Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
File:                     8f4MMn555a9D4VsOb4zWbAMp0Tg.mft (raw, json)
Hash identifier:          k7xguyn83fbXB9S9RgP2Q+FnyJUsDd6TxdAjRnXkRTc=
Subject key identifier:   79:B8:B7:46:06:EA:5B:C5:C5:FE:19:96:F7:48:21:84:EB:26:68:DC
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       043F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
Manifest number:          0353
Signing time:             Sun 19 Oct 2025 04:00:35 +0000
Manifest this update:     Sun 19 Oct 2025 04:00:34 +0000
Manifest next update:     Sun 26 Oct 2025 04:00:34 +0000
Files and hashes:         1: 8f4MMn555a9D4VsOb4zWbAMp0Tg.crl (hash: s0r769IhPQTC/T+A6AJI3bcH+mDeY9Aiv1k2KY1QNZ8=)
                          2: D0248BD854F611F09C7C2D78C4F9AE02.roa (hash: XyCxytp6EfWBkc8tr35xK+i6/D0+zrsXoF/Vy6F/5II=)
                          3: BAD612C09A5F11F0AE92FC5FC4F9AE02.roa (hash: L+dnh2Q7HzNEt79WFxpyhQgF8sP1p/CKeRCPS6JErUk=)
                          4: 015EFF96888511F08E124148C4F9AE02.roa (hash: DKJceG49wEsRso5ZiPhKRBYZYjVnzezFCDxoA+TT8Is=)
                          5: 1B740C443DF811ED8EA29234C4F9AE02.roa (hash: ciVd17g+4mHQDyiRvx0WHI7bUCfYe7YV/e/BA41wmHI=)
                          6: 0A8D0EC2A8F711F096E2671BC4F9AE02.roa (hash: C3Rvd9GlHQgjR9GOCnfOcqNTjtR68B8Lafxg80GYHEo=)
                          7: 25A5300C885B11F09F3C8013C4F9AE02.roa (hash: fa+oheUBw5OoDXjOnaCYFb8g9fq/6H9Cz772WlMXUpU=)
                          8: FABB4D0C98D811F0A075336BC4F9AE02.roa (hash: SzfGOA99RLGk79kUJsH4vxAk0+VfjZjJUgavp+eaJgw=)
                          9: 029EC746D47711EF9C73DD7FC4F9AE02.roa (hash: tlxWIbh2rbsusGopN6XOYm4IV52NYs2Ee3eJXI9qjJU=)
                          10: BB52EC149A5F11F0AE92FC5FC4F9AE02.roa (hash: mcYp2gqiMZpRKKl6kLfW9qGGhTV+iWYvnxlTtNx662E=)
                          11: F2CEE3CEBE7711EFB34D6959C4F9AE02.roa (hash: USfkbWdjXKp8G1U2I2bLQmvpFmvPdzKbici6OviN3uA=)
                          12: FD06B92C84F911F09429C90BC4F9AE02.roa (hash: TZLXaTJtmLeepHnb7AUXWRpxWpzzAVUXo7QmidWRSg8=)
                          13: 820501DE3D3211F09AB6A617C4F9AE02.roa (hash: 6/m9rDXoa8IIkQkJoQ23+1wKjd2PKMR0HfmCCcG0qck=)
                          14: 9FFB219A521411F09F307183C4F9AE02.roa (hash: Y9NQ5DSz+NQ3uUsSk30H3V8ZTZghU7aXRhMYLNAnRaU=)
                          15: C68EA896D18011EFA738B84AC4F9AE02.roa (hash: HyIgElgMkh+GGclue1DDS6Azg4ghtyeJGsAuLXmPhPk=)
                          16: A5D0EE5C78FB11F097FE627EC4F9AE02.roa (hash: Q8skNPYqNqx+EWwRTQN/j0oiAtgdpzKJp9B5AaDGOFE=)
