Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File:                     ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier:          lg2hCiXucgS3+TSTh9ukLt7OgzTj5bJ9D9hY66fP8Og=
Subject key identifier:   5C:AF:70:CC:9E:27:8C:7C:7E:25:9C:51:86:29:99:1D:82:90:8E:52
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer:       /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial:       0CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number:          0CAC
Signing time:             Sat 18 Oct 2025 19:00:26 +0000
Manifest this update:     Sat 18 Oct 2025 19:00:25 +0000
Manifest next update:     Sat 25 Oct 2025 19:00:25 +0000
Files and hashes:         1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: spSVmbuJEsUB/SsJ+8ltj8D647t3bK/wP0IATi3K1uk=)
                          2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
        Validity
            Not Before: Oct 18 19:00:25 2025 GMT
            Not After : Oct 25 19:00:25 2025 GMT
        Subject: CN=68f3e3c9-0c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:5b:5f:72:f0:87:b2:dc:dc:74:79:04:02:
                    17:56:de:d4:90:8a:22:31:21:a3:9a:59:10:30:cd:
                    b6:ac:b0:ed:4b:04:a8:11:a6:a0:4e:9b:0a:d6:d6:
                    74:f4:d4:4c:29:9d:41:a6:55:dd:a8:25:87:f8:e7:
                    8b:76:37:98:51:d3:f5:8b:79:d2:cf:73:8a:2d:4f:
                    06:1e:74:79:5c:9f:c8:85:ff:8d:82:b8:b7:d9:7c:
                    cb:a0:2e:2f:64:cd:a7:13:41:18:93:5c:4a:e7:01:
                    e3:00:63:fa:4b:9d:5b:2b:44:62:b9:10:8d:2a:38:
                    02:26:f9:da:10:32:cf:2d:16:c3:92:72:22:3c:89:
                    89:c6:82:46:2e:9d:7b:88:8a:55:4c:39:4d:60:fd:
                    06:85:e5:cd:0a:80:df:3b:ac:46:4b:e3:a7:e0:13:
                    7e:dc:5f:3f:d0:05:30:1d:39:d8:10:7e:86:eb:0b:
                    cf:eb:ee:8f:29:ef:cc:da:63:87:86:b2:4a:9e:c6:
                    85:b5:5f:68:c1:be:63:5e:7b:d9:88:76:9a:c7:f6:
                    76:fa:60:19:97:63:e8:15:45:9e:82:46:29:14:df:
                    ae:bc:1b:63:09:7a:95:00:a5:06:4a:59:87:d4:47:
                    6a:d2:5d:e9:16:1b:40:5f:8e:20:f1:af:45:73:ae:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:70:CC:9E:27:8C:7C:7E:25:9C:51:86:29:99:1D:82:90:8E:52
            X509v3 Authority Key Identifier:
                keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:67:a0:35:56:55:cb:d7:25:2a:b6:4b:fa:af:51:a8:52:ab:
         4f:db:c7:d0:58:ec:cc:9f:c2:7c:d5:f0:df:2f:34:0e:d6:cf:
         26:4c:d3:9d:38:f2:12:83:6a:2d:ab:3f:e3:ce:66:9a:f4:1c:
         40:45:f4:73:01:8f:88:48:26:a4:34:bc:8f:a7:47:e8:97:67:
         0d:a9:ab:72:62:f6:1b:48:df:d6:18:56:e6:b1:e8:de:3e:59:
         6f:71:90:32:ef:4d:da:18:31:d6:c7:e9:92:ee:f5:d6:5d:ed:
         15:fd:1d:63:a7:e9:8b:c2:91:42:4e:b2:e0:c3:74:15:f9:62:
         ae:6b:fb:54:fc:77:a7:fe:c6:48:ff:76:df:f7:48:c9:d7:09:
         3b:d4:6d:a1:a1:ec:21:9b:dc:be:43:be:52:26:c4:6d:48:fd:
         b1:c9:15:a0:a1:c3:1b:1a:35:81:c6:58:f4:1b:f3:6f:11:42:
         24:ae:b7:d9:cc:ee:40:da:6e:bb:32:0d:79:ce:11:13:b5:2f:
         35:36:5a:32:55:5f:b1:20:2d:f1:11:e9:29:2d:7e:b2:28:d2:
         bf:a7:d8:7a:c1:ce:c5:15:a5:77:24:94:0e:14:34:f0:e8:4a:
         c0:17:4c:89:00:bf:14:68:08:d6:a5:cd:81:45:e6:02:74:f9:
         96:46:05:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5
MzIyREJFNkUwHhcNMjUxMDE4MTkwMDI1WhcNMjUxMDI1MTkwMDI1WjAYMRYwFAYD
VQQDEw02OGYzZTNjOS0wYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3WNbX3Lwh7Lc3HR5BAIXVt7UkIoiMSGjmlkQMM22rLDtSwSoEaagTpsK1tZ0
9NRMKZ1BplXdqCWH+OeLdjeYUdP1i3nSz3OKLU8GHnR5XJ/Ihf+Ngri32XzLoC4v
ZM2nE0EYk1xK5wHjAGP6S51bK0RiuRCNKjgCJvnaEDLPLRbDknIiPImJxoJGLp17
iIpVTDlNYP0GheXNCoDfO6xGS+On4BN+3F8/0AUwHTnYEH6G6wvP6+6PKe/M2mOH
hrJKnsaFtV9owb5jXnvZiHaax/Z2+mAZl2PoFUWegkYpFN+uvBtjCXqVAKUGSlmH
1Edq0l3pFhtAX44g8a9Fc66luwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyvcMye
J4x8fiWcUYYpmR2CkI5SMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0
NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0
TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjZ6A1VlXL1yUqtkv6r1GoUqtP28fQWOzMn8J81fDfLzQO1s8mTNOd
OPISg2otqz/jzmaa9BxARfRzAY+ISCakNLyPp0fol2cNqatyYvYbSN/WGFbmseje
PllvcZAy703aGDHWx+mS7vXWXe0V/R1jp+mLwpFCTrLgw3QV+WKua/tU/Hen/sZI
/3bf90jJ1wk71G2hoewhm9y+Q75SJsRtSP2xyRWgocMbGjWBxlj0G/NvEUIkrrfZ
zO5A2m67Mg15zhETtS81NloyVV+xIC3xEekpLX6yKNK/p9h6wc7FFaV3JJQOFDTw
6ErAF0yJAL8UaAjWpc2BReYCdPmWRgUX
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:55 2025 by rpki-client