Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
File:                     T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json)
Hash identifier:          GGtr7KNTLUSX03H609EMtigE5eJQVRc7OqNncC8mdGQ=
Subject key identifier:   B0:FA:29:28:AB:0A:7E:79:2A:6D:4E:54:DE:EC:15:43:96:17:53:A0
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Certificate issuer:       /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
Manifest number:          70
Signing time:             Sun 19 Oct 2025 10:14:25 +0000
Manifest this update:     Sun 19 Oct 2025 10:14:25 +0000
Manifest next update:     Sun 26 Oct 2025 10:14:25 +0000
Files and hashes:         1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: iB5jf23drXLi2ZguIz50CPM7n4Ei1gdw2+zHWt4KegE=)
                          2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
        Validity
            Not Before: Oct 19 10:14:25 2025 GMT
            Not After : Oct 26 10:14:25 2025 GMT
        Subject: CN=68f4ba01-ff6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:43:4b:9d:23:13:4a:9d:06:2c:45:2f:72:
                    97:76:09:7c:1a:04:51:1e:09:8e:6c:28:a5:d1:c0:
                    6c:8b:cc:ec:5c:8b:ce:98:e4:a4:04:03:b8:30:d0:
                    33:17:54:bd:37:d7:ce:c6:98:42:0a:47:43:83:35:
                    d9:9e:be:6b:88:3a:19:75:00:41:af:f5:3d:9b:d7:
                    c3:0e:84:3c:ac:fa:70:22:c0:05:ad:d2:cc:04:8e:
                    cb:69:ff:38:de:be:82:22:c7:9b:72:87:9f:a2:9f:
                    88:2b:8e:65:06:e2:5f:68:7a:bc:c9:5b:46:f4:54:
                    d0:67:d0:46:24:35:5a:10:97:62:cc:1f:81:6d:89:
                    cd:ae:3f:e7:e2:76:b2:94:ae:3e:b8:f6:62:d2:87:
                    74:57:be:e5:10:fd:73:f0:6a:7c:3c:2c:d5:7d:f0:
                    6b:73:e3:72:6e:ee:77:2b:f0:69:38:7c:15:7a:63:
                    69:53:b4:16:0d:f6:23:88:a7:ca:6d:da:4f:a4:f3:
                    f4:3f:88:01:d8:72:f6:27:8e:03:80:6f:14:2b:d2:
                    99:cc:3a:1a:e4:8c:e0:a2:9e:38:97:4c:31:6d:f1:
                    1e:66:39:1a:2c:f3:9f:ee:4e:39:98:72:f8:d7:1c:
                    d0:77:97:18:a2:c3:05:02:4f:d8:34:25:05:86:3f:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FA:29:28:AB:0A:7E:79:2A:6D:4E:54:DE:EC:15:43:96:17:53:A0
            X509v3 Authority Key Identifier:
                keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:27:bf:78:6b:bf:ae:cf:cc:12:f0:2f:62:22:53:8c:b0:c5:
         77:08:f8:fe:f8:4b:b3:18:0b:1a:74:f2:43:c0:94:e4:76:45:
         a5:aa:9d:52:66:05:46:0b:a5:45:54:24:18:79:e0:19:2d:6d:
         86:84:52:77:a7:e4:b6:16:b7:70:f7:65:b1:36:ac:f4:e3:ee:
         c8:11:a6:65:64:49:c2:b5:cc:a9:8b:44:0f:83:c6:2d:4b:f9:
         a6:c5:7f:b2:4a:df:3a:1a:17:9a:0b:26:75:f1:69:35:2b:93:
         23:3d:4b:09:f9:2e:77:8d:4d:7a:59:8a:ec:4e:ba:a0:9f:de:
         d9:a9:bd:68:01:27:d6:d8:12:df:74:1c:6e:6f:14:75:96:d7:
         2f:bb:5e:e1:e5:72:3c:be:01:fa:43:24:26:70:d2:43:62:d1:
         fa:cb:b1:63:ca:2e:b7:6d:ee:9f:48:5e:65:a8:28:3c:ac:4b:
         68:25:62:7d:96:27:9d:3c:a9:00:f3:bc:50:c0:47:fc:4e:3d:
         65:2e:2c:a3:db:df:31:fc:2b:32:d9:a7:27:0d:ff:6a:15:93:
         1c:80:a4:b3:c6:8e:c0:76:6d:5f:9a:f1:bc:8b:f0:6b:99:cc:
         8e:c4:ac:27:a9:dc:78:97:ac:78:27:df:d8:05:f8:c2:02:9a:
         3b:59:e5:55
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MzhGNTExMC8GA1UEBRMoNEZGNTRERUFCQUQ0OTQ1NTkyNTEwMTJBQTVBQzIyMjk1
MENCMjYxRTAeFw0yNTEwMTkxMDE0MjVaFw0yNTEwMjYxMDE0MjVaMBgxFjAUBgNV
BAMTDTY4ZjRiYTAxLWZmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7TkNLnSMTSp0GLEUvcpd2CXwaBFEeCY5sKKXRwGyLzOxci86Y5KQEA7gw0DMX
VL03187GmEIKR0ODNdmevmuIOhl1AEGv9T2b18MOhDys+nAiwAWt0swEjstp/zje
voIix5tyh5+in4grjmUG4l9oerzJW0b0VNBn0EYkNVoQl2LMH4Ftic2uP+fidrKU
rj649mLSh3RXvuUQ/XPwanw8LNV98Gtz43Ju7ncr8Gk4fBV6Y2lTtBYN9iOIp8pt
2k+k8/Q/iAHYcvYnjgOAbxQr0pnMOhrkjOCinjiXTDFt8R5mORos85/uTjmYcvjX
HNB3lxiiwwUCT9g0JQWGP01xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsPopKKsK
fnkqbU5U3uwVQ5YXU6AwHwYDVR0jBBgwFoAUT/VN6rrUlFWSUQEqpawiKVDLJh4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0YwMjYzRkYwMDI1
QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpo
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVF9WTjZyclVsRldTVVFFcXBhd2lLVkRMSmg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz
OEY1L0YwMjYzRkYwMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZX
U1VRRXFwYXdpS1ZETEpoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABEnv3hrv67PzBLwL2IiU4ywxXcI+P74S7MYCxp08kPAlOR2RaWqnVJm
BUYLpUVUJBh54BktbYaEUnen5LYWt3D3ZbE2rPTj7sgRpmVkScK1zKmLRA+Dxi1L
+abFf7JK3zoaF5oLJnXxaTUrkyM9Swn5LneNTXpZiuxOuqCf3tmpvWgBJ9bYEt90
HG5vFHWW1y+7XuHlcjy+AfpDJCZw0kNi0frLsWPKLrdt7p9IXmWoKDysS2glYn2W
J508qQDzvFDAR/xOPWUuLKPb3zH8KzLZpycN/2oVkxyApLPGjsB2bV+a8byL8GuZ
zI7ErCep3HiXrHgn39gF+MICmjtZ5VU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:56 2025 by rpki-client