmWFQ=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: Oct 19 02:57:08 2025 GMT
            Not After : Oct 26 02:57:08 2025 GMT
        Subject: CN=68f45384-b650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:12:c3:89:90:23:98:49:06:36:03:f7:3d:
                    3a:91:d1:e5:c1:40:db:b6:31:d8:cc:3c:eb:db:36:
                    e0:ae:90:a2:b5:11:22:16:1b:0f:83:72:3c:2b:c5:
                    b1:e5:ea:37:6b:bb:d2:0c:7a:90:73:91:f4:5b:8a:
                    46:08:29:54:21:d8:a7:bd:24:15:49:d3:d2:7e:54:
                    e1:c5:65:6e:0e:43:b0:0b:11:7c:e1:70:ab:ec:c2:
                    65:64:74:27:8d:3c:57:97:88:60:29:49:86:3a:81:
                    24:15:5e:10:6b:74:f1:ac:8b:d0:07:f9:26:43:ce:
                    80:ab:a4:ec:c3:79:f9:5a:50:cb:d3:5c:2b:34:27:
                    dc:3a:fb:f7:9b:0a:44:fc:1a:57:21:1c:6a:82:40:
                    1e:5c:59:e8:ea:d0:66:3a:1f:75:93:04:ce:5d:29:
                    65:ac:e6:90:cb:ae:a6:7e:f5:28:9f:8f:a6:f9:c7:
                    96:72:80:63:91:b3:44:14:7c:5e:34:2d:3b:92:cb:
                    49:9d:a9:0f:7f:5c:74:e0:36:4f:69:fd:bf:de:ab:
                    62:7a:be:16:0f:e7:95:52:bc:59:4a:90:d0:7a:41:
                    cc:e9:c7:c0:28:f2:0b:c7:3a:aa:4a:d9:e3:da:e2:
                    10:14:0b:70:2c:dc:a3:fe:e1:6d:bd:32:3d:4b:8b:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:82:17:47:2C:B3:58:87:6C:23:63:D3:9C:25:99:2C:11:25:BE:07
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:69:c0:6c:a7:71:83:4d:1f:75:37:ea:40:78:c4:c8:42:61:
         76:ac:f3:af:fa:2f:42:a0:28:26:f7:60:96:5b:8d:89:7d:93:
         47:d3:0f:2c:ee:6a:1d:83:94:2a:e5:66:db:18:9e:a2:6a:16:
         2d:f1:b6:09:d4:a3:fa:7f:99:48:7b:c5:a2:f1:e9:1c:4e:62:
         2b:a2:73:c2:b8:89:8c:bc:55:54:a9:10:6f:51:b7:24:75:23:
         da:a7:ab:63:bd:e2:9e:a0:49:0a:a0:47:f1:75:31:44:fa:05:
         69:ad:55:30:83:f9:2d:f1:4e:cf:ba:e0:47:db:d4:3d:2b:d8:
         35:4a:37:89:78:8a:65:1f:dd:a8:d1:4c:8b:90:86:19:fa:0f:
         e3:31:b0:26:34:b9:a0:df:a5:d5:15:3d:37:61:59:3b:88:70:
         de:92:97:0d:f7:e5:56:a4:2c:ec:e6:a4:60:c7:1c:67:0d:3b:
         2f:2d:6d:6e:4a:00:d1:39:7a:29:21:f3:6f:58:25:42:10:1f:
         5c:8d:fe:84:eb:d0:f9:ab:37:91:6c:72:02:ff:fd:90:1f:0b:
         52:0f:9e:4d:6f:9e:7b:10:98:4d:9e:76:12:11:1f:c3:e5:20:
         38:8c:ea:3f:54:3b:73:cd:65:e7:a4:dd:1b:65:bd:37:83:25:
         b2:f2:72:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE
REJGQjc1QUIwHhcNMjUxMDE5MDI1NzA4WhcNMjUxMDI2MDI1NzA4WjAYMRYwFAYD
VQQDEw02OGY0NTM4NC1iNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxcSw4mQI5hJBjYD9z06kdHlwUDbtjHYzDzr2zbgrpCitREiFhsPg3I8K8Wx
5eo3a7vSDHqQc5H0W4pGCClUIdinvSQVSdPSflThxWVuDkOwCxF84XCr7MJlZHQn
jTxXl4hgKUmGOoEkFV4Qa3TxrIvQB/kmQ86Aq6Tsw3n5WlDL01wrNCfcOvv3mwpE
/BpXIRxqgkAeXFno6tBmOh91kwTOXSllrOaQy66mfvUon4+m+ceWcoBjkbNEFHxe
NC07kstJnakPf1x04DZPaf2/3qtier4WD+eVUrxZSpDQekHM6cfAKPILxzqqStnj
2uIQFAtwLNyj/uFtvTI9S4vGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+CF0cs
s1iHbCNj05wlmSwRJb4HMB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND
NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzY5Qi9CMDkzNUQ1NENDNjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWlt
ME1PUm82OE4xa1RkdjdkYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyacBsp3GDTR91N+pAeMTIQmF2rPOv+i9CoCgm92CWW42JfZNH0w8s
7modg5Qq5WbbGJ6iahYt8bYJ1KP6f5lIe8Wi8ekcTmIronPCuImMvFVUqRBvUbck
dSPap6tjveKeoEkKoEfxdTFE+gVprVUwg/kt8U7PuuBH29Q9K9g1SjeJeIplH92o
0UyLkIYZ+g/jMbAmNLmg36XVFT03YVk7iHDekpcN9+VWpCzs5qRgxxxnDTsvLW1u
SgDROXopIfNvWCVCEB9cjf6E69D5qzeRbHIC//2QHwtSD55Nb557EJhNnnYSER/D
5SA4jOo/VDtzzWXnpN0bZb03gyWy8nLY
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:59 2025 by rpki-client