Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          xUyqodvlhK26C/YYsHujgwh9YPnIbbPOciDCgRwRJDo=
Subject key identifier:   23:A8:3B:B3:76:6F:88:F3:83:F0:D2:D8:68:6A:48:91:79:EC:D1:0D
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       036C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          035D
Signing time:             Sun 19 Oct 2025 02:59:22 +0000
Manifest this update:     Sun 19 Oct 2025 02:59:21 +0000
Manifest next update:     Sun 26 Oct 2025 02:59:21 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: ObMKzPCG/hwc5Kp9t6kWd3s546oIvhTT4G7CGefqXi8=)
                          2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: r0SdsL2ORVSdYzkbQ5mo+r9WMoDe9Po2V1LCmdg+FDo=)
                          3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: ICAm0K0jbIgavAr0EQMMjLaOL/gZji3RATFqBqpQADM=)
                          4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: /uILdUZ7kShm+RnYwG/kKYiO9gYuOhp2LdX1pGS+VDA=)
                          5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: dBsLOGuzUlSybPcUJi3MpYXDAALVpmkR+ZsEVuraLp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Oct 19 02:59:21 2025 GMT
            Not After : Oct 26 02:59:21 2025 GMT
        Subject: CN=68f4540a-e7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:94:e1:35:aa:80:aa:00:e9:6c:09:de:08:
                    06:36:25:c2:d2:89:32:16:c2:8d:81:83:32:f9:1c:
                    1d:ab:7c:1d:98:aa:fd:c3:e2:de:d2:95:50:9d:1f:
                    e5:41:53:bd:e6:23:f6:d5:87:1a:47:aa:75:e1:4c:
                    df:c8:ad:1d:18:76:4d:58:3f:18:c6:30:61:3d:57:
                    12:f8:ce:38:f2:36:e4:07:3e:2b:d6:7c:0f:85:a5:
                    e5:c3:b7:4a:a1:90:96:e6:0e:30:74:e6:6b:32:45:
                    b8:ad:3b:a5:97:e3:08:4a:22:cc:08:4b:d7:c6:b9:
                    f6:c5:1c:df:c0:c0:17:1a:9b:d2:3f:69:d1:0d:34:
                    ad:7d:14:cf:9f:9e:ea:6e:b2:ca:a7:3f:08:d0:69:
                    9f:eb:5d:29:16:c4:91:2a:11:23:b8:88:00:08:e0:
                    ef:44:45:a1:68:b5:44:ac:a3:f9:62:cd:27:ba:22:
                    71:b1:04:36:5a:df:22:df:34:84:95:75:61:6a:00:
                    57:a4:d8:32:09:e4:36:5b:f2:ca:94:cc:b3:87:d1:
                    56:d6:4f:ce:88:d2:c4:5c:f7:f3:da:bc:f6:5f:64:
                    f9:0c:81:ec:94:75:72:57:88:c1:0b:42:c1:20:81:
                    f9:08:1c:f7:b9:6f:e9:18:8e:13:d8:90:89:8e:23:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A8:3B:B3:76:6F:88:F3:83:F0:D2:D8:68:6A:48:91:79:EC:D1:0D
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:d0:f0:83:44:56:bd:5a:ef:4a:14:f9:2f:b1:08:9c:40:
         8d:86:65:d8:bc:c1:37:8c:1a:97:44:6b:d1:fe:8b:09:a5:6e:
         fc:b1:03:b2:f4:9d:dd:e9:f1:5d:5c:61:08:08:9c:ca:32:83:
         75:87:3d:52:8b:de:4b:d1:37:27:65:d9:a6:f3:ee:7a:c9:7f:
         6a:e8:ad:22:4c:3a:7c:22:2a:4a:37:b1:8b:f1:b2:dd:dc:e2:
         ce:60:09:f7:d7:ad:77:85:29:46:c2:6a:f7:e6:ec:ad:34:26:
         03:7b:cb:43:60:d5:af:50:56:a9:2d:23:62:ea:b0:ea:67:98:
         1e:51:d6:c1:60:bc:00:fc:51:b9:a8:10:55:02:36:6c:7a:45:
         ae:84:82:43:5d:33:98:c7:e7:5a:10:dc:7d:d3:c2:98:1f:71:
         c4:38:72:83:84:32:e6:02:81:5d:71:8d:b2:73:2a:2e:59:74:
         6c:4b:51:1f:5c:cd:8a:a1:6f:9a:a0:86:4b:ec:9c:ec:a1:20:
         f5:11:73:ab:85:c8:c6:d5:d0:4b:d1:3c:aa:3b:59:19:05:42:
         d0:41:44:e9:a2:4d:3f:ec:13:cc:db:f7:2d:17:43:4e:a7:19:
         b3:d3:5e:97:76:f1:00:06:96:ff:db:bf:ef:d6:26:14:32:25:
         c4:1a:9f:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2
RjAxQURBNDUwHhcNMjUxMDE5MDI1OTIxWhcNMjUxMDI2MDI1OTIxWjAYMRYwFAYD
VQQDEw02OGY0NTQwYS1lN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBKU4TWqgKoA6WwJ3ggGNiXC0okyFsKNgYMy+Rwdq3wdmKr9w+Le0pVQnR/l
QVO95iP21YcaR6p14UzfyK0dGHZNWD8YxjBhPVcS+M448jbkBz4r1nwPhaXlw7dK
oZCW5g4wdOZrMkW4rTull+MISiLMCEvXxrn2xRzfwMAXGpvSP2nRDTStfRTPn57q
brLKpz8I0Gmf610pFsSRKhEjuIgACODvREWhaLVErKP5Ys0nuiJxsQQ2Wt8i3zSE
lXVhagBXpNgyCeQ2W/LKlMyzh9FW1k/OiNLEXPfz2rz2X2T5DIHslHVyV4jBC0LB
IIH5CBz3uW/pGI4T2JCJjiNHfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOoO7N2
b4jzg/DS2GhqSJF57NENMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw
MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTEwOC9FM0IwNDZDQ0QwMUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZlln
NENvZUxLMjFuV1Z2QWEya1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0n9Dwg0RWvVrvShT5L7EInECNhmXYvME3jBqXRGvR/osJpW78sQOy
9J3d6fFdXGEICJzKMoN1hz1Si95L0TcnZdmm8+56yX9q6K0iTDp8IipKN7GL8bLd
3OLOYAn31613hSlGwmr35uytNCYDe8tDYNWvUFapLSNi6rDqZ5geUdbBYLwA/FG5
qBBVAjZsekWuhIJDXTOYx+daENx908KYH3HEOHKDhDLmAoFdcY2ycyouWXRsS1Ef
XM2KoW+aoIZL7JzsoSD1EXOrhcjG1dBL0TyqO1kZBULQQUTpok0/7BPM2/ctF0NO
pxmz016XdvEABpb/27/v1iYUMiXEGp9g
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:52 2025 by rpki-client