Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
File:                     rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json)
Hash identifier:          v3xk+1YSff0+IwOWKlUOow37VOIQyuYQDHk9XZVRy4s=
Subject key identifier:   95:3F:2B:7B:69:80:70:03:89:95:12:D2:25:F1:D5:5B:DE:5E:DE:6C
Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
Certificate issuer:       /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
Manifest number:          02C9
Signing time:             Sun 19 Oct 2025 03:32:41 +0000
Manifest this update:     Sun 19 Oct 2025 03:32:41 +0000
Manifest next update:     Sun 26 Oct 2025 03:32:41 +0000
Files and hashes:         1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: ZRj/dapsgToo5uxbAyr6LGvct+uBgp2Rwbzr2fIp0SE=)
                          2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: mxX4AKL91owHWzEHb/qZfzEc1LLhMztNgoc1pmTwinI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
                          rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
        Validity
            Not Before: Oct 19 03:32:41 2025 GMT
            Not After : Oct 26 03:32:41 2025 GMT
        Subject: CN=68f45bd9-5b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:56:60:7d:8c:7e:6f:c2:2f:7c:18:fd:c5:
                    f4:92:28:f8:43:5e:c7:81:91:e3:c3:7a:cf:d4:7b:
                    e5:b1:9d:62:9b:b6:f0:92:90:ab:d7:f5:8d:65:6e:
                    60:0d:20:a0:f4:60:8c:86:4f:a5:86:a0:5f:d7:f3:
                    ef:e8:c4:7a:5b:36:35:4d:d0:99:79:27:8e:21:71:
                    81:0a:be:28:fc:14:2f:88:14:94:73:e9:87:64:ac:
                    89:83:b4:b5:ae:15:29:f6:4c:4c:c9:33:19:03:f3:
                    47:5e:52:3d:54:34:5c:24:98:59:ba:d0:80:5e:cc:
                    dd:f3:e5:d5:dc:2d:cf:0b:0e:13:14:bd:f8:66:a8:
                    a1:11:92:32:97:a5:51:5b:c2:8c:86:c2:ad:36:73:
                    bd:57:2b:69:0d:53:3c:43:8f:b7:13:c7:31:d8:ae:
                    1b:87:01:90:1b:57:56:c9:bc:54:f2:1f:fa:60:be:
                    97:c6:e5:62:f7:a4:fb:f5:12:39:c7:f2:b7:cd:5f:
                    28:c2:2b:a7:6a:2f:48:11:86:24:ef:58:4d:c6:13:
                    15:42:79:32:f0:62:88:92:88:38:3e:e4:81:32:61:
                    2a:3d:25:7b:79:f8:f0:c4:8d:d4:1b:f3:39:b3:9a:
                    a8:1f:47:46:69:ae:d5:b2:a9:96:60:af:cb:c0:fb:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:2B:7B:69:80:70:03:89:95:12:D2:25:F1:D5:5B:DE:5E:DE:6C
            X509v3 Authority Key Identifier:
                keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:68:59:32:7b:cb:90:f9:3f:cb:42:92:40:f4:6a:b7:7a:
         d8:77:74:fa:39:db:28:ef:df:9e:b5:75:4b:f6:56:37:46:1a:
         41:10:99:0b:9f:4e:26:07:8b:88:ee:e9:51:7a:58:8f:ab:dc:
         35:76:9d:59:23:50:78:ee:25:16:67:3a:ae:86:80:15:54:32:
         d5:80:c1:b7:a7:8f:11:b0:e9:8e:6a:f0:56:3e:35:c5:84:81:
         bd:41:72:13:f7:7d:8c:2e:de:5a:e2:22:f7:95:92:4f:89:69:
         93:36:96:68:78:d7:35:ae:db:8b:1a:e3:5f:01:ce:cd:4f:27:
         b4:ae:67:f8:15:07:c7:32:15:35:5f:5f:1c:6b:69:e9:b8:9f:
         7b:64:7d:8a:94:16:25:2f:ec:78:61:23:05:87:6e:42:ef:77:
         b3:3d:f8:71:a3:05:47:5a:e5:57:10:a8:36:d4:6a:86:2d:f8:
         e6:6f:f3:d4:cc:4f:70:ab:5e:ba:8c:1a:81:d2:0a:94:ad:82:
         d7:34:fb:97:bf:58:5b:27:24:ea:4f:e4:19:1d:51:0d:79:68:
         f1:c2:30:10:be:56:eb:f9:97:08:19:a0:92:55:96:73:0a:3e:
         e4:75:29:7b:07:e9:15:24:30:f1:ac:f4:6c:2b:5a:bf:0c:aa:
         5b:4e:3f:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz
MjQ1MTM1MEIwHhcNMjUxMDE5MDMzMjQxWhcNMjUxMDI2MDMzMjQxWjAYMRYwFAYD
VQQDEw02OGY0NWJkOS01YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYlWYH2Mfm/CL3wY/cX0kij4Q17HgZHjw3rP1HvlsZ1im7bwkpCr1/WNZW5g
DSCg9GCMhk+lhqBf1/Pv6MR6WzY1TdCZeSeOIXGBCr4o/BQviBSUc+mHZKyJg7S1
rhUp9kxMyTMZA/NHXlI9VDRcJJhZutCAXszd8+XV3C3PCw4TFL34ZqihEZIyl6VR
W8KMhsKtNnO9VytpDVM8Q4+3E8cx2K4bhwGQG1dWybxU8h/6YL6XxuVi96T79RI5
x/K3zV8owiunai9IEYYk71hNxhMVQnky8GKIkog4PuSBMmEqPSV7efjwxI3UG/M5
s5qoH0dGaa7VsqmWYK/LwPvKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU/K3tp
gHADiZUS0iXx1VveXt5sMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD
MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o
d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9GmhZMnvLkPk/y0KSQPRqt3rYd3T6Odso79+etXVL9lY3RhpBEJkL
n04mB4uI7ulReliPq9w1dp1ZI1B47iUWZzquhoAVVDLVgMG3p48RsOmOavBWPjXF
hIG9QXIT932MLt5a4iL3lZJPiWmTNpZoeNc1rtuLGuNfAc7NTye0rmf4FQfHMhU1
X18ca2npuJ97ZH2KlBYlL+x4YSMFh25C73ezPfhxowVHWuVXEKg21GqGLfjmb/PU
zE9wq166jBqB0gqUrYLXNPuXv1hbJyTqT+QZHVENeWjxwjAQvlbr+ZcIGaCSVZZz
Cj7kdSl7B+kVJDDxrPRsK1q/DKpbTj+n
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:18 2025 by rpki-client