                          17: 74F68796303711EFB68DF613C4F9AE02.roa (hash: 4FtVCzs4y7rkKHb4RpZoncL/TRJguMerSxF5R0o0uic=)
                          18: 90B05B70D31511EF9F94561DC4F9AE02.roa (hash: uUqUSJ5tSHFeZ1Dp9DMLRyvS2e57Pp0yfr6YxCv7BVc=)
                          19: 53E3F02CF88511EFAF4C196EC4F9AE02.roa (hash: uFeLU3AyAiuOIXSs2vQ82JnAKrVO3EY/o6VtzaM2QxU=)
                          20: 4F10ED76D3B311EFA7B56234C4F9AE02.roa (hash: wzm4G98xfiUmmcxO5R1gl7fwZeyQTWJs393ymNovQRU=)
                          21: D8E46162CC3911EF8444417FC4F9AE02.roa (hash: CyK1dtQPb/J7o5XL+l6Dsuc4SOAnenVvzludv2N29/s=)
                          22: 17E12AD6547E11F081A32B30C4F9AE02.roa (hash: w5LSiYxqBwCo/PnYFig/W1qXmphcHiTyQo+B692uGVs=)
                          23: 3CF11BEA163211F0B2BBF073C4F9AE02.roa (hash: mYXmm3qOBiqX+ppKAzq84i4ihYtSlzTQ28LcIhA37Gw=)
                          24: BA7491AAE0FE11EF9196F463C4F9AE02.roa (hash: MtKH307IpLwK6LQ3Lt5qvBYjKfJsNvcqGLNndHbfa1I=)
                          25: 014D4C442FBE11F0A6052D6EC4F9AE02.roa (hash: Doo/4V0MrkAe4JTCXfzTFFoppMFVFA4qzFF62gZsYkk=)
                          26: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (hash: hD93ArhNMahaW/FwweGcmfiq70eiSJQUKTdWtO/JSKE=)
                          27: 4B810700778B11F0B1F4D629C4F9AE02.roa (hash: icGxWgg7YlhIt2trvU1YreRdyIjovQrSD+m/JPSUmfg=)
                          28: ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (hash: 15HCMu/acw3Q2BNI+sa9WfN9q9j18Hwjhc5KbcVBarI=)
                          29: C58950F4CC3A11EF80AC530BC4F9AE02.roa (hash: QCI+DE/2CpC0INaGqwMHvbC1tZI7Ne94BNQU2P/2cz4=)
                          30: 24E07816913E11F0AE8FEC66C4F9AE02.roa (hash: V+1kyUYokcH3NnLiL3qAStvXYt+drfTrk4l/L+DZ3PE=)
                          31: A88A0ED8FC7511EF92B63B46C4F9AE02.roa (hash: kWuj2Hd7vH2BtfgBIjGo14Hgm/ZOXAle0LM6flC2WG8=)
                          32: 98EC1AEE87C011F0B1414535C4F9AE02.roa (hash: 9dTkWMA1e/dap6eNLt/MmAWyh9zBX8foi8JErHoIE+E=)
                          33: 1AEC708A26EA11F0A1989F5AC4F9AE02.roa (hash: Ir83/5SNhqIIjwlnY3jLTz6ihkn5NVhoZzG9A14uuK4=)
                          34: 9DB30BB83D5211F09B7D046AC4F9AE02.roa (hash: POdAdeW6Mhez6u6FotX+t/6y8MhVWhrh9+mBHLv8MHg=)
                          35: 6520648CCC3A11EF97B13E83C4F9AE02.roa (hash: 4fJkpesBJZ/mt0rUrFKEGxiWuduz/BPkbdnPcGlT1go=)
                          36: 56114F06A4BB11F0B6EACC72C4F9AE02.roa (hash: iz2PMJCGfbh5+Jtd6O9796SI0m3ImTsq+vAvFcex50Y=)
