Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File:                     _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier:          deowusCrpURFDw23nKQtGVQiYEwONgQpqkYl0HRCSyY=
Subject key identifier:   C7:53:5D:73:C5:97:53:A6:D7:A2:DD:37:A6:F0:87:56:D5:3B:FC:E4
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number:          023E
Signing time:             Sun 19 Oct 2025 04:03:58 +0000
Manifest this update:     Sun 19 Oct 2025 04:03:57 +0000
Manifest next update:     Sun 26 Oct 2025 04:03:57 +0000
Files and hashes:         1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: rCaZ7QU9TCdn16rKT7MaR2l0L/438LjG6rZbJNwSrPQ=)
                          2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=)
                          3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: xErCMLXYoA0hL6AVT+7fD9OFndfuVCyqiiQ1j2stZZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Oct 19 04:03:57 2025 GMT
            Not After : Oct 26 04:03:57 2025 GMT
        Subject: CN=68f4632e-fd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:f6:4a:c9:4d:74:4a:76:39:da:75:d2:ab:
                    73:f0:16:dc:43:43:65:43:9f:58:ef:6a:1a:8a:34:
                    93:a1:17:40:60:39:0b:32:c3:80:a3:7e:64:3d:bd:
                    8b:aa:8d:c1:72:fd:b2:68:63:e3:92:19:21:3d:82:
                    94:e9:83:6d:4f:72:2e:a7:76:4a:1a:62:23:be:22:
                    35:42:e5:04:ae:83:69:1a:eb:82:43:5d:ee:31:a0:
                    18:37:dc:36:02:ec:48:0f:78:52:5d:df:94:7b:07:
                    63:c8:62:b7:c1:2a:7a:c6:25:52:9d:e9:34:2b:76:
                    1e:62:91:06:de:be:ef:8f:87:0a:71:a9:9b:75:d8:
                    5c:90:c8:2f:4f:d2:c4:29:41:e9:b0:08:da:f2:46:
                    be:71:5b:2d:3d:5e:6c:7b:4b:2d:92:c0:2b:a4:87:
                    5f:af:0d:5a:eb:de:3e:ce:08:8d:98:6a:e2:7c:09:
                    5c:02:c0:25:a8:1e:d4:02:e0:85:54:71:90:a4:4d:
                    4a:84:cf:9e:3b:dc:2d:86:37:85:c1:90:3e:55:d6:
                    5b:64:cd:c8:8c:e5:ae:e0:13:3e:10:ca:9f:6b:91:
                    f1:b4:ed:85:57:fa:e5:f5:88:b4:e0:9f:9b:f7:4a:
                    c2:79:d6:00:fe:8a:c2:a9:36:d1:f6:ee:b7:d2:f8:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:53:5D:73:C5:97:53:A6:D7:A2:DD:37:A6:F0:87:56:D5:3B:FC:E4
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:e8:fa:59:0e:cc:90:aa:67:2a:a4:fd:9b:d3:a0:55:9f:99:
         37:90:1b:16:9a:0e:ea:83:eb:02:3f:ab:b0:a8:ce:b9:5a:4a:
         fa:c7:4b:18:45:43:d7:b6:46:46:18:8a:f1:b1:c7:9b:19:40:
         e6:9a:d2:89:4e:c5:7b:95:45:72:64:c3:e0:f1:ed:80:3e:b3:
         ef:30:03:8a:e4:04:30:6e:13:84:d5:1d:e7:1f:10:47:1f:2b:
         75:6d:21:62:6d:b4:13:35:1f:67:81:a6:ab:bc:e2:ed:07:72:
         bf:30:23:76:5a:1a:3f:2f:8f:d0:94:a5:2b:6b:a5:3e:b5:0c:
         3b:66:33:f8:9c:a1:b7:d3:43:22:2f:10:20:d7:ab:95:1d:e9:
         75:94:97:df:7f:f4:d8:a2:5d:51:f0:c8:38:31:35:22:70:95:
         a0:78:a1:ab:50:15:74:cf:d2:46:13:62:ae:34:7b:85:c5:12:
         15:84:b9:d4:f8:67:ea:f3:e9:c7:33:a3:79:a5:96:9e:53:43:
         e9:d5:51:4e:2d:29:51:99:8e:8b:1e:11:56:19:16:aa:da:b8:
         ef:55:54:8e:c5:c2:f5:70:a4:de:72:77:7a:76:67:5f:ca:e2:
         7a:49:d1:ad:c4:f7:6c:2b:70:c3:3a:30:e6:0d:0b:11:10:f6:
         00:5b:61:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4
MjZDQ0RCQzUwHhcNMjUxMDE5MDQwMzU3WhcNMjUxMDI2MDQwMzU3WjAYMRYwFAYD
VQQDEw02OGY0NjMyZS1mZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw572SslNdEp2Odp10qtz8BbcQ0NlQ59Y72oaijSToRdAYDkLMsOAo35kPb2L
qo3Bcv2yaGPjkhkhPYKU6YNtT3Iup3ZKGmIjviI1QuUEroNpGuuCQ13uMaAYN9w2
AuxID3hSXd+UewdjyGK3wSp6xiVSnek0K3YeYpEG3r7vj4cKcambddhckMgvT9LE
KUHpsAja8ka+cVstPV5se0stksArpIdfrw1a694+zgiNmGrifAlcAsAlqB7UAuCF
VHGQpE1KhM+eO9wthjeFwZA+VdZbZM3IjOWu4BM+EMqfa5HxtO2FV/rl9Yi04J+b
90rCedYA/orCqTbR9u630vhf+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdTXXPF
l1Om16LdN6bwh1bVO/zkMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2
MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz
dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDT6PpZDsyQqmcqpP2b06BVn5k3kBsWmg7qg+sCP6uwqM65Wkr6x0sY
RUPXtkZGGIrxscebGUDmmtKJTsV7lUVyZMPg8e2APrPvMAOK5AQwbhOE1R3nHxBH
Hyt1bSFibbQTNR9ngaarvOLtB3K/MCN2Who/L4/QlKUra6U+tQw7ZjP4nKG300Mi
LxAg16uVHel1lJfff/TYol1R8Mg4MTUicJWgeKGrUBV0z9JGE2KuNHuFxRIVhLnU
+Gfq8+nHM6N5pZaeU0Pp1VFOLSlRmY6LHhFWGRaq2rjvVVSOxcL1cKTecnd6dmdf
yuJ6SdGtxPdsK3DDOjDmDQsREPYAW2Ey
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:56 2025 by rpki-client