Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
File:                     Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json)
Hash identifier:          +RMz97gQIiSM3dVUpWm0DFMezIVTSAeiUx2phxgbyTc=
Subject key identifier:   3B:B9:6B:CE:18:4F:4A:07:09:52:BB:59:2C:A8:31:09:E7:F5:13:29
Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC
Certificate issuer:       /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
Certificate serial:       0858
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
Manifest number:          0852
Signing time:             Sat 18 Oct 2025 21:50:32 +0000
Manifest this update:     Sat 18 Oct 2025 21:50:32 +0000
Manifest next update:     Sat 25 Oct 2025 21:50:32 +0000
Files and hashes:         1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: sepJ5UcFny9Le0nUc6j7S08dztoPjTETvii/d0nOQ8c=)
                          2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl
                          rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
        Validity
            Not Before: Oct 18 21:50:32 2025 GMT
            Not After : Oct 25 21:50:32 2025 GMT
        Subject: CN=68f40ba8-786d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:d8:9e:0a:45:81:78:65:ee:92:18:7a:92:
                    17:4b:fc:62:37:37:8b:e0:22:f6:07:c5:63:7a:81:
                    86:0c:2f:77:d1:29:36:f3:a9:48:c2:31:73:52:0c:
                    32:03:1b:a8:46:a5:f4:e0:cb:43:4c:bf:52:b6:53:
                    56:5f:7b:a0:6e:f5:65:fb:c0:ee:ba:0e:b2:e1:92:
                    0c:23:30:0d:3f:7a:ee:42:ff:ac:f3:39:c3:cf:d3:
                    43:8e:ca:fd:d8:38:51:69:0b:60:14:29:e3:c3:f1:
                    44:56:29:0a:7b:01:18:1a:66:5c:24:5d:d6:58:c6:
                    e2:f2:2c:ea:26:dc:fb:d3:76:6e:31:2f:1b:8d:c9:
                    4d:53:13:3e:54:8f:24:4d:84:a2:3d:f7:6a:02:c6:
                    53:b0:d6:85:b3:e4:fa:c1:ed:70:09:69:50:ff:7d:
                    2f:cf:81:9f:ca:0d:1b:8b:a3:d7:95:0b:a4:5b:e6:
                    9f:26:8c:29:99:ca:d3:3b:00:a0:fb:0e:50:08:d8:
                    9a:a4:27:00:28:2a:6b:83:cc:e5:4a:c9:52:30:56:
                    2a:9e:1f:a6:f5:5e:f4:a7:10:a3:6e:bd:c9:7d:ac:
                    88:ca:13:0b:f3:36:b4:f2:91:60:80:a7:f9:8a:df:
                    6c:73:98:40:69:c3:0d:49:8e:9b:c4:c6:07:76:04:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:6B:CE:18:4F:4A:07:09:52:BB:59:2C:A8:31:09:E7:F5:13:29
            X509v3 Authority Key Identifier:
                keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:4f:dd:9b:b3:59:d3:48:35:be:1b:8f:e7:93:f3:ce:7c:
         24:8f:ff:95:73:c0:36:26:9c:92:32:d0:39:96:e6:1f:46:16:
         34:c2:81:1a:c1:f8:3a:37:ff:fe:6e:a7:81:02:f4:29:4d:11:
         77:39:4d:33:04:bc:ac:c8:ec:d4:b5:4e:bd:82:6d:ba:cc:06:
         89:5c:d1:fe:f7:0d:79:46:b9:8b:c6:a1:1e:7b:50:b3:ef:9d:
         a0:32:b9:f0:3a:20:ea:07:c6:4b:1c:04:08:29:fa:6f:50:c7:
         52:ce:93:19:bd:54:22:85:4d:fe:3f:79:8d:ba:5b:83:94:22:
         0e:36:8a:56:42:89:f2:a0:a5:fe:a1:1f:70:4a:83:d1:eb:29:
         d3:21:32:43:84:56:95:c5:f4:45:35:a6:9f:84:65:63:43:be:
         98:60:4b:56:7d:ad:2a:5d:4c:67:e0:63:53:79:d6:ce:6c:44:
         e1:38:e5:b3:27:d9:ff:e7:a7:c8:48:7a:5d:0b:f1:e8:13:b5:
         b2:cc:56:96:5f:8c:09:08:ca:c4:ed:e1:16:9f:c2:6b:07:17:
         ef:3f:08:f5:31:e5:25:16:26:46:71:58:d8:d3:01:4c:e8:96:
         34:74:42:9e:8b:d6:18:1e:60:34:2d:80:a3:c2:2a:ca:e7:c5:
         f1:39:4f:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw
OTlENTQ3Q0MwHhcNMjUxMDE4MjE1MDMyWhcNMjUxMDI1MjE1MDMyWjAYMRYwFAYD
VQQDEw02OGY0MGJhOC03ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp53YngpFgXhl7pIYepIXS/xiNzeL4CL2B8VjeoGGDC930Sk286lIwjFzUgwy
AxuoRqX04MtDTL9StlNWX3ugbvVl+8Duug6y4ZIMIzANP3ruQv+s8znDz9NDjsr9
2DhRaQtgFCnjw/FEVikKewEYGmZcJF3WWMbi8izqJtz703ZuMS8bjclNUxM+VI8k
TYSiPfdqAsZTsNaFs+T6we1wCWlQ/30vz4Gfyg0bi6PXlQukW+afJowpmcrTOwCg
+w5QCNiapCcAKCprg8zlSslSMFYqnh+m9V70pxCjbr3JfayIyhML8za08pFggKf5
it9sc5hAacMNSY6bxMYHdgSj6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu5a84Y
T0oHCVK7WSyoMQnn9RMpMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC
QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr
STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYyU/dm7NZ00g1vhuP55Pzznwkj/+Vc8A2JpySMtA5luYfRhY0woEa
wfg6N//+bqeBAvQpTRF3OU0zBLysyOzUtU69gm26zAaJXNH+9w15RrmLxqEee1Cz
752gMrnwOiDqB8ZLHAQIKfpvUMdSzpMZvVQihU3+P3mNuluDlCIONopWQonyoKX+
oR9wSoPR6ynTITJDhFaVxfRFNaafhGVjQ76YYEtWfa0qXUxn4GNTedbObEThOOWz
J9n/56fISHpdC/HoE7WyzFaWX4wJCMrE7eEWn8JrBxfvPwj1MeUlFiZGcVjY0wFM
6JY0dEKei9YYHmA0LYCjwirK58XxOU+D
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:02 2025 by rpki-client