Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File:                     jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier:          CRf6Pnv2OlcxkX7L9EyDkp+6XIm1FXKqXDj7/ZEWDRc=
Subject key identifier:   85:1F:70:FD:7F:B8:D5:F7:D0:FC:AD:1C:4A:38:BE:F2:3F:82:95:21
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer:       /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number:          029B
Signing time:             Sun 19 Oct 2025 03:48:40 +0000
Manifest this update:     Sun 19 Oct 2025 03:48:40 +0000
Manifest next update:     Sun 26 Oct 2025 03:48:40 +0000
Files and hashes:         1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: /ao021STKphBnVSfW0vexilnZ0jQvJXC5jj6WOJ+aN8=)
                          2: E1870478616C11F0A254E10BC4F9AE02.roa (hash: PUky37fAI8Ys1qLflElYkqRy1kwJKllU0o6ewDp0S2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
                          rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
        Validity
            Not Before: Oct 19 03:48:40 2025 GMT
            Not After : Oct 26 03:48:40 2025 GMT
        Subject: CN=68f45f98-21cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:47:0c:47:72:ad:89:2a:25:cb:c3:df:74:6e:
                    c9:d9:2f:7b:9f:25:ec:4a:3e:24:1f:5c:aa:1b:33:
                    79:3a:2d:38:7e:65:2b:39:af:52:cc:fe:6f:39:12:
                    d1:15:33:7b:bd:fb:2c:3b:1d:9d:61:14:65:d2:66:
                    9c:9a:89:2b:13:25:d8:be:66:6e:03:e7:f4:5c:90:
                    89:ce:3a:25:9d:f9:00:ed:bc:57:15:64:f0:6b:12:
                    36:5d:8e:d0:37:e0:db:4d:80:2d:6e:db:ce:e1:9d:
                    de:e2:08:54:d5:b4:31:31:b6:ea:9f:b4:bb:4e:e0:
                    c2:3d:b8:bf:e9:a2:7e:da:e1:cf:31:54:45:27:86:
                    ee:76:5f:6e:d2:c7:42:72:c6:c9:1f:3a:b3:74:c0:
                    ee:78:24:1b:d3:48:b0:dd:93:e4:ec:16:53:2f:a4:
                    bf:eb:87:82:40:9c:25:8f:40:fb:5d:66:f0:ac:d3:
                    33:2d:01:4b:90:3b:f0:d7:d9:75:64:c4:63:93:7a:
                    36:bc:8a:b4:bf:69:21:c8:60:fb:f3:f3:cd:df:a3:
                    8a:1d:0c:e2:94:8b:18:0c:6e:b5:91:2f:9c:79:de:
                    34:ac:34:90:9c:ba:38:21:8d:29:a1:8e:c3:5b:9e:
                    6e:f0:31:94:fe:26:be:ae:83:31:0c:cb:4d:36:ff:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:70:FD:7F:B8:D5:F7:D0:FC:AD:1C:4A:38:BE:F2:3F:82:95:21
            X509v3 Authority Key Identifier:
                keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e7:62:27:92:c5:8c:0a:3e:31:b1:c8:81:0f:ba:dd:72:84:
         9c:55:e6:91:6e:72:b0:5e:84:99:23:6b:39:05:9a:80:e7:29:
         06:dd:7c:10:27:6d:8a:f3:3e:f7:0f:5c:11:03:30:5a:78:0f:
         54:09:cd:4e:0c:4e:50:c9:16:50:49:8b:81:cb:5f:f5:59:40:
         46:50:c9:df:16:42:75:34:d2:99:c8:bd:9b:2d:a6:3a:d1:d3:
         d8:fc:3e:5e:e6:ff:33:b2:ad:ad:8f:44:18:3b:2c:16:1a:3a:
         e5:66:c8:c3:35:2c:3a:df:21:24:22:20:6c:18:bc:49:68:7e:
         95:f5:75:1b:dd:3e:6d:fb:90:fc:3b:d6:dd:e0:74:7c:c0:de:
         d3:c2:44:37:d9:3f:ef:4c:a2:4e:8f:27:ef:41:6a:80:06:c7:
         1c:95:6c:51:c7:f1:ff:11:be:e8:1f:13:4e:d6:39:cc:ed:60:
         ed:56:1b:72:a5:98:02:05:6a:27:77:db:27:45:ef:2d:e2:90:
         9b:f7:6e:30:de:77:ee:fd:39:06:91:66:6c:16:00:fe:79:e1:
         5c:ba:43:9a:67:21:fe:1f:42:1a:8b:6a:cd:77:b6:07:d8:03:
         d1:e0:83:09:de:2f:7e:f5:cc:8e:c8:c8:c1:fd:3b:a1:17:a5:
         25:53:d1:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF
MUI0OTM4REIwHhcNMjUxMDE5MDM0ODQwWhcNMjUxMDI2MDM0ODQwWjAYMRYwFAYD
VQQDEw02OGY0NWY5OC0yMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6UcMR3KtiSoly8PfdG7J2S97nyXsSj4kH1yqGzN5Oi04fmUrOa9SzP5vORLR
FTN7vfssOx2dYRRl0macmokrEyXYvmZuA+f0XJCJzjolnfkA7bxXFWTwaxI2XY7Q
N+DbTYAtbtvO4Z3e4ghU1bQxMbbqn7S7TuDCPbi/6aJ+2uHPMVRFJ4budl9u0sdC
csbJHzqzdMDueCQb00iw3ZPk7BZTL6S/64eCQJwlj0D7XWbwrNMzLQFLkDvw19l1
ZMRjk3o2vIq0v2khyGD78/PN36OKHQzilIsYDG61kS+ced40rDSQnLo4IY0poY7D
W55u8DGU/ia+roMxDMtNNv+eXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUfcP1/
uNX30PytHEo4vvI/gpUhMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz
Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o
Y1JzQUp6SlFSR19odEpPTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAD52InksWMCj4xsciBD7rdcoScVeaRbnKwXoSZI2s5BZqA5ykG3XwQ
J22K8z73D1wRAzBaeA9UCc1ODE5QyRZQSYuBy1/1WUBGUMnfFkJ1NNKZyL2bLaY6
0dPY/D5e5v8zsq2tj0QYOywWGjrlZsjDNSw63yEkIiBsGLxJaH6V9XUb3T5t+5D8
O9bd4HR8wN7TwkQ32T/vTKJOjyfvQWqABscclWxRx/H/Eb7oHxNO1jnM7WDtVhty
pZgCBWond9snRe8t4pCb924w3nfu/TkGkWZsFgD+eeFcukOaZyH+H0Iai2rNd7YH
2APR4IMJ3i9+9cyOyMjB/TuhF6UlU9HZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:38 2025 by rpki-client