Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          9O8Omc7B0gnfrXHVvv0TTIRCDXTEQyf6hqB4yJ7o72k=
Subject key identifier:   CB:78:F7:7E:D7:E0:64:29:B5:4B:41:4F:F6:EB:84:93:13:81:2D:E6
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       0415
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          045A
Signing time:             Sun 19 Oct 2025 02:21:01 +0000
Manifest this update:     Sun 19 Oct 2025 02:21:00 +0000
Manifest next update:     Sun 26 Oct 2025 02:21:00 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: 17FPA+O1cMostdNvmFYXvtCd7hzZnc9Yx7Sh44wQKPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: Oct 19 02:21:00 2025 GMT
            Not After : Oct 26 02:21:00 2025 GMT
        Subject: CN=68f44b0c-824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:5f:1f:c0:fa:30:ed:87:df:ba:5d:4a:a3:
                    19:65:f1:1b:30:c9:c9:1c:4f:57:61:9a:55:07:e9:
                    fd:2e:1c:ef:7e:04:11:cb:3a:1c:02:d5:45:98:47:
                    e0:3c:af:8d:98:39:83:1d:7b:c2:4c:90:31:7f:00:
                    9c:57:7b:87:36:ee:2e:e6:b4:6c:76:df:7d:4d:3c:
                    a4:e4:d2:53:18:fa:bc:3c:dc:8a:f4:c5:50:b4:be:
                    80:81:fd:bd:b0:77:e2:5e:3c:4e:04:85:8f:97:b2:
                    e1:39:09:c4:31:09:b1:70:9b:6c:48:bb:72:54:1e:
                    3c:e9:d6:96:cf:82:2d:06:e5:13:c8:c7:83:e7:92:
                    fb:23:a1:ec:e3:4b:ce:03:a9:a0:7d:c5:a9:f6:31:
                    42:66:49:b3:d3:f5:af:f9:fb:a5:41:7c:50:43:b4:
                    3d:f5:1f:39:a0:fb:94:78:9b:33:e9:18:8a:25:d3:
                    ad:e2:3e:a3:ab:70:20:4a:61:91:e0:e0:eb:49:bb:
                    b1:19:98:ef:2d:77:6f:fb:9a:e6:17:3b:a9:cf:ff:
                    42:b6:88:0b:99:6d:bd:37:c1:13:e1:f0:b5:2e:fa:
                    40:e2:7f:de:b8:36:14:36:17:df:d6:cc:6c:6e:03:
                    0b:b7:e7:1e:99:05:25:be:bd:49:ee:ef:5a:2a:2d:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:F7:7E:D7:E0:64:29:B5:4B:41:4F:F6:EB:84:93:13:81:2D:E6
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:57:3c:24:22:60:b3:68:0b:62:bd:ba:62:d4:a1:a6:6d:80:
         e1:ae:9b:05:37:52:9d:aa:0e:4a:f9:8b:34:d3:1c:44:99:14:
         19:14:d6:23:bf:11:9c:b9:27:44:21:c6:07:d8:da:a3:dc:3e:
         c8:6f:7f:4a:f2:e1:3f:a9:fc:9c:9e:a2:d4:0c:60:5a:3d:45:
         f6:e5:a6:d9:a8:92:87:6c:db:5c:cb:c8:3e:1c:4c:b8:72:22:
         57:b2:3e:bf:2e:9d:cf:8c:e6:5f:c4:83:0b:ab:4e:f7:d7:85:
         e5:7e:20:a3:c3:13:e7:91:79:b4:e5:e8:fd:7e:b4:9a:35:06:
         82:02:b1:06:f0:b7:93:22:a1:fa:7e:15:ad:4e:5a:38:8f:2d:
         80:ab:65:e9:6a:bd:0a:d9:21:41:dc:81:01:35:b5:7d:2f:ae:
         fc:1b:1b:01:3e:59:dd:93:09:8d:84:d1:bd:78:73:ee:d9:2d:
         08:ae:df:83:b0:b0:97:28:e0:ff:73:35:4f:00:29:c2:36:a0:
         2e:b2:d8:ca:89:00:21:64:1d:c3:66:af:dd:26:54:5b:8e:f3:
         50:e8:96:17:6e:78:90:01:53:3e:19:f4:20:34:77:99:5c:0a:
         ff:15:b8:72:cd:7b:ed:45:a2:71:59:06:7c:47:5f:26:fc:2e:
         90:87:65:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlBOUYxMTAvBgNVBAUTKEY3OUJBNEJCQkVBRDNERUFEQzlBRDQ1NjRCRkE5RUYx
MEE2QUEyQjIwHhcNMjUxMDE5MDIyMTAwWhcNMjUxMDI2MDIyMTAwWjAYMRYwFAYD
VQQDEw02OGY0NGIwYy04MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsa1fH8D6MO2H37pdSqMZZfEbMMnJHE9XYZpVB+n9LhzvfgQRyzocAtVFmEfg
PK+NmDmDHXvCTJAxfwCcV3uHNu4u5rRsdt99TTyk5NJTGPq8PNyK9MVQtL6Agf29
sHfiXjxOBIWPl7LhOQnEMQmxcJtsSLtyVB486daWz4ItBuUTyMeD55L7I6Hs40vO
A6mgfcWp9jFCZkmz0/Wv+fulQXxQQ7Q99R85oPuUeJsz6RiKJdOt4j6jq3AgSmGR
4ODrSbuxGZjvLXdv+5rmFzupz/9CtogLmW29N8ET4fC1LvpA4n/euDYUNhff1sxs
bgMLt+cemQUlvr1J7u9aKi0IfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt4937X
4GQptUtBT/brhJMTgS3mMB8GA1UdIwQYMBaAFPebpLu+rT3q3JrUVkv6nvEKaqKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB
OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBlcmNtdFJXU19xZThRcHFv
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk1dWt1NzZ0UGVyY210UldTX3FlOFFwcW9ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUE5Ri84MDU2QkE1NjhBOTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBl
cmNtdFJXU19xZThRcHFvckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtVzwkImCzaAtivbpi1KGmbYDhrpsFN1Kdqg5K+Ys00xxEmRQZFNYj
vxGcuSdEIcYH2Nqj3D7Ib39K8uE/qfycnqLUDGBaPUX25abZqJKHbNtcy8g+HEy4
ciJXsj6/Lp3PjOZfxIMLq07314XlfiCjwxPnkXm05ej9frSaNQaCArEG8LeTIqH6
fhWtTlo4jy2Aq2Xpar0K2SFB3IEBNbV9L678GxsBPlndkwmNhNG9eHPu2S0Irt+D
sLCXKOD/czVPACnCNqAustjKiQAhZB3DZq/dJlRbjvNQ6JYXbniQAVM+GfQgNHeZ
XAr/FbhyzXvtRaJxWQZ8R18m/C6Qh2Wb
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:02 2025 by rpki-client