Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
File:                     e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json)
Hash identifier:          ALEh0rn51TkWgCuyDieNvN/9KZUDHFSVS9dddJYEXZQ=
Subject key identifier:   33:1B:6B:58:91:49:6C:DD:55:67:CF:90:A1:AD:3B:FD:9A:4E:76:E4
Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB
Certificate issuer:       /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
Certificate serial:       27D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
Manifest number:          27C1
Signing time:             Sat 18 Oct 2025 15:50:47 +0000
Manifest this update:     Sat 18 Oct 2025 15:50:46 +0000
Manifest next update:     Sat 25 Oct 2025 15:50:46 +0000
Files and hashes:         1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: cECx6KrjBJBjJvOLvdEegWvNM+V2OQxENbj5HG4kKXY=)
                          2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: EeUXim59YsvGI7qIffiR5WtPWhD5kVEeYtKpW1EoALs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl
                          rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10196 (0x27d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189311, serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
        Validity
            Not Before: Oct 18 15:50:46 2025 GMT
            Not After : Oct 25 15:50:46 2025 GMT
        Subject: CN=68f3b757-b691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:97:19:66:0b:b5:48:78:ba:c1:84:4f:77:
                    8b:8e:2f:d2:6a:ba:af:33:37:a1:04:4e:93:d0:b7:
                    4a:ff:04:13:c3:dd:1e:bb:03:d5:9b:62:e5:8c:11:
                    ed:2f:c3:28:48:47:b1:5d:19:06:3e:75:03:95:e1:
                    19:c9:0b:38:99:a0:59:a4:1f:37:4b:de:82:69:8e:
                    1b:ed:a1:99:5a:ee:e5:f8:5b:57:1c:68:15:9a:46:
                    fb:88:33:e0:e9:c5:ca:47:ec:6e:69:a2:15:09:35:
                    2a:47:43:04:8e:a9:25:14:a8:24:13:9d:d0:85:dd:
                    6c:f6:10:62:ba:dd:78:30:2e:65:2f:60:67:cb:0a:
                    4d:bd:f8:42:2f:9c:a1:13:67:85:e3:8d:8e:07:80:
                    b9:4c:b2:42:cd:a0:1e:11:e5:0b:92:d0:08:4f:2f:
                    da:45:96:5b:eb:a3:8c:ab:21:4b:9c:0b:16:81:f4:
                    2c:49:d4:df:dc:56:1e:e7:3c:f5:22:ef:f0:8f:a3:
                    49:46:e7:f3:04:64:6d:c7:5d:30:e2:1e:47:61:9f:
                    7a:04:44:05:89:4b:ae:79:bb:11:fc:e7:dd:8c:64:
                    3b:d8:75:78:17:87:a7:e6:28:fd:13:09:38:a0:3b:
                    9d:1c:98:c4:81:f9:99:13:8e:fd:0a:9a:44:87:ed:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:6B:58:91:49:6C:DD:55:67:CF:90:A1:AD:3B:FD:9A:4E:76:E4
            X509v3 Authority Key Identifier:
                keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:83:78:ec:c6:43:91:3b:86:34:74:a4:0e:12:e2:e4:8b:af:
         2b:7c:81:7f:0c:aa:03:b8:69:ad:ec:b2:3e:6d:da:fc:8e:ae:
         e5:1e:31:9e:ce:a4:93:db:fe:2d:1c:4e:12:ab:d7:45:58:f7:
         02:1e:96:3f:3d:06:80:ad:bc:9d:cd:47:82:77:cb:8f:50:07:
         99:0c:e8:e5:b4:f6:50:51:1c:76:bd:b0:99:cd:e0:35:3e:19:
         a6:dc:40:be:1f:2a:3f:cb:75:f2:7b:7e:d1:3d:46:96:a8:9e:
         87:74:43:b5:5b:5d:e0:6a:ef:b7:cc:bf:6f:3e:37:b2:4d:cb:
         a5:a8:aa:6a:1c:25:5d:f8:d9:a2:d6:11:3a:10:78:2a:98:40:
         26:c5:0f:cc:f6:07:48:0e:35:a8:26:51:44:b7:f9:fd:93:6b:
         12:53:d2:7f:19:73:f1:ce:a3:eb:0c:75:80:0d:b7:38:f0:86:
         4a:64:f9:dd:61:3d:f1:e7:58:62:4c:d1:d9:b3:59:4d:2d:ed:
         c8:63:e2:d6:c7:61:2d:5b:4a:ac:f1:a0:85:12:64:51:30:91:
         16:8d:63:e3:c0:ed:52:4e:f9:3c:3d:14:6b:b2:53:65:fd:b8:
         57:9a:12:ee:85:58:39:9c:cd:9e:3e:c7:06:21:77:ad:0b:9c:
         a7:d5:5e:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkzMTExMTAvBgNVBAUTKDdCNzc1NEE4MkREMDYzQTQ3RThFQzM1RDE2M0VGNkIy
NDQ4RDEyREIwHhcNMjUxMDE4MTU1MDQ2WhcNMjUxMDI1MTU1MDQ2WjAYMRYwFAYD
VQQDEw02OGYzYjc1Ny1iNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0CGXGWYLtUh4usGET3eLji/SarqvMzehBE6T0LdK/wQTw90euwPVm2LljBHt
L8MoSEexXRkGPnUDleEZyQs4maBZpB83S96CaY4b7aGZWu7l+FtXHGgVmkb7iDPg
6cXKR+xuaaIVCTUqR0MEjqklFKgkE53Qhd1s9hBiut14MC5lL2BnywpNvfhCL5yh
E2eF442OB4C5TLJCzaAeEeULktAITy/aRZZb66OMqyFLnAsWgfQsSdTf3FYe5zz1
Iu/wj6NJRufzBGRtx10w4h5HYZ96BEQFiUuuebsR/OfdjGQ72HV4F4en5ij9Ewk4
oDudHJjEgfmZE479CppEh+0bqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMba1iR
SWzdVWfPkKGtO/2aTnbkMB8GA1UdIwQYMBaAFHt3VKgt0GOkfo7DXRY+9rJEjRLb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTMxMS8xM0FGRjZGNkIy
NEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2Ui1qc05kRmo3MnNrU05F
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UzZFVxQzNRWTZSLWpzTmRGajcyc2tTTkV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTMxMS8xM0FGRjZGNkIyNEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2
Ui1qc05kRmo3MnNrU05FdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCg3jsxkORO4Y0dKQOEuLki68rfIF/DKoDuGmt7LI+bdr8jq7lHjGe
zqST2/4tHE4Sq9dFWPcCHpY/PQaArbydzUeCd8uPUAeZDOjltPZQURx2vbCZzeA1
Phmm3EC+Hyo/y3Xye37RPUaWqJ6HdEO1W13gau+3zL9vPjeyTculqKpqHCVd+Nmi
1hE6EHgqmEAmxQ/M9gdIDjWoJlFEt/n9k2sSU9J/GXPxzqPrDHWADbc48IZKZPnd
YT3x51hiTNHZs1lNLe3IY+LWx2EtW0qs8aCFEmRRMJEWjWPjwO1STvk8PRRrslNl
/bhXmhLuhVg5nM2ePscGIXetC5yn1V4i
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:12 2025 by rpki-client