Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File:                     pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier:          ZY3K/0KemcqIkS/FET+7XzKtwZebvg/rYrs0qznA6SQ=
Subject key identifier:   E6:EF:36:EA:90:C2:D8:BC:20:B7:49:E6:08:62:8C:1B:DE:75:14:9B
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       119B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number:          1187
Signing time:             Sat 18 Oct 2025 17:45:35 +0000
Manifest this update:     Sat 18 Oct 2025 17:45:34 +0000
Manifest next update:     Sat 25 Oct 2025 17:45:34 +0000
Files and hashes:         1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: etSQeMFseS+zioZERToBnFIIlwgBl7SFbPg+r+t+VN8=)
                          2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=)
                          3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4507 (0x119b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: Oct 18 17:45:34 2025 GMT
            Not After : Oct 25 17:45:34 2025 GMT
        Subject: CN=68f3d23f-87b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:77:0f:95:9d:30:5d:d2:87:77:03:ae:fd:
                    2c:4b:25:e9:ab:2d:0d:6d:61:89:ac:60:f0:74:4d:
                    2a:06:50:ba:e1:27:5a:f6:53:fe:62:f5:e4:8a:2d:
                    5f:fc:26:44:e7:0a:af:59:42:76:41:10:e6:1b:dd:
                    55:16:cc:02:6d:b1:9a:fa:ca:60:b6:75:e9:bd:b0:
                    f6:2f:f4:6c:c8:88:d7:67:07:fb:fe:80:38:e9:fe:
                    ab:12:2e:3e:d2:d0:15:78:95:cc:ed:95:ba:d3:b6:
                    81:24:2c:8d:4a:f1:20:9a:64:92:0a:82:a9:74:46:
                    af:2c:2b:7f:06:f3:e1:37:fb:61:36:89:28:3d:33:
                    aa:e4:1f:19:09:49:d5:22:ca:29:bc:e0:28:ce:d9:
                    58:ed:72:fa:47:71:85:51:d3:77:a7:38:f4:fe:1d:
                    cd:d3:f1:dc:4c:59:91:53:07:b4:a6:eb:2d:97:10:
                    52:9c:08:76:34:00:08:e4:4c:4e:51:4c:d6:59:0a:
                    04:ac:0b:4d:e2:3c:50:51:6f:76:2b:a3:df:62:b0:
                    58:1c:d3:c1:53:09:00:54:1e:5a:f6:27:1f:ea:30:
                    04:6b:f2:b4:52:35:82:ee:11:d0:a1:a4:fd:8a:df:
                    71:0f:e1:38:4b:85:d1:03:19:ae:f0:19:a2:fc:93:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:36:EA:90:C2:D8:BC:20:B7:49:E6:08:62:8C:1B:DE:75:14:9B
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:c0:62:a2:db:82:93:3f:ea:75:ca:b9:74:b3:be:90:95:
         e2:15:ea:9f:d0:21:08:d7:fe:c8:5f:ff:55:59:4d:5f:fa:09:
         87:c8:65:33:b9:7d:64:d6:4e:aa:14:a6:6a:3b:a8:de:60:f6:
         61:04:10:eb:b7:fa:7f:9a:ad:67:b9:2d:9e:61:82:4b:e1:5f:
         55:68:97:2a:95:ab:28:66:60:b7:bf:1f:88:b8:e2:af:f4:5e:
         e1:d5:06:f9:22:97:c1:97:47:b3:bd:6a:7e:4d:59:37:66:63:
         28:59:8f:48:f1:00:cb:e1:c4:37:64:7e:50:b7:7b:18:e2:b1:
         65:e9:aa:de:17:cb:ed:51:dc:40:79:25:e2:9b:4a:b0:8c:3e:
         c8:ef:bb:b2:98:a9:51:2a:d1:4d:52:d4:81:b2:83:6c:86:89:
         09:37:54:72:7b:4b:51:f5:69:3b:55:ab:98:91:3e:dc:13:cf:
         e1:95:c3:9d:e7:6e:48:43:a4:b5:63:28:09:1b:a9:47:af:e9:
         29:e9:23:c4:fa:0e:b6:c7:ca:d3:41:5d:97:26:1b:5c:6b:49:
         da:d1:34:8d:45:7d:12:6c:e9:c7:ed:a2:69:7f:99:f1:cf:6e:
         ba:fb:91:9a:62:39:d1:1e:b4:e9:88:56:69:3f:13:f6:d3:a1:
         eb:0d:86:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE
MjdDMkIwMkMwHhcNMjUxMDE4MTc0NTM0WhcNMjUxMDI1MTc0NTM0WjAYMRYwFAYD
VQQDEw02OGYzZDIzZi04N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA32p3D5WdMF3Sh3cDrv0sSyXpqy0NbWGJrGDwdE0qBlC64Sda9lP+YvXkii1f
/CZE5wqvWUJ2QRDmG91VFswCbbGa+spgtnXpvbD2L/RsyIjXZwf7/oA46f6rEi4+
0tAVeJXM7ZW607aBJCyNSvEgmmSSCoKpdEavLCt/BvPhN/thNokoPTOq5B8ZCUnV
IsopvOAoztlY7XL6R3GFUdN3pzj0/h3N0/HcTFmRUwe0pustlxBSnAh2NAAI5ExO
UUzWWQoErAtN4jxQUW92K6PfYrBYHNPBUwkAVB5a9icf6jAEa/K0UjWC7hHQoaT9
it9xD+E4S4XRAxmu8Bmi/JO44QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObvNuqQ
wti8ILdJ5ghijBvedRSbMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB
MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp
NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAg6cBiotuCkz/qdcq5dLO+kJXiFeqf0CEI1/7IX/9VWU1f+gmHyGUz
uX1k1k6qFKZqO6jeYPZhBBDrt/p/mq1nuS2eYYJL4V9VaJcqlasoZmC3vx+IuOKv
9F7h1Qb5IpfBl0ezvWp+TVk3ZmMoWY9I8QDL4cQ3ZH5Qt3sY4rFl6areF8vtUdxA
eSXim0qwjD7I77uymKlRKtFNUtSBsoNshokJN1Rye0tR9Wk7VauYkT7cE8/hlcOd
525IQ6S1YygJG6lHr+kp6SPE+g62x8rTQV2XJhtca0na0TSNRX0SbOnH7aJpf5nx
z266+5GaYjnRHrTpiFZpPxP206HrDYa/
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:33 2025 by rpki-client