Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
File:                     mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json)
Hash identifier:          8FCKMdfyyMbxDDOYbj6ETACs9zpB6NrJ5m9jtqgu4T4=
Subject key identifier:   23:5E:5A:EE:8A:8B:EB:B0:90:66:39:8D:AD:64:23:E7:67:E4:49:50
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Certificate issuer:       /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial:       041B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
Manifest number:          0415
Signing time:             Sun 19 Oct 2025 02:18:39 +0000
Manifest this update:     Sun 19 Oct 2025 02:18:39 +0000
Manifest next update:     Sun 26 Oct 2025 02:18:39 +0000
Files and hashes:         1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: r4mvXMiw/9FMWS6J2Ohr6BZPXJJw3Y5mwMXS0W5Re0Y=)
                          2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
                          rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
        Validity
            Not Before: Oct 19 02:18:39 2025 GMT
            Not After : Oct 26 02:18:39 2025 GMT
        Subject: CN=68f44a7f-fa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:6c:b0:7c:f3:6d:c1:28:30:1c:0b:b9:33:
                    b4:01:7c:77:19:59:a5:85:94:50:47:22:43:4f:39:
                    f0:63:64:2c:5a:da:18:2c:69:f2:9d:6f:82:a0:49:
                    d6:07:3b:97:68:48:85:23:b8:05:6a:ad:94:29:e6:
                    45:00:7b:40:fc:d0:49:2f:d9:a2:a6:20:b6:58:b8:
                    71:a8:ec:c9:c5:81:97:f3:f9:b1:85:14:46:13:6c:
                    02:20:89:4b:8a:36:ac:00:01:27:1b:2d:a6:c8:46:
                    81:fa:e3:f8:f2:1e:3c:48:26:42:e9:08:bc:1b:d0:
                    4c:46:50:d0:e5:32:8a:3c:a2:ea:f9:75:31:4d:c1:
                    79:77:3f:af:cb:1f:a4:54:51:d8:b0:f1:56:4e:c4:
                    7b:83:70:ec:e1:94:03:e2:df:d8:34:d8:fe:97:bc:
                    42:49:de:f4:28:86:bd:91:8b:0c:65:ab:69:66:b3:
                    ad:30:66:28:c9:11:90:f0:15:8e:ca:0a:12:b8:f3:
                    66:9e:14:f0:c9:d7:5a:73:f1:e0:2a:76:73:12:27:
                    e0:40:b6:ca:a5:2c:e4:25:d1:e2:16:da:0c:62:09:
                    b8:6b:f5:f2:d0:37:cd:a4:f9:ff:b1:8e:1f:40:24:
                    ef:08:4e:a5:c3:e9:4d:ec:19:be:ac:33:c5:51:22:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:5A:EE:8A:8B:EB:B0:90:66:39:8D:AD:64:23:E7:67:E4:49:50
            X509v3 Authority Key Identifier:
                keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:03:56:dd:a3:8a:63:0f:01:f1:63:80:5b:e4:36:47:2d:e6:
         6a:5e:4b:7f:c2:e7:ed:a5:d6:25:c2:df:9c:9d:64:78:74:f1:
         a7:6a:3f:e3:e6:32:f6:2e:c8:a5:c7:a6:f2:6e:a2:0b:dc:ec:
         11:6a:b5:aa:01:5e:9f:02:83:66:7f:3f:dc:1c:35:bb:de:04:
         ec:4b:95:fa:48:9a:4a:7e:b0:bd:ca:c9:87:2e:77:f5:a4:1c:
         f3:5c:aa:a8:b7:09:3c:fc:f3:07:c4:29:d6:81:fd:00:4b:a5:
         a1:0e:30:29:6c:0a:63:cf:3c:fa:71:9d:d4:67:00:25:ea:32:
         c9:20:5b:a5:40:28:29:d2:b2:94:85:2b:59:3b:66:1a:47:e5:
         67:5f:f6:e2:cc:9c:50:2b:ee:33:0a:c3:60:ce:6b:bb:6e:ca:
         9b:3a:9a:eb:4c:03:c5:44:12:7f:df:17:f6:6a:0a:e9:9d:ae:
         f1:97:c0:4c:56:2f:ea:3f:ea:37:27:0a:68:bc:09:fe:bd:1c:
         65:69:17:ee:81:91:d1:19:d3:8e:70:0c:58:fc:d9:94:c5:a2:
         13:e1:5f:3a:73:cb:a1:f8:35:e3:62:51:bb:ef:3d:70:cf:ba:
         12:48:05:d2:6c:5a:f4:97:f9:ea:3a:54:74:3f:11:63:1b:89:
         26:b9:3a:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1
NkU3NUM1NDMwHhcNMjUxMDE5MDIxODM5WhcNMjUxMDI2MDIxODM5WjAYMRYwFAYD
VQQDEw02OGY0NGE3Zi1mYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2UpssHzzbcEoMBwLuTO0AXx3GVmlhZRQRyJDTznwY2QsWtoYLGnynW+CoEnW
BzuXaEiFI7gFaq2UKeZFAHtA/NBJL9mipiC2WLhxqOzJxYGX8/mxhRRGE2wCIIlL
ijasAAEnGy2myEaB+uP48h48SCZC6Qi8G9BMRlDQ5TKKPKLq+XUxTcF5dz+vyx+k
VFHYsPFWTsR7g3Ds4ZQD4t/YNNj+l7xCSd70KIa9kYsMZatpZrOtMGYoyRGQ8BWO
ygoSuPNmnhTwyddac/HgKnZzEifgQLbKpSzkJdHiFtoMYgm4a/Xy0DfNpPn/sY4f
QCTvCE6lw+lN7Bm+rDPFUSKfVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNeWu6K
i+uwkGY5ja1kI+dn5ElQMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3
REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx
V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABA1bdo4pjDwHxY4Bb5DZHLeZqXkt/wuftpdYlwt+cnWR4dPGnaj/j
5jL2Lsilx6bybqIL3OwRarWqAV6fAoNmfz/cHDW73gTsS5X6SJpKfrC9ysmHLnf1
pBzzXKqotwk8/PMHxCnWgf0AS6WhDjApbApjzzz6cZ3UZwAl6jLJIFulQCgp0rKU
hStZO2YaR+VnX/bizJxQK+4zCsNgzmu7bsqbOprrTAPFRBJ/3xf2agrpna7xl8BM
Vi/qP+o3JwpovAn+vRxlaRfugZHRGdOOcAxY/NmUxaIT4V86c8uh+DXjYlG77z1w
z7oSSAXSbFr0l/nqOlR0PxFjG4kmuTph
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:33:57 2025 by rpki-client