Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          rfxNnEtRrqatEn16TvNtJVt7x5uq88nRVGSbAmRGbv8=
Subject key identifier:   9F:09:54:3B:3F:5C:79:A2:7F:8E:39:DB:AC:D1:A7:82:CA:9B:B9:EF
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          D5
Signing time:             Sun 19 Oct 2025 08:41:30 +0000
Manifest this update:     Sun 19 Oct 2025 08:41:30 +0000
Manifest next update:     Sun 26 Oct 2025 08:41:30 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: YNFmPkGZUHQpPLwW1J2KXRthZsMInrNyz3qX08sxs5I=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: CaDrsHhMr2SW3agEhOrGpPTbVn2zv/JRiQ35B1c4T/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: Oct 19 08:41:30 2025 GMT
            Not After : Oct 26 08:41:30 2025 GMT
        Subject: CN=68f4a43a-4fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:af:4d:36:24:ad:b5:52:8d:8e:6e:60:68:
                    2b:63:d3:f4:98:b0:8c:bd:9c:9b:64:b6:a8:3d:91:
                    58:d0:16:b2:10:d1:df:92:f3:b9:30:ab:e6:b8:be:
                    84:53:b3:ac:94:26:98:e1:a0:8a:63:b6:86:de:76:
                    bb:5d:1f:75:4c:d5:db:65:f1:67:37:fb:4f:8e:c8:
                    32:fc:d1:4f:7d:73:1d:2e:49:fe:f8:70:a3:52:ee:
                    d4:b3:a2:a2:c3:df:da:60:e0:fc:98:21:98:ab:88:
                    88:49:86:6c:f9:74:52:34:ef:2b:01:35:69:90:c8:
                    53:c0:32:69:8e:81:96:a8:73:c5:24:f4:fe:fd:15:
                    46:52:6f:2f:f1:bd:6c:63:25:fd:1c:d7:7e:65:b1:
                    9f:67:d6:b5:6d:18:38:4e:ad:d7:c1:3c:5c:e6:e7:
                    c1:7c:13:35:99:d3:50:30:10:9b:86:d4:14:8b:ff:
                    35:81:50:0d:a8:da:07:dc:8c:09:a9:59:4c:a6:ee:
                    4c:68:7c:a3:a1:48:6d:66:2b:eb:15:ca:99:ff:fe:
                    04:97:48:fa:ea:80:95:e9:5d:f5:f7:26:65:29:f1:
                    a5:86:87:06:c4:49:fb:58:22:65:ca:89:3c:69:70:
                    c7:4b:97:b4:c4:fd:29:fc:d5:54:14:a8:4a:9a:d5:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:09:54:3B:3F:5C:79:A2:7F:8E:39:DB:AC:D1:A7:82:CA:9B:B9:EF
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:ad:c4:ca:ac:25:63:3d:a8:98:15:f3:bd:02:96:ef:4a:
         e8:af:11:21:90:03:61:c4:14:de:1e:5a:2a:5e:93:7d:21:07:
         0e:01:7f:1a:a7:17:da:7e:98:1f:87:a8:ad:de:cd:73:f8:16:
         8a:50:9c:e3:f4:89:d0:4e:62:f1:5f:79:ed:8c:52:84:d3:44:
         6b:d2:d5:34:4a:b8:09:89:fd:bd:71:7a:a4:0b:b9:1f:0a:ab:
         56:00:e4:c4:af:ae:47:83:2a:e9:df:08:ba:2d:74:a0:37:b3:
         1a:60:32:1d:c6:76:dd:81:93:8e:5b:48:72:21:ae:b2:87:50:
         d6:a6:3a:68:9e:47:1b:e4:e3:15:62:8e:2f:07:a6:ac:59:75:
         ba:29:27:c4:74:88:5b:3b:24:45:13:65:89:2d:20:8a:b2:28:
         0a:3d:09:2d:40:c3:bc:99:0c:71:91:e3:66:6f:26:6b:a5:37:
         d4:26:b8:f6:d0:e3:7a:a8:88:e0:b4:f0:a4:db:38:b1:1b:18:
         78:a8:e6:4a:7b:6d:e8:95:1e:ea:33:a5:66:6a:23:ea:f4:7a:
         c4:49:fa:34:46:2b:d4:c3:f0:84:e9:95:d2:a4:05:32:b0:81:
         cd:96:73:a8:46:56:df:57:ba:a5:81:e6:00:1f:e9:cc:be:3f:
         30:2e:08:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy
QjFENEQzNjQwHhcNMjUxMDE5MDg0MTMwWhcNMjUxMDI2MDg0MTMwWjAYMRYwFAYD
VQQDEw02OGY0YTQzYS00ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvq2vTTYkrbVSjY5uYGgrY9P0mLCMvZybZLaoPZFY0BayENHfkvO5MKvmuL6E
U7OslCaY4aCKY7aG3na7XR91TNXbZfFnN/tPjsgy/NFPfXMdLkn++HCjUu7Us6Ki
w9/aYOD8mCGYq4iISYZs+XRSNO8rATVpkMhTwDJpjoGWqHPFJPT+/RVGUm8v8b1s
YyX9HNd+ZbGfZ9a1bRg4Tq3XwTxc5ufBfBM1mdNQMBCbhtQUi/81gVANqNoH3IwJ
qVlMpu5MaHyjoUhtZivrFcqZ//4El0j66oCV6V319yZlKfGlhocGxEn7WCJlyok8
aXDHS5e0xP0p/NVUFKhKmtUfIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8JVDs/
XHmif44526zRp4LKm7nvMB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5
MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTY5NS85NkJERjM0QTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1
a1RleE9UMUtqUG9ySFUwMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeI63EyqwlYz2omBXzvQKW70rorxEhkANhxBTeHloqXpN9IQcOAX8a
pxfafpgfh6it3s1z+BaKUJzj9InQTmLxX3ntjFKE00Rr0tU0SrgJif29cXqkC7kf
CqtWAOTEr65Hgyrp3wi6LXSgN7MaYDIdxnbdgZOOW0hyIa6yh1DWpjponkcb5OMV
Yo4vB6asWXW6KSfEdIhbOyRFE2WJLSCKsigKPQktQMO8mQxxkeNmbyZrpTfUJrj2
0ON6qIjgtPCk2zixGxh4qOZKe23olR7qM6VmaiPq9HrESfo0RivUw/CE6ZXSpAUy
sIHNlnOoRlbfV7qlgeYAH+nMvj8wLgib
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:46:04 2025 by rpki-client