Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
File:                     RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json)
Hash identifier:          LchM6fMzjgFm0PzVas6T9Hb9BftrvadbzbUhlsQloAU=
Subject key identifier:   07:49:EF:46:36:21:2D:A5:1F:E5:CE:01:D3:03:8C:1C:D9:07:56:ED
Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Certificate issuer:       /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Certificate serial:       0C5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
Manifest number:          0C5C
Signing time:             Sat 18 Oct 2025 19:17:52 +0000
Manifest this update:     Sat 18 Oct 2025 19:17:52 +0000
Manifest next update:     Sat 25 Oct 2025 19:17:52 +0000
Files and hashes:         1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: TeC+g1+pfQ7U5h801czae5VaU5/H7sJCFezWYi6LJjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3165 (0xc5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
        Validity
            Not Before: Oct 18 19:17:52 2025 GMT
            Not After : Oct 25 19:17:52 2025 GMT
        Subject: CN=68f3e7e0-ea23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:de:6c:a7:d6:14:9b:90:6a:55:5b:9c:f3:
                    4c:37:a3:01:76:9f:0a:9c:6c:f6:d5:86:83:52:5f:
                    9a:91:14:bc:11:e6:31:e5:fa:9c:ac:6e:6f:9f:fc:
                    42:c6:70:8d:74:2a:8e:de:18:02:81:89:a3:6d:80:
                    f9:a7:1c:c1:e0:4b:6d:b6:d5:ef:fa:9c:33:09:71:
                    4d:1d:bc:eb:ee:cb:9f:e2:d6:69:46:0d:e8:e0:36:
                    da:34:b5:a5:92:16:eb:4e:9f:1a:7b:68:a1:5d:93:
                    90:cb:3e:01:84:97:37:36:68:38:78:00:c3:ce:12:
                    db:99:35:90:ec:e7:94:4f:b4:a7:59:cc:82:24:16:
                    e3:3c:de:24:f1:47:8a:43:46:19:44:44:60:32:0e:
                    6a:ee:3c:c5:ab:af:9d:be:58:6b:c7:2e:a4:e1:83:
                    99:6c:9e:51:09:73:48:91:f1:f2:26:fe:3b:fd:d7:
                    09:2e:ec:b7:a2:94:0f:57:41:8c:f6:66:b6:42:20:
                    9d:5e:d6:68:82:f2:a7:c5:f2:e5:41:e1:03:9c:96:
                    b1:cd:7c:5f:93:f8:8e:cc:fb:c2:cb:f5:ac:fe:ce:
                    0f:d8:ec:b6:f2:2c:eb:90:da:b6:22:d8:65:b8:22:
                    d9:e6:02:04:52:c8:0a:95:76:76:54:8c:c9:c6:c8:
                    fb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:EF:46:36:21:2D:A5:1F:E5:CE:01:D3:03:8C:1C:D9:07:56:ED
            X509v3 Authority Key Identifier:
                keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:68:57:4c:ab:18:06:f8:26:80:c2:a5:07:01:76:d1:04:7c:
         7a:8a:aa:3b:bb:10:7c:e2:79:82:81:90:19:a5:c3:3c:07:56:
         11:ec:c2:f1:30:a0:b1:3e:51:c1:a4:b8:a6:40:05:41:11:87:
         ca:5b:a6:36:fe:da:5d:44:53:75:be:6d:03:ac:54:bb:b1:d6:
         70:b8:c6:54:b1:92:04:f5:f7:1a:24:e0:50:f2:d3:de:62:a0:
         0d:28:ba:18:be:f3:64:d3:e6:69:e1:66:bd:e0:70:5c:aa:cf:
         08:33:c2:49:12:07:7d:d4:3f:16:90:c9:8d:46:a9:0d:12:5e:
         2b:34:bd:f2:7d:90:cf:5a:b5:82:a5:59:89:05:ad:19:88:a2:
         f4:83:78:d2:61:eb:2e:91:d7:00:f0:6e:86:a4:56:da:09:52:
         34:1c:e0:72:02:ae:9b:f3:3d:7e:bf:ce:5d:b4:d1:a8:15:c2:
         ca:e8:4e:b4:99:c9:80:eb:62:55:87:73:b0:85:85:d8:72:07:
         f1:ae:f4:d2:ff:e5:ce:23:89:f2:c4:7d:47:dc:17:aa:e3:68:
         81:0f:a8:bf:3c:2c:00:03:07:59:6d:2c:e1:ea:9a:8b:dc:58:
         5e:c6:13:f7:aa:67:4b:1d:49:6b:fd:9a:f0:27:b3:da:40:e2:
         ef:38:f7:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG
Mzc1MkY0MzcwHhcNMjUxMDE4MTkxNzUyWhcNMjUxMDI1MTkxNzUyWjAYMRYwFAYD
VQQDEw02OGYzZTdlMC1lYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqVTebKfWFJuQalVbnPNMN6MBdp8KnGz21YaDUl+akRS8EeYx5fqcrG5vn/xC
xnCNdCqO3hgCgYmjbYD5pxzB4EttttXv+pwzCXFNHbzr7suf4tZpRg3o4DbaNLWl
khbrTp8ae2ihXZOQyz4BhJc3Nmg4eADDzhLbmTWQ7OeUT7SnWcyCJBbjPN4k8UeK
Q0YZRERgMg5q7jzFq6+dvlhrxy6k4YOZbJ5RCXNIkfHyJv47/dcJLuy3opQPV0GM
9ma2QiCdXtZogvKnxfLlQeEDnJaxzXxfk/iOzPvCy/Ws/s4P2Oy28izrkNq2Ithl
uCLZ5gIEUsgKlXZ2VIzJxsj7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdJ70Y2
IS2lH+XOAdMDjBzZB1btMB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD
MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr
ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByaFdMqxgG+CaAwqUHAXbRBHx6iqo7uxB84nmCgZAZpcM8B1YR7MLx
MKCxPlHBpLimQAVBEYfKW6Y2/tpdRFN1vm0DrFS7sdZwuMZUsZIE9fcaJOBQ8tPe
YqANKLoYvvNk0+Zp4Wa94HBcqs8IM8JJEgd91D8WkMmNRqkNEl4rNL3yfZDPWrWC
pVmJBa0ZiKL0g3jSYesukdcA8G6GpFbaCVI0HOByAq6b8z1+v85dtNGoFcLK6E60
mcmA62JVh3OwhYXYcgfxrvTS/+XOI4nyxH1H3Beq42iBD6i/PCwAAwdZbSzh6pqL
3FhexhP3qmdLHUlr/ZrwJ7PaQOLvOPfG
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:40 2025 by rpki-client