Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          MylZ7tDCepDcxApv3sen9DMFGTNW2HepnUcVz7ziNTQ=
Subject key identifier:   C0:F3:CD:2E:42:C8:FC:02:6A:EA:7C:27:CB:B2:21:B7:98:A3:12:AD
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       11C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          200D
Signing time:             Sat 18 Oct 2025 17:43:43 +0000
Manifest this update:     Sat 18 Oct 2025 17:43:43 +0000
Manifest next update:     Sat 25 Oct 2025 17:43:43 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: sIS9jv5sz8LsAoDdvxyn0xVg2OQzkkk8et8YS9YMzeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4546 (0x11c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Oct 18 17:43:43 2025 GMT
            Not After : Oct 25 17:43:43 2025 GMT
        Subject: CN=68f3d1cf-d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:13:c1:29:1d:f7:4c:20:02:6e:39:1b:eb:5c:
                    ed:cc:fb:31:d5:9d:77:c8:e2:c8:6e:9c:76:4c:18:
                    bf:b3:0d:09:e9:86:52:18:62:fa:c6:60:1f:b4:85:
                    e1:f9:3e:fc:59:80:ea:6b:10:fc:51:48:f7:2f:77:
                    23:61:f5:e7:50:e5:ab:79:93:5a:c7:3d:43:2a:d5:
                    6f:13:09:37:16:f4:54:27:6e:82:8d:44:fa:2d:4e:
                    c9:26:41:6a:20:ca:03:1a:86:f6:fe:5e:41:90:39:
                    ba:02:80:be:28:9c:be:d1:c4:e9:d2:29:39:cf:52:
                    0a:52:db:c6:bd:c7:e3:44:d3:75:01:5e:da:bf:ad:
                    ba:4f:e0:34:4e:24:ba:c5:b2:76:1a:bf:f9:47:c1:
                    3f:5d:57:8f:7b:bf:1f:39:2f:4e:99:66:69:ad:ff:
                    90:65:9c:f9:f6:23:de:42:56:76:4c:e7:52:b3:37:
                    d1:f7:95:86:be:86:91:36:5a:70:9a:33:3e:0f:d9:
                    3f:ee:33:98:08:59:9d:73:1e:dd:7a:3d:e7:90:e1:
                    28:75:52:ef:ab:68:db:d8:51:50:63:9a:d2:d4:0a:
                    64:e7:0f:b7:94:d1:ce:64:30:2c:28:81:4f:40:41:
                    e4:02:f3:c4:e7:1a:63:6e:a0:27:28:54:b9:81:c9:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F3:CD:2E:42:C8:FC:02:6A:EA:7C:27:CB:B2:21:B7:98:A3:12:AD
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2a:21:c5:33:e9:f5:73:55:93:2b:f5:60:6a:ae:7a:e1:6d:
         9a:db:23:11:df:3b:8e:23:5d:fa:10:17:b9:68:15:61:9e:1f:
         e7:98:80:be:b2:7d:7e:7c:f7:a8:d3:8e:b6:15:16:c5:fd:90:
         62:f1:3b:ce:0c:2c:48:85:43:16:74:a4:9c:24:ed:72:58:ec:
         f6:16:de:66:4e:e2:4b:fa:2b:33:f5:c2:c5:ed:90:3b:f9:ea:
         45:f6:5b:bc:cb:61:c0:eb:bf:5e:1e:d2:69:dc:55:59:b8:c6:
         16:94:51:7d:0c:bb:eb:d6:9b:d8:63:1f:e9:9d:8c:f0:9b:e2:
         6c:fa:aa:42:47:39:cc:10:74:60:af:ce:a8:97:3d:df:6e:f4:
         70:c6:59:e0:3e:01:20:89:d6:2d:ea:51:d6:a8:8a:ed:d8:31:
         97:ed:1b:99:c2:e1:f1:5d:1d:17:15:82:ff:65:a3:89:34:b6:
         2e:c7:8d:4f:4c:3e:4b:cd:1f:66:71:40:b9:19:8a:89:83:a4:
         2d:c6:4f:d4:34:06:80:5a:f2:13:58:f1:9b:0c:77:63:c7:f5:
         a7:11:60:e2:2d:99:68:96:d1:b4:79:b3:8d:54:1c:eb:05:f3:
         93:fa:66:07:e5:84:0a:cb:39:22:45:be:b9:60:c3:03:ea:ea:
         b3:bc:99:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD
MDk5MEE4NTMwHhcNMjUxMDE4MTc0MzQzWhcNMjUxMDI1MTc0MzQzWjAYMRYwFAYD
VQQDEw02OGYzZDFjZi1kMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8BPBKR33TCACbjkb61ztzPsx1Z13yOLIbpx2TBi/sw0J6YZSGGL6xmAftIXh
+T78WYDqaxD8UUj3L3cjYfXnUOWreZNaxz1DKtVvEwk3FvRUJ26CjUT6LU7JJkFq
IMoDGob2/l5BkDm6AoC+KJy+0cTp0ik5z1IKUtvGvcfjRNN1AV7av626T+A0TiS6
xbJ2Gr/5R8E/XVePe78fOS9OmWZprf+QZZz59iPeQlZ2TOdSszfR95WGvoaRNlpw
mjM+D9k/7jOYCFmdcx7dej3nkOEodVLvq2jb2FFQY5rS1Apk5w+3lNHOZDAsKIFP
QEHkAvPE5xpjbqAnKFS5gcnrOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDzzS5C
yPwCaup8J8uyIbeYoxKtMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF
QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1
Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQKiHFM+n1c1WTK/Vgaq564W2a2yMR3zuOI136EBe5aBVhnh/nmIC+
sn1+fPeo0462FRbF/ZBi8TvODCxIhUMWdKScJO1yWOz2Ft5mTuJL+isz9cLF7ZA7
+epF9lu8y2HA679eHtJp3FVZuMYWlFF9DLvr1pvYYx/pnYzwm+Js+qpCRznMEHRg
r86olz3fbvRwxlngPgEgidYt6lHWqIrt2DGX7RuZwuHxXR0XFYL/ZaOJNLYux41P
TD5LzR9mcUC5GYqJg6Qtxk/UNAaAWvITWPGbDHdjx/WnEWDiLZloltG0ebONVBzr
BfOT+mYH5YQKyzkiRb65YMMD6uqzvJlg
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:19 2025 by rpki-client