Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          d9skaepe+jjUcEVA92LHMPJpkB2zlL3rtDOWlnudhcs=
Subject key identifier:   4C:18:64:40:20:7C:02:9F:23:36:D0:73:A0:30:DF:40:94:B4:F6:EE
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          0109
Signing time:             Sun 19 Oct 2025 07:53:42 +0000
Manifest this update:     Sun 19 Oct 2025 07:53:41 +0000
Manifest next update:     Sun 26 Oct 2025 07:53:41 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: f4pL/L22Nso2hiZqKw7rYacOWdC4TTFtkk4kymX9B+Q=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Oct 19 07:53:41 2025 GMT
            Not After : Oct 26 07:53:41 2025 GMT
        Subject: CN=68f49906-1313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9d:94:17:be:5e:86:95:92:17:df:97:f7:64:
                    ad:3b:49:d1:86:84:83:0a:d7:8c:64:25:87:7c:8e:
                    fd:eb:8d:43:48:64:46:48:ed:c7:26:39:65:6c:69:
                    53:5a:25:4e:5f:a0:de:7e:73:d6:dc:b2:b1:94:53:
                    79:33:53:0d:dc:37:d9:77:02:8a:6c:2a:18:29:3c:
                    b9:9d:b5:4a:c7:00:79:a3:cc:33:64:7a:b9:22:6b:
                    03:57:d8:f1:54:78:a7:85:9c:a8:ba:53:77:a6:98:
                    06:7e:81:f3:4c:90:93:82:91:93:81:5b:8f:5d:0d:
                    b0:ce:05:e7:f8:4a:64:05:9e:65:c1:0e:85:3f:d0:
                    53:a2:d8:5c:52:c7:1f:71:29:d2:53:f4:e6:16:33:
                    61:d3:79:0b:20:76:6f:03:f0:ad:5c:3c:ae:06:a6:
                    7d:75:51:fe:6e:da:4d:fe:0b:0c:d2:69:c5:4e:0e:
                    f0:d8:b4:46:71:a2:b5:93:49:f2:93:9b:a2:76:11:
                    5a:66:00:61:0e:98:1c:11:c1:eb:bc:cb:0b:7d:5a:
                    b2:0b:58:83:e0:6a:ee:74:6e:c5:28:f0:be:8a:a3:
                    28:c1:49:73:27:74:c9:e1:d7:b3:91:97:ab:08:9c:
                    99:e9:f0:ed:6e:08:dc:3f:e4:02:43:3e:e6:96:20:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:64:40:20:7C:02:9F:23:36:D0:73:A0:30:DF:40:94:B4:F6:EE
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d3:70:45:42:ea:3b:94:ed:77:10:ec:c1:80:18:aa:21:0d:
         7f:6f:5f:5f:e0:ad:4c:03:0e:59:cd:50:25:a0:c7:02:c0:bd:
         b3:3b:15:20:2a:39:a0:f6:b8:66:85:9a:07:5f:fa:33:13:7b:
         72:e2:ca:92:ba:1a:42:92:19:79:dc:9a:ac:11:4e:1f:63:59:
         dc:4f:fa:75:9c:d8:42:5b:c6:45:77:b8:bb:1a:98:8d:35:e4:
         da:99:5c:44:8a:91:a6:0d:9f:ee:6f:6e:a1:18:e3:39:12:0b:
         6d:43:1f:b9:7a:fb:99:b6:8a:3e:ba:50:97:5a:2e:4c:12:90:
         dc:73:30:af:3f:bb:00:d8:9f:80:84:93:5c:b1:27:5f:27:76:
         4e:f5:40:91:5c:ef:44:5f:0d:b5:36:af:18:65:b2:16:11:5d:
         00:4a:2b:3b:b2:02:e6:36:77:22:ab:2d:3d:c2:f8:04:46:dd:
         c6:00:cc:83:96:88:c0:44:80:98:35:19:09:ff:26:f3:9d:99:
         f6:a8:81:2c:9c:d7:99:88:c0:c5:c8:ce:4e:1a:06:d2:62:78:
         0f:dd:40:6f:33:03:bc:eb:b7:64:c6:cb:7d:2d:73:33:33:4f:
         c7:ef:f5:5d:37:ae:4e:1d:ad:45:d4:9c:ac:3f:ef:6a:19:a0:
         e7:7c:21:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0
QTUyNEUyRUUwHhcNMjUxMDE5MDc1MzQxWhcNMjUxMDI2MDc1MzQxWjAYMRYwFAYD
VQQDEw02OGY0OTkwNi0xMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8p2UF75ehpWSF9+X92StO0nRhoSDCteMZCWHfI79641DSGRGSO3HJjllbGlT
WiVOX6DefnPW3LKxlFN5M1MN3DfZdwKKbCoYKTy5nbVKxwB5o8wzZHq5ImsDV9jx
VHinhZyoulN3ppgGfoHzTJCTgpGTgVuPXQ2wzgXn+EpkBZ5lwQ6FP9BTothcUscf
cSnSU/TmFjNh03kLIHZvA/CtXDyuBqZ9dVH+btpN/gsM0mnFTg7w2LRGcaK1k0ny
k5uidhFaZgBhDpgcEcHrvMsLfVqyC1iD4GrudG7FKPC+iqMowUlzJ3TJ4dezkZer
CJyZ6fDtbgjcP+QCQz7mliAFzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwYZEAg
fAKfIzbQc6Aw30CUtPbuMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5
ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhN
MzFTdkZuNG0xV0pLVWs0dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAU03BFQuo7lO13EOzBgBiqIQ1/b19f4K1MAw5ZzVAloMcCwL2zOxUg
Kjmg9rhmhZoHX/ozE3ty4sqSuhpCkhl53JqsEU4fY1ncT/p1nNhCW8ZFd7i7GpiN
NeTamVxEipGmDZ/ub26hGOM5EgttQx+5evuZtoo+ulCXWi5MEpDcczCvP7sA2J+A
hJNcsSdfJ3ZO9UCRXO9EXw21Nq8YZbIWEV0ASis7sgLmNnciqy09wvgERt3GAMyD
lojARICYNRkJ/ybznZn2qIEsnNeZiMDFyM5OGgbSYngP3UBvMwO867dkxst9LXMz
M0/H7/VdN65OHa1F1JysP+9qGaDnfCGH
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:21 2025 by rpki-client