Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          uX2cAWeNj5vKcqGnYCZ5IM65cpt7z+2JLkn9oZs/4ho=
Subject key identifier:   B8:1A:42:3E:2E:22:46:44:B0:88:FF:B5:1F:B0:9D:29:40:2A:FE:8C
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          02C1
Signing time:             Sun 19 Oct 2025 03:36:31 +0000
Manifest this update:     Sun 19 Oct 2025 03:36:30 +0000
Manifest next update:     Sun 26 Oct 2025 03:36:30 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: bLGmNd19/d4Zx3zlVKYApe0UwKG9jh3abQScCe+T3ao=)
                          2: 411831E23FC011F097A38852C4F9AE02.roa (hash: Z3YuqjlFc86KvX6uGgqRo2M31ge97SaPeoOB1KbRkKk=)
                          3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Oct 19 03:36:30 2025 GMT
            Not After : Oct 26 03:36:30 2025 GMT
        Subject: CN=68f45cbe-f38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:58:be:45:70:61:fe:8b:da:75:a0:07:bf:
                    c9:df:38:5a:57:19:e2:49:dc:dd:97:e7:0d:31:2b:
                    cb:d2:2a:33:f3:0a:21:7c:81:99:91:8e:e8:ca:6f:
                    b1:15:c6:95:64:44:36:94:1c:47:ce:70:19:e6:82:
                    ee:ce:f6:bc:d9:55:06:29:77:d4:d2:81:29:e9:8f:
                    33:4b:d1:a9:8e:6a:df:0c:68:52:b5:54:02:06:3c:
                    a3:b3:d3:15:fb:10:8f:89:3d:a2:22:ea:c5:d6:c1:
                    51:57:0c:d9:15:d3:50:87:08:61:74:df:5b:47:8f:
                    a5:88:17:20:c8:87:76:35:c8:97:8b:59:48:45:1d:
                    fe:ad:6b:bc:a9:60:d4:11:33:ac:50:3c:55:b4:3a:
                    76:e8:54:0e:46:33:cb:c7:c4:f7:e2:69:ac:dc:0e:
                    e4:64:5a:fc:e6:a5:cf:a8:fc:bb:8c:13:ba:cc:d8:
                    48:6b:68:56:e1:1e:55:07:15:8a:97:34:d7:ca:a5:
                    e8:f5:bc:67:79:3e:c6:d3:55:5b:cd:e2:9b:0e:ce:
                    c8:14:7c:ca:cb:76:1f:39:81:da:47:1a:93:a6:3b:
                    80:2c:bc:b9:eb:47:e4:94:16:bc:f8:ec:8e:fd:fc:
                    11:cc:32:af:7e:0c:9e:c5:9d:4b:f5:d0:63:2b:29:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:42:3E:2E:22:46:44:B0:88:FF:B5:1F:B0:9D:29:40:2A:FE:8C
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:51:1b:1e:e2:a9:0f:38:81:bc:99:67:52:f2:d4:fc:34:
         67:ce:c4:09:0c:22:7b:a9:2b:7d:22:ca:e7:2b:ec:13:59:61:
         01:7b:52:62:04:0e:b6:8d:ce:b3:71:44:a1:0e:e3:71:ae:dd:
         d2:80:3b:ce:66:e1:57:17:b3:20:61:43:52:e3:c4:41:1b:a1:
         9b:97:36:0b:4b:28:9b:46:69:13:e2:9c:c7:dc:83:ee:85:ad:
         00:77:f0:c6:8e:36:83:09:5d:da:0e:08:02:53:f6:01:59:30:
         fb:bb:df:f2:3b:c4:2c:fe:84:df:01:69:4a:f6:d1:8e:b8:1a:
         ef:56:0b:41:b7:9f:44:81:d0:45:ec:8c:a4:d9:c8:3f:1c:67:
         cb:8f:bc:c6:2a:52:9e:cb:29:41:eb:15:66:5a:7d:92:15:59:
         f7:fb:c1:f9:35:26:fd:61:e5:d5:9c:b9:ee:71:bc:f8:a5:84:
         5a:e1:78:2b:5a:86:1a:09:18:4d:e1:79:3c:46:1b:cc:ee:bd:
         99:b2:c3:65:6b:2d:0e:a0:d2:c8:c4:97:ff:50:2a:30:75:56:
         e7:9c:a1:d2:da:c7:4d:69:23:6f:74:a5:39:a4:68:2d:91:3a:
         54:38:9a:6c:55:e5:09:40:df:65:0b:60:a2:6d:90:b6:b3:ee:
         50:78:f4:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC
RTlGRTExNUMwHhcNMjUxMDE5MDMzNjMwWhcNMjUxMDI2MDMzNjMwWjAYMRYwFAYD
VQQDEw02OGY0NWNiZS1mMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5pYvkVwYf6L2nWgB7/J3zhaVxniSdzdl+cNMSvL0ioz8wohfIGZkY7oym+x
FcaVZEQ2lBxHznAZ5oLuzva82VUGKXfU0oEp6Y8zS9GpjmrfDGhStVQCBjyjs9MV
+xCPiT2iIurF1sFRVwzZFdNQhwhhdN9bR4+liBcgyId2NciXi1lIRR3+rWu8qWDU
ETOsUDxVtDp26FQORjPLx8T34mms3A7kZFr85qXPqPy7jBO6zNhIa2hW4R5VBxWK
lzTXyqXo9bxneT7G01VbzeKbDs7IFHzKy3YfOYHaRxqTpjuALLy560fklBa8+OyO
/fwRzDKvfgyexZ1L9dBjKykbuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgaQj4u
IkZEsIj/tR+wnSlAKv6MMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG
MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt
LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCALlEbHuKpDziBvJlnUvLU/DRnzsQJDCJ7qSt9IsrnK+wTWWEBe1Ji
BA62jc6zcUShDuNxrt3SgDvOZuFXF7MgYUNS48RBG6GblzYLSyibRmkT4pzH3IPu
ha0Ad/DGjjaDCV3aDggCU/YBWTD7u9/yO8Qs/oTfAWlK9tGOuBrvVgtBt59EgdBF
7Iyk2cg/HGfLj7zGKlKeyylB6xVmWn2SFVn3+8H5NSb9YeXVnLnucbz4pYRa4Xgr
WoYaCRhN4Xk8RhvM7r2ZssNlay0OoNLIxJf/UCowdVbnnKHS2sdNaSNvdKU5pGgt
kTpUOJpsVeUJQN9lC2CibZC2s+5QePQG
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:54 2025 by rpki-client