Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
File:                     XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json)
Hash identifier:          wdzq3ANXZT+A+7ANaWTaUD4WKbTsDPenR1R0jGyMNPs=
Subject key identifier:   78:59:6E:44:11:D0:8E:A4:24:C1:9B:CD:25:B8:83:B3:A4:1D:73:1F
Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
Certificate issuer:       /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
Manifest number:          C7
Signing time:             Sun 19 Oct 2025 08:52:42 +0000
Manifest this update:     Sun 19 Oct 2025 08:52:41 +0000
Manifest next update:     Sun 26 Oct 2025 08:52:41 +0000
Files and hashes:         1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: iYQozE63JdJRcVAJfAbQUqDfHrN1shUdwpQQyVbHMPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
        Validity
            Not Before: Oct 19 08:52:41 2025 GMT
            Not After : Oct 26 08:52:41 2025 GMT
        Subject: CN=68f4a6d9-9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:07:6d:02:d5:d9:2c:b4:fb:e0:85:cf:c7:
                    58:82:95:2a:f2:fc:fa:0e:e9:a1:69:f9:d3:51:ff:
                    fb:3a:fa:15:5f:f3:3f:8d:a3:ae:05:14:4a:42:37:
                    35:6b:4e:66:e1:68:ee:c0:b9:8e:ee:c6:d4:09:3f:
                    6c:b0:d9:67:42:e7:d8:77:fd:c6:e3:f1:82:bd:9a:
                    4b:06:56:f7:c8:f8:af:b4:d3:ee:8f:89:3a:8f:a4:
                    f1:4a:0c:32:02:d2:24:32:6a:c4:fa:64:ad:a5:bf:
                    e1:f2:38:79:7a:58:55:c1:09:21:27:35:52:9a:60:
                    41:03:3b:eb:c2:68:35:ce:95:02:6e:b6:22:78:91:
                    b2:20:01:47:f0:cc:dd:3c:12:90:14:8d:1f:b8:e1:
                    fc:7f:9b:2c:14:70:e5:78:b5:77:c6:e6:d2:bf:68:
                    f1:51:51:d2:9c:68:52:f2:f2:b6:a8:0f:f8:a7:44:
                    c5:ff:74:5e:d8:c7:e4:44:a5:0d:62:bf:d3:c2:f1:
                    dd:27:bb:43:4f:6f:c3:ae:85:0d:cb:c4:d3:d0:98:
                    f3:bb:98:09:4d:d6:15:42:e2:ff:84:f7:1a:e1:55:
                    ac:7d:3c:13:9a:88:e0:fd:29:69:94:b5:41:28:77:
                    12:7f:69:5c:fa:36:8c:31:59:8a:8d:43:af:7c:33:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:59:6E:44:11:D0:8E:A4:24:C1:9B:CD:25:B8:83:B3:A4:1D:73:1F
            X509v3 Authority Key Identifier:
                keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:73:a7:d4:2e:d7:e3:3b:40:d4:6f:b1:45:19:ce:64:d9:
         17:3d:a9:b0:75:99:57:07:5c:33:39:4c:a2:ab:79:07:7d:ff:
         49:45:2f:58:c6:d6:1a:52:fb:eb:07:1b:21:7e:28:26:aa:d4:
         57:9c:62:9c:33:ae:b0:8e:f3:d9:d4:7d:b3:d8:57:4b:f7:d4:
         ac:ce:d4:f4:cf:24:09:2d:17:8d:9c:ed:36:75:ea:e4:26:6d:
         83:7d:ea:55:8e:a1:08:aa:d1:37:be:9b:f2:36:18:70:d6:96:
         de:f8:2a:af:e3:ca:b6:3b:d3:40:37:68:29:f3:fe:40:60:fc:
         84:44:26:73:4c:36:91:bf:ca:d9:bc:3a:86:a7:19:bd:e7:fe:
         79:48:f9:0f:93:8a:15:a4:d3:f2:72:75:e1:7f:bc:01:5a:37:
         46:20:58:45:70:ef:dd:ea:f4:90:a6:e3:c8:1a:ee:3d:57:48:
         4d:e5:e8:b1:e0:0a:05:0c:5f:f3:a8:77:8f:55:2d:58:5f:33:
         9a:ed:88:18:2a:55:56:3f:f0:ec:66:3a:c1:c6:f8:7c:1a:12:
         00:30:01:d2:24:75:14:57:6a:30:31:39:d4:87:c9:34:87:04:
         fd:ae:60:42:53:10:b2:d3:88:99:54:d3:29:2c:1d:1e:3c:14:
         ac:4c:06:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE5MEYxMTAvBgNVBAUTKDVFOTYwRDUxODhGMDM2Rjc5RUFBNzk0MTU1MkNDRjQ2
Qjg3QUJGMDcwHhcNMjUxMDE5MDg1MjQxWhcNMjUxMDI2MDg1MjQxWjAYMRYwFAYD
VQQDEw02OGY0YTZkOS05MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAua8HbQLV2Sy0++CFz8dYgpUq8vz6DumhafnTUf/7OvoVX/M/jaOuBRRKQjc1
a05m4WjuwLmO7sbUCT9ssNlnQufYd/3G4/GCvZpLBlb3yPivtNPuj4k6j6TxSgwy
AtIkMmrE+mStpb/h8jh5elhVwQkhJzVSmmBBAzvrwmg1zpUCbrYieJGyIAFH8Mzd
PBKQFI0fuOH8f5ssFHDleLV3xubSv2jxUVHSnGhS8vK2qA/4p0TF/3Re2MfkRKUN
Yr/TwvHdJ7tDT2/DroUNy8TT0Jjzu5gJTdYVQuL/hPca4VWsfTwTmojg/SlplLVB
KHcSf2lc+jaMMVmKjUOvfDPBzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhZbkQR
0I6kJMGbzSW4g7OkHXMfMB8GA1UdIwQYMBaAFF6WDVGI8Db3nqp5QVUsz0a4er8H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9DODVCQTEyQzdC
RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052ZWVxbmxCVlN6UFJyaDZ2
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTkwRi9DODVCQTEyQzdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052
ZWVxbmxCVlN6UFJyaDZ2d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJo3On1C7X4ztA1G+xRRnOZNkXPamwdZlXB1wzOUyiq3kHff9JRS9Y
xtYaUvvrBxshfigmqtRXnGKcM66wjvPZ1H2z2FdL99SsztT0zyQJLReNnO02derk
Jm2DfepVjqEIqtE3vpvyNhhw1pbe+Cqv48q2O9NAN2gp8/5AYPyERCZzTDaRv8rZ
vDqGpxm95/55SPkPk4oVpNPycnXhf7wBWjdGIFhFcO/d6vSQpuPIGu49V0hN5eix
4AoFDF/zqHePVS1YXzOa7YgYKlVWP/DsZjrBxvh8GhIAMAHSJHUUV2owMTnUh8k0
hwT9rmBCUxCy04iZVNMpLB0ePBSsTAY/
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:07 2025 by rpki-client