                          37: C0CFC696198E11F0A5D20B52C4F9AE02.roa (hash: diaDciWl2BxM/gt/r5RhkdrgLBpm33CwNm8kmp2Su6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Oct 19 04:00:34 2025 GMT
            Not After : Oct 26 04:00:34 2025 GMT
        Subject: CN=68f46262-3b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:52:9c:8d:ec:4d:c4:21:e1:e7:a7:55:b4:
                    24:9a:97:de:b7:a9:33:3a:f6:94:5b:1b:a3:a9:6d:
                    43:00:ef:10:a4:09:af:19:0b:04:6b:4a:ab:79:38:
                    24:2e:74:5f:f1:b6:33:a2:a2:cb:05:77:7e:a4:9f:
                    1d:b9:c8:e1:5a:f4:62:50:b2:95:c9:de:48:83:c1:
                    bf:53:f4:12:7b:4c:f9:95:f3:34:96:56:e1:d4:fb:
                    0e:0a:28:77:ed:81:da:de:74:36:12:45:46:f7:0f:
                    3d:ec:31:0a:46:9f:39:10:be:8c:b1:b1:ae:e9:e0:
                    a7:5d:a5:26:2f:0e:64:dc:63:07:f3:77:16:72:05:
                    b4:c8:b8:19:a9:4d:e4:9c:57:14:c2:7c:24:b9:1d:
                    fb:6c:34:c1:1e:18:65:99:93:c5:13:9c:73:56:ec:
                    0c:bb:7f:43:66:a2:39:93:0a:a0:94:31:35:76:ac:
                    be:dd:40:dd:db:75:61:db:aa:39:3a:ff:ad:ed:71:
                    48:58:03:fa:3e:92:bf:6f:e0:12:98:30:1c:dc:4c:
                    a8:aa:43:4c:e2:6f:aa:c8:8d:cc:7c:1f:c4:b8:58:
                    bb:02:f3:71:72:1e:1e:aa:ca:b9:39:42:f3:65:9e:
                    db:7e:f1:c1:8d:b3:d6:33:7f:2f:78:db:4a:20:e3:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:B7:46:06:EA:5B:C5:C5:FE:19:96:F7:48:21:84:EB:26:68:DC
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:48:ab:fb:95:03:15:f2:ff:0b:f8:1c:c2:14:a8:09:d0:
         99:a4:b6:f5:39:7f:96:3a:44:02:43:eb:a8:7a:6c:0f:49:bc:
         4f:92:78:04:1c:f1:ee:fa:02:b3:aa:71:c9:40:6d:a3:5b:74:
         7e:e4:a9:8f:f3:aa:16:10:2f:a7:4e:49:f5:53:ad:57:2a:2c:
         07:87:75:c2:3e:27:b2:08:a5:a3:cc:5a:5a:db:ec:a7:54:98:
         f2:23:c4:ae:99:f9:e2:72:48:68:a4:81:e9:16:06:23:5f:5a:
         58:df:18:11:57:e2:dc:db:60:c8:63:c2:60:ab:27:86:f7:33:
         bb:6a:7b:ae:11:f0:38:04:3a:a8:80:33:ba:ea:50:67:27:35:
         ae:9b:08:50:4d:1f:68:69:5e:5a:af:21:6b:0e:46:92:61:b6:
         15:de:9b:8f:a8:d1:d3:5b:e6:36:70:c7:da:82:d2:61:34:8d:
         1c:cc:7a:88:2c:b1:36:e1:6a:6d:d0:b7:75:3d:d0:e4:06:98:
         3f:a2:43:c9:4e:c9:bb:f7:eb:9c:05:97:69:c0:76:77:23:83:
         e9:29:5c:f1:68:22:59:7c:df:0b:1e:30:b3:40:60:1c:74:02:
         c4:42:23:c1:1e:83:89:31:4d:42:51:2a:22:40:7b:dd:0f:b8:
         5f:98:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:27 2025 by rpki-client