Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File:                     U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier:          mE0cmM9sxb712fTo+A86psoaZJZko/t0dyUhBJtLBfY=
Subject key identifier:   1B:66:FC:68:74:B1:FC:B5:19:83:0F:99:ED:AA:1C:C8:7E:B3:52:60
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       058C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number:          0582
Signing time:             Sun 19 Oct 2025 00:56:47 +0000
Manifest this update:     Sun 19 Oct 2025 00:56:47 +0000
Manifest next update:     Sun 26 Oct 2025 00:56:47 +0000
Files and hashes:         1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: B3hsAFEprfvd+g2OxhDaHt/21NPQYs1STzZHj/bg0Yk=)
                          2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: bYFWsdvkvj/YP0lWqT722iQHX6ldCjoCu3l/f+mKfk8=)
                          3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: CWQZ2s8MFSjBmURLoXYowyPCs3y0c7wnZAfg2tROfa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Oct 19 00:56:47 2025 GMT
            Not After : Oct 26 00:56:47 2025 GMT
        Subject: CN=68f4374f-6d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:cf:c7:45:90:a9:14:09:cb:19:ca:78:85:
                    e2:4d:a8:43:00:25:7b:e0:5c:18:04:51:c6:f2:f7:
                    18:c6:f0:ae:a7:8d:30:a3:23:b4:6c:a7:f0:44:8f:
                    a1:54:a2:a2:64:73:4d:b2:b0:b6:69:8a:24:e5:9d:
                    cd:61:67:d3:35:52:d6:73:bd:ee:42:98:fd:28:b2:
                    82:0b:52:5a:12:f8:c7:dc:14:f1:91:82:e4:fa:65:
                    ea:72:26:b9:29:d7:64:65:ca:1c:e5:ea:2c:24:11:
                    d7:c6:e5:9c:c4:36:37:15:61:f6:5d:cd:c3:6a:a4:
                    9b:1a:8b:c7:24:fa:45:ee:da:bb:c0:71:3b:60:f4:
                    d0:00:42:4d:f4:8a:de:c9:06:e9:e6:60:2e:44:96:
                    23:f4:3e:52:ec:21:61:f7:e7:fd:82:97:68:4b:6d:
                    56:cf:f0:01:43:a5:c6:58:22:ba:88:2a:da:f8:e9:
                    10:38:0c:94:0e:00:a0:20:a4:99:ae:c1:5e:ff:df:
                    e8:a1:c1:a8:d2:2a:83:a0:b3:92:12:ae:d7:12:21:
                    13:2c:26:10:93:54:27:9e:a8:1e:8d:61:98:a0:f0:
                    3d:05:56:e8:02:fe:9b:e5:23:31:08:06:b8:10:a1:
                    e2:19:f5:9c:94:50:c2:06:87:6f:da:bd:63:a0:73:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:66:FC:68:74:B1:FC:B5:19:83:0F:99:ED:AA:1C:C8:7E:B3:52:60
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:45:bb:4c:7e:55:40:08:13:eb:55:9c:0f:14:67:b3:b6:7f:
         82:c2:e3:73:fa:39:de:98:e3:0b:1e:66:26:d2:01:a0:ff:7c:
         f5:2e:c3:a1:02:81:3f:3e:87:80:7a:56:8f:e5:f2:53:fc:3b:
         f0:fd:55:ae:68:27:c6:45:e2:b5:ae:67:07:4b:be:04:1a:74:
         b5:9f:fb:99:22:74:5b:73:96:3a:00:00:99:6b:a8:b5:fd:0a:
         dd:70:d9:44:d3:e2:53:65:74:d1:fe:ea:8b:69:55:73:07:e9:
         66:46:90:45:74:fe:ab:cf:34:cb:7d:10:cf:59:87:87:37:72:
         bb:e6:21:29:24:a9:a0:7e:65:91:bd:da:1c:cc:a9:cf:d6:8a:
         2a:5a:dc:f8:e0:08:a2:04:ed:92:b7:a7:d6:9b:bd:98:fb:01:
         97:c9:a9:17:49:5d:43:5f:a1:f8:a2:c2:ed:07:3f:70:19:e5:
         82:21:68:f0:f2:d9:ce:0a:1a:33:1b:60:18:25:c9:37:cb:ac:
         79:dd:a2:d3:7a:82:ee:6a:4d:a2:bd:b1:1d:8f:3f:39:c2:6c:
         0d:f2:c9:99:20:15:ab:0a:c3:fc:ec:1e:f7:16:b4:25:f7:2c:
         9a:d1:0b:10:50:2b:4a:32:07:ab:19:67:c5:ac:32:1c:bc:0b:
         46:d2:8c:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1
OTQ2QzJERDQwHhcNMjUxMDE5MDA1NjQ3WhcNMjUxMDI2MDA1NjQ3WjAYMRYwFAYD
VQQDEw02OGY0Mzc0Zi02ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03DPx0WQqRQJyxnKeIXiTahDACV74FwYBFHG8vcYxvCup40woyO0bKfwRI+h
VKKiZHNNsrC2aYok5Z3NYWfTNVLWc73uQpj9KLKCC1JaEvjH3BTxkYLk+mXqcia5
KddkZcoc5eosJBHXxuWcxDY3FWH2Xc3DaqSbGovHJPpF7tq7wHE7YPTQAEJN9Ire
yQbp5mAuRJYj9D5S7CFh9+f9gpdoS21Wz/ABQ6XGWCK6iCra+OkQOAyUