Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          HnYP1nroSMSX52tc5fLJnt+/KuTfeU1bQ4OtjYdmFc8=
Subject key identifier:   4F:C8:D5:DE:EF:04:0F:A8:EC:7F:6F:86:46:B2:06:B4:FC:D9:CE:4C
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0841
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          07FC
Signing time:             Sat 18 Oct 2025 22:30:31 +0000
Manifest this update:     Sat 18 Oct 2025 22:30:31 +0000
Manifest next update:     Sat 25 Oct 2025 22:30:31 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: JGb63OF4u8OVTJfEbW0aLg88bzDsZxTvLOJs5Cx+IME=)
                          2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=)
                          3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=)
                          4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=)
                          5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=)
                          6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=)
                          7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=)
                          8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=)
                          9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=)
                          11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Oct 18 22:30:31 2025 GMT
            Not After : Oct 25 22:30:31 2025 GMT
        Subject: CN=68f41507-28fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:fe:c9:65:f1:f1:35:3d:9a:02:c4:c9:43:
                    33:d8:77:13:75:e4:cc:2e:a9:d7:de:2a:ce:bb:7e:
                    23:18:84:b3:62:b9:80:d1:38:62:62:d0:77:c6:7b:
                    06:95:c8:19:70:c4:db:92:4c:ff:e5:cb:81:f7:8b:
                    8c:e3:95:15:48:92:e4:40:44:f9:97:db:5f:1e:86:
                    df:ce:1c:a7:db:35:eb:52:d4:4b:57:40:31:b2:70:
                    a6:de:b5:8f:50:91:c2:9b:8e:3a:c3:67:c8:72:17:
                    23:39:b3:3a:3a:9a:4d:b3:41:21:38:c1:a8:cb:f5:
                    08:4e:f3:f8:75:e5:0a:c8:38:d6:42:93:02:6b:3f:
                    d6:22:2a:12:a4:1b:d9:fa:d7:77:f4:a7:b9:01:ac:
                    ce:12:ea:03:98:b1:c4:86:3e:cd:88:0e:2f:d2:dc:
                    b4:df:13:04:ea:65:49:ce:04:87:7c:3c:7f:59:a5:
                    0c:36:3b:d3:91:45:7f:9f:c2:b2:bf:70:cc:6c:ee:
                    01:69:cc:63:32:3a:3f:21:3b:ed:ae:cb:7d:db:39:
                    84:13:9a:ba:11:ff:f7:c5:76:e6:bf:a1:88:ff:b5:
                    e6:21:ba:cd:04:6b:cd:64:4b:2c:24:5d:c0:e6:85:
                    c0:75:97:c3:35:17:da:2d:6a:5a:b6:8b:df:4f:99:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C8:D5:DE:EF:04:0F:A8:EC:7F:6F:86:46:B2:06:B4:FC:D9:CE:4C
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:86:cf:22:c2:df:b9:ab:ea:e7:be:13:7a:f1:d4:de:3e:
         89:14:11:9b:c4:03:0f:d4:8f:a5:0a:58:f9:2f:a4:b1:8d:52:
         43:8e:7a:f4:b8:91:89:d3:c9:eb:8e:58:6d:79:d7:d4:64:9d:
         78:0e:a9:53:3a:76:c0:2a:b4:87:bf:1f:f4:6e:c6:34:3c:b1:
         15:73:ff:7e:85:13:92:66:18:00:3c:22:6f:32:17:5a:5f:d5:
         26:1d:1a:00:61:f7:2e:67:25:49:72:eb:e1:2d:8b:74:67:d3:
         97:cb:37:b6:91:dc:a8:10:3a:84:bc:b5:f8:a5:2f:0d:35:f0:
         40:a4:6e:8d:c1:4f:88:4f:8c:f7:98:49:ed:6b:b7:22:c2:ba:
         e2:33:de:31:88:97:a3:e3:41:3b:0c:88:4a:df:5d:a8:b5:59:
         7e:42:7e:34:a3:34:43:83:87:2c:e6:ff:1f:33:a4:fa:06:dc:
         05:d3:10:63:73:8e:15:9e:ac:67:33:68:4e:9f:53:62:b0:58:
         83:b8:46:eb:5c:96:9a:70:07:8d:e4:ea:82:be:25:05:62:08:
         8f:e2:a3:e8:bd:ef:e0:7d:bb:66:e4:06:85:67:10:3f:8c:5a:
         52:e0:88:5d:9f:ae:d5:08:41:2d:f0:d4:d9:93:03:70:21:af:
         36:69:72:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3
NDRBQUY0ODAwHhcNMjUxMDE4MjIzMDMxWhcNMjUxMDI1MjIzMDMxWjAYMRYwFAYD
VQQDEw02OGY0MTUwNy0yOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJb+yWXx8TU9mgLEyUMz2HcTdeTMLqnX3irOu34jGISzYrmA0ThiYtB3xnsG
lcgZcMTbkkz/5cuB94uM45UVSJLkQET5l9tfHobfzhyn2zXrUtRLV0AxsnCm3rWP
UJHCm446w2fIchcjObM6OppNs0EhOMGoy/UITvP4deUKyDjWQpMCaz/WIioSpBvZ
+td39Ke5AazOEuoDmLHEhj7NiA4v0ty03xME6mVJzgSHfDx/WaUMNjvTkUV/n8Ky
v3DMbO4BacxjMjo/ITvtrst92zmEE5q6Ef/3xXbmv6GI/7XmIbrNBGvNZEssJF3A
5oXAdZfDNRfaLWpatovfT5mwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/I1d7v
BA+o7H9vhkayBrT82c5MMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx
Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv
ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsYIbPIsLfuavq574TevHU3j6JFBGbxAMP1I+lClj5L6SxjVJDjnr0
uJGJ08nrjlhtedfUZJ14DqlTOnbAKrSHvx/0bsY0PLEVc/9+hROSZhgAPCJvMhda
X9UmHRoAYfcuZyVJcuvhLYt0Z9OXyze2kdyoEDqEvLX4pS8NNfBApG6NwU+IT4z3
mEnta7ciwrriM94xiJej40E7DIhK312otVl+Qn40ozRDg4cs5v8fM6T6BtwF0xBj
c44VnqxnM2hOn1NisFiDuEbrXJaacAeN5OqCviUFYgiP4qPove/gfbtm5AaFZxA/
jFpS4Ihdn67VCEEt8NTZkwNwIa82aXJ6
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:16 2025 by rpki-client