Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          hoMDV7gB1dyUSZgNaOq8hbWURyaE2cKP8U0faS7devw=
Subject key identifier:   B1:21:63:94:5D:F2:54:95:DE:06:AC:EF:DD:5E:D9:5E:3E:FA:65:F3
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          01CA
Signing time:             Sun 19 Oct 2025 05:31:25 +0000
Manifest this update:     Sun 19 Oct 2025 05:31:25 +0000
Manifest next update:     Sun 26 Oct 2025 05:31:25 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: uWN2/+yrbHw+0wXuc5RtN6pOWgi9NBPeC0sIhSp/nxU=)
                          2: 9F79846406E911EE88450147C4F9AE02.roa (hash: LvbEefo/jIzRbw1qkY9iXb8amhsCn8ZD4oSsz6Ev0wA=)
                          3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: R6zicuGc5j5WIEznRKzKMEUHTEcekYg+eZaMy/xb74A=)
                          4: E5925096093911EEABCFA170C4F9AE02.roa (hash: COVvPwRRBQaYkijAL/8dGT7ATCUM7/oNgeAZamGV0AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Oct 19 05:31:25 2025 GMT
            Not After : Oct 26 05:31:25 2025 GMT
        Subject: CN=68f477ad-3a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:02:92:59:49:01:63:f8:22:08:59:42:87:
                    7e:ec:0f:c5:7e:c7:0e:65:c2:c6:a6:32:1a:8e:b4:
                    5a:99:13:ee:ee:3a:2f:ab:8f:90:65:d5:5c:54:a9:
                    47:0f:00:60:9e:4e:87:bd:e2:43:ae:ac:9b:55:4d:
                    af:0b:63:65:31:32:b0:b0:13:5d:29:f3:c5:61:01:
                    7c:c2:e6:1d:20:97:06:a1:bd:c5:9e:4d:2b:c8:f6:
                    d2:00:10:da:2d:3b:38:59:3a:43:81:ef:93:d8:6d:
                    2a:43:fa:9b:03:30:b7:fa:bd:f9:3e:a0:bb:22:99:
                    cf:8a:f5:a4:30:33:63:bb:3f:18:d7:6f:0b:bc:20:
                    59:7e:33:4c:b1:0f:fa:78:a3:74:7e:fd:89:39:2e:
                    35:ef:5d:e7:a3:ab:b3:82:9a:73:69:24:6b:22:d0:
                    45:19:47:43:5e:b1:45:f5:77:be:ad:e0:92:3e:a5:
                    4f:82:19:ee:36:2a:e6:ce:ea:44:77:0b:c4:57:b8:
                    59:31:f1:31:53:82:0a:0f:f0:9b:72:22:ca:fe:ff:
                    03:74:a3:a7:6c:70:4e:5e:70:ea:2d:59:8b:e3:ac:
                    06:ba:c9:4d:45:b2:45:51:47:e1:31:89:a7:84:a0:
                    03:ef:33:06:f5:31:4f:e7:a4:3c:d5:c6:b1:1b:7d:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:21:63:94:5D:F2:54:95:DE:06:AC:EF:DD:5E:D9:5E:3E:FA:65:F3
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:a9:8c:95:ea:66:6e:e7:75:dc:b7:34:6b:73:1a:d7:68:
         5a:0e:bf:8e:38:64:4d:4a:a3:99:e5:f8:1b:47:8a:10:af:77:
         80:f4:e7:19:6c:8d:4f:80:43:df:0c:bd:c3:63:68:fa:91:99:
         ae:22:df:5f:c9:0f:a0:6d:6f:88:6b:d0:d6:e1:04:fe:8b:11:
         77:2e:29:15:b2:7b:c4:ea:9a:d0:a6:a5:2b:7e:37:06:66:b8:
         be:b4:9a:5f:a6:f1:6b:73:a3:ef:bf:df:66:4a:16:62:cc:cd:
         5a:f5:0e:72:1f:1b:b2:ed:2b:79:46:7e:51:58:f5:ac:da:fa:
         2b:d1:cd:d1:04:96:57:99:33:c5:44:e5:1b:42:21:c4:ff:94:
         0c:6c:e4:35:02:23:22:62:f5:c8:32:20:40:81:57:05:e8:80:
         e7:82:79:f7:6f:93:5d:83:7b:41:f2:25:03:c8:d6:ac:16:a4:
         39:a3:73:a0:5f:d7:08:ec:f1:2a:36:85:7d:49:9f:74:42:f9:
         f9:e7:6e:3b:bc:db:15:54:03:7f:ae:0e:8b:2f:15:02:49:26:
         a6:0d:fb:f2:88:86:82:7c:a5:93:88:24:9a:2d:87:5b:6d:eb:
         4a:69:09:8b:03:c7:d7:c1:4f:c4:19:07:35:13:3d:9b:3c:f7:
         ec:e3:61:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjUxMDE5MDUzMTI1WhcNMjUxMDI2MDUzMTI1WjAYMRYwFAYD
VQQDEw02OGY0NzdhZC0zYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv1ICkllJAWP4IghZQod+7A/FfscOZcLGpjIajrRamRPu7jovq4+QZdVcVKlH
DwBgnk6HveJDrqybVU2vC2NlMTKwsBNdKfPFYQF8wuYdIJcGob3Fnk0ryPbSABDa
LTs4WTpDge+T2G0qQ/qbAzC3+r35PqC7IpnPivWkMDNjuz8Y128LvCBZfjNMsQ/6
eKN0fv2JOS41713no6uzgppzaSRrItBFGUdDXrFF9Xe+reCSPqVPghnuNirmzupE
dwvEV7hZMfExU4IKD/CbciLK/v8DdKOnbHBOXnDqLVmL46wGuslNRbJFUUfhMYmn
hKAD7zMG9TFP56Q81caxG32K/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEhY5Rd
8lSV3gas791e2V4++mXzMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP
MFVqSlBWbExiME1TY0tKTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNCqmMlepmbud13Lc0a3Ma12haDr+OOGRNSqOZ5fgbR4oQr3eA9OcZ
bI1PgEPfDL3DY2j6kZmuIt9fyQ+gbW+Ia9DW4QT+ixF3LikVsnvE6prQpqUrfjcG
Zri+tJpfpvFrc6Pvv99mShZizM1a9Q5yHxuy7St5Rn5RWPWs2vor0c3RBJZXmTPF
ROUbQiHE/5QMbOQ1AiMiYvXIMiBAgVcF6IDngnn3b5Ndg3tB8iUDyNasFqQ5o3Og
X9cI7PEqNoV9SZ90Qvn55247vNsVVAN/rg6LLxUCSSamDfvyiIaCfKWTiCSaLYdb
betKaQmLA8fXwU/EGQc1Ez2bPPfs42Ex
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:55 2025 by rpki-client