Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File:                     9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier:          F0fZ2N0CwVk9i284VIymoPOiPbVYpiQ8ebfA3/Iq7is=
Subject key identifier:   19:38:35:5E:64:57:09:C1:73:DC:3C:7E:C1:CB:5C:DE:C1:56:3C:28
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0DD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number:          0DC0
Signing time:             Sat 18 Oct 2025 18:33:41 +0000
Manifest this update:     Sat 18 Oct 2025 18:33:40 +0000
Manifest next update:     Sat 25 Oct 2025 18:33:40 +0000
Files and hashes:         1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: 01u55gUxhNkRATI+NXbQEd4CvMMG19wH22MF3PPYGA0=)
                          2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=)
                          3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=)
                          4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=)
                          5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3543 (0xdd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Oct 18 18:33:40 2025 GMT
            Not After : Oct 25 18:33:40 2025 GMT
        Subject: CN=68f3dd85-d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:89:99:f2:8c:9e:e3:d9:9f:c7:9f:08:6c:
                    6d:2e:97:6b:97:4e:8f:c3:ed:3e:f2:5c:24:4c:d8:
                    34:b8:5c:ae:1c:fd:05:32:e3:6b:0e:2a:26:20:b2:
                    65:6b:89:27:c3:44:ec:74:70:f9:73:98:e3:bc:7f:
                    80:8d:9a:5d:4e:3e:e0:73:8b:66:d3:48:b9:6d:e8:
                    5b:24:62:8a:bc:1f:85:23:c9:42:f1:42:a8:66:1d:
                    0a:cf:94:13:ff:2a:95:e1:d3:f3:ea:8f:04:e4:df:
                    f6:f3:bd:f5:be:b9:b5:29:21:62:ea:95:e5:73:de:
                    fb:e5:97:f8:f7:ab:2c:77:c8:0d:43:5b:ca:9c:7d:
                    05:f8:a5:00:95:c2:6a:ea:de:93:33:28:f0:f4:c7:
                    1e:51:2d:05:57:9d:11:b1:da:29:46:76:2e:ff:c6:
                    ff:2a:98:31:72:35:2d:21:be:d4:2e:46:a9:93:05:
                    07:19:46:c1:c2:9b:41:e1:ab:ad:4a:68:7c:4f:5f:
                    bf:1b:18:49:14:59:6f:49:3a:a8:2e:4e:86:2b:43:
                    9c:89:f2:6b:d3:34:aa:48:56:43:51:7a:55:16:66:
                    af:e5:fc:e2:10:79:01:b2:7a:62:6e:54:56:28:5b:
                    ed:d7:65:61:6f:e4:c5:b1:90:b4:88:a5:05:a7:b6:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:38:35:5E:64:57:09:C1:73:DC:3C:7E:C1:CB:5C:DE:C1:56:3C:28
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:81:55:07:f7:c6:2a:48:21:6c:16:3d:8b:3d:d2:ea:5c:ab:
         fd:fa:aa:1f:69:59:15:bd:53:5d:ba:f2:c6:f6:fa:c5:ed:86:
         b8:df:9f:04:d3:44:d5:96:ee:38:cc:19:23:fd:59:e2:c8:0b:
         67:93:96:ba:c8:5e:f7:15:ae:50:e5:e2:97:25:f5:e8:af:82:
         a0:ad:27:e5:e6:63:8d:7d:66:93:56:7b:40:6b:e8:83:ca:b1:
         3a:1a:a1:02:10:90:a1:3f:57:a9:c2:f3:22:fb:3f:27:2f:77:
         66:30:bf:dd:c8:25:28:31:d7:7a:02:2b:b1:03:1d:62:3a:c9:
         7e:a9:84:41:fa:61:19:de:da:2d:03:92:f0:89:b5:c1:77:39:
         c9:81:4d:e6:30:8e:63:e0:c9:f3:1c:34:36:7a:cb:25:f3:11:
         f3:49:7b:e8:b7:99:54:31:75:74:0c:28:e8:b2:13:0f:6d:da:
         01:6f:44:9d:c0:cd:de:c5:8f:1b:fb:67:db:7f:4d:f8:82:df:
         57:3d:7b:f2:ed:a0:c4:c0:f4:7a:23:0d:e9:32:bb:ed:18:d1:
         07:6c:1e:75:e7:db:9c:60:f7:2b:43:d0:5f:dd:78:c1:46:e8:
         87:b9:ff:ab:13:6f:13:ea:c3:df:fa:5b:6d:cc:68:d7:6c:84:
         cc:b8:fa:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4
OTFFNEY0NEUwHhcNMjUxMDE4MTgzMzQwWhcNMjUxMDI1MTgzMzQwWjAYMRYwFAYD
VQQDEw02OGYzZGQ4NS1kNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscGJmfKMnuPZn8efCGxtLpdrl06Pw+0+8lwkTNg0uFyuHP0FMuNrDiomILJl
a4knw0TsdHD5c5jjvH+AjZpdTj7gc4tm00i5behbJGKKvB+FI8lC8UKoZh0Kz5QT
/yqV4dPz6o8E5N/28731vrm1KSFi6pXlc9775Zf496ssd8gNQ1vKnH0F+KUAlcJq
6t6TMyjw9MceUS0FV50RsdopRnYu/8b/KpgxcjUtIb7ULkapkwUHGUbBwptB4aut
Smh8T1+/GxhJFFlvSTqoLk6GK0OcifJr0zSqSFZDUXpVFmav5fziEHkBsnpiblRW
KFvt12Vhb+TFsZC0iKUFp7bbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk4NV5k
VwnBc9w8fsHLXN7BVjwoMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB
MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP
elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRgVUH98YqSCFsFj2LPdLqXKv9+qofaVkVvVNduvLG9vrF7Ya4358E
00TVlu44zBkj/VniyAtnk5a6yF73Fa5Q5eKXJfXor4KgrSfl5mONfWaTVntAa+iD
yrE6GqECEJChP1epwvMi+z8nL3dmML/dyCUoMdd6AiuxAx1iOsl+qYRB+mEZ3tot
A5LwibXBdznJgU3mMI5j4MnzHDQ2essl8xHzSXvot5lUMXV0DCjoshMPbdoBb0Sd
wM3exY8b+2fbf034gt9XPXvy7aDEwPR6Iw3pMrvtGNEHbB5159ucYPcrQ9Bf3XjB
RuiHuf+rE28T6sPf+lttzGjXbITMuPp9
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:26 2025 by rpki-client