Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
File:                     jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json)
Hash identifier:          drEoZO7eFLtCoMu6GZ70D46CGUECq5RcXrwA4vk3hvo=
Subject key identifier:   F8:F9:2F:88:C0:23:3E:ED:71:C5:28:50:A6:1F:AD:3C:F1:9E:B3:34
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Certificate issuer:       /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
Manifest number:          0172
Signing time:             Sun 19 Oct 2025 06:29:26 +0000
Manifest this update:     Sun 19 Oct 2025 06:29:25 +0000
Manifest next update:     Sun 26 Oct 2025 06:29:25 +0000
Files and hashes:         1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: 9WN5tPElVR/BzlbJ42c5wHOg1A4msdaDRE9XZbVG5e4=)
                          2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: hIfGEZpVGRuqTYaqcdzSTwoH6LvOfzrGbr0BYVenTJE=)
                          3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: xpU4YvMsifPhb0IGkIRTwpNd6P9gbkGB+l0mAvn3/+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
                          rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
        Validity
            Not Before: Oct 19 06:29:25 2025 GMT
            Not After : Oct 26 06:29:25 2025 GMT
        Subject: CN=68f48545-aa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:b5:5f:ee:6e:de:8f:21:f6:e3:a4:3c:51:
                    69:c7:69:c0:24:4d:86:cb:c8:f5:ae:c6:07:fe:45:
                    ad:28:6e:7f:86:65:13:31:ae:1d:c9:2c:5b:b3:5b:
                    78:94:68:59:86:73:ab:a5:8a:3f:8e:5c:05:13:b6:
                    79:7e:8a:d6:57:fe:e2:a1:a8:1b:32:9c:3b:76:8c:
                    bc:8f:05:e3:90:65:ea:26:a6:bc:72:a0:3a:86:e4:
                    7a:f2:7f:30:d0:fa:fe:e5:e4:d6:d8:33:e3:68:aa:
                    5c:11:69:c7:c3:64:3d:dc:c0:02:76:df:5c:f2:63:
                    02:c2:e3:d6:41:ff:4a:cd:fc:4a:6c:21:f6:a6:98:
                    60:1a:7a:d6:0e:38:c4:37:98:6b:20:a5:e2:9f:94:
                    37:03:05:f7:52:a1:b4:34:42:ec:dc:41:c1:51:f3:
                    df:20:66:f1:52:55:a4:e7:47:9a:37:e1:11:16:b1:
                    49:80:f1:ec:d7:55:fc:65:11:3a:0d:84:41:58:38:
                    45:32:59:8a:0f:c3:a2:d1:39:08:55:0f:2b:6e:29:
                    76:7c:6f:bf:78:86:0d:d0:19:b0:05:a7:31:a1:74:
                    80:08:b2:20:29:64:0a:ef:a0:36:7d:d9:02:21:c6:
                    77:51:74:b2:fb:6a:79:f1:3b:3c:0d:1a:4b:ed:44:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F9:2F:88:C0:23:3E:ED:71:C5:28:50:A6:1F:AD:3C:F1:9E:B3:34
            X509v3 Authority Key Identifier:
                keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:db:70:ba:b1:b2:bc:d8:8e:76:db:9b:a8:cc:54:16:05:77:
         a3:14:08:69:3e:47:ee:05:a6:23:2e:0f:25:3e:63:37:57:6d:
         37:1b:b1:9c:c3:39:53:e8:9d:71:68:c4:cf:c4:0b:60:3c:e7:
         4e:76:77:61:c1:43:a5:07:67:50:99:e7:19:4b:3f:e7:a0:f4:
         bf:88:a5:0f:86:82:45:ec:77:c9:c8:78:44:84:4c:2c:2e:85:
         d6:34:db:7c:a8:61:70:88:b2:fc:4c:3a:dd:e2:0a:b4:75:4d:
         e9:04:a1:02:03:a1:e6:02:9d:cb:7e:f3:54:c3:f1:82:b1:b7:
         66:27:13:56:63:f1:46:57:93:09:7b:cc:5b:73:0f:dc:a0:2e:
         f6:df:50:d0:a4:d0:3c:a1:6d:72:57:5a:0a:74:be:46:7e:d1:
         8a:0f:18:ee:79:2a:7a:cb:04:47:70:fd:41:88:85:0c:92:4e:
         5d:02:33:2c:8a:31:81:46:40:8f:1e:cf:ef:d8:97:ab:89:52:
         8c:b6:42:d6:72:ca:e7:8e:b6:8e:56:e6:1f:de:a0:82:2f:bf:
         1d:af:a7:7f:18:b4:80:fe:8a:cb:bd:2d:a1:19:61:b8:f6:f1:
         96:bf:15:21:78:15:a1:f9:f4:5b:d9:88:a5:89:be:1f:55:a6:
         80:76:3c:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyQTUxMTAvBgNVBAUTKDhDRENFNTc4QTIzOUU1OENFN0ZFNzY4M0JCNDc2OUY5
REM1NTIyQkEwHhcNMjUxMDE5MDYyOTI1WhcNMjUxMDI2MDYyOTI1WjAYMRYwFAYD
VQQDEw02OGY0ODU0NS1hYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdi1X+5u3o8h9uOkPFFpx2nAJE2Gy8j1rsYH/kWtKG5/hmUTMa4dySxbs1t4
lGhZhnOrpYo/jlwFE7Z5forWV/7ioagbMpw7doy8jwXjkGXqJqa8cqA6huR68n8w
0Pr+5eTW2DPjaKpcEWnHw2Q93MACdt9c8mMCwuPWQf9KzfxKbCH2pphgGnrWDjjE
N5hrIKXin5Q3AwX3UqG0NELs3EHBUfPfIGbxUlWk50eaN+ERFrFJgPHs11X8ZRE6
DYRBWDhFMlmKD8Oi0TkIVQ8rbil2fG+/eIYN0BmwBacxoXSACLIgKWQK76A2fdkC
IcZ3UXSy+2p58Ts8DRpL7URJmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPj5L4jA
Iz7tccUoUKYfrTzxnrM0MB8GA1UdIwQYMBaAFIzc5XiiOeWM5/52g7tHafncVSK6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBNS9BMUMwNEQwQTc2
Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZem5fbmFEdTBkcC1keFZJ
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vklyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTJBNS9BMUMwNEQwQTc2Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZ
em5fbmFEdTBkcC1keFZJcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ23C6sbK82I5225uozFQWBXejFAhpPkfuBaYjLg8lPmM3V203G7Gc
wzlT6J1xaMTPxAtgPOdOdndhwUOlB2dQmecZSz/noPS/iKUPhoJF7HfJyHhEhEws
LoXWNNt8qGFwiLL8TDrd4gq0dU3pBKECA6HmAp3LfvNUw/GCsbdmJxNWY/FGV5MJ
e8xbcw/coC7231DQpNA8oW1yV1oKdL5GftGKDxjueSp6ywRHcP1BiIUMkk5dAjMs
ijGBRkCPHs/v2JeriVKMtkLWcsrnjraOVuYf3qCCL78dr6d/GLSA/orLvS2hGWG4
9vGWvxUheBWh+fRb2Yilib4fVaaAdjx7
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:38 2025 by rpki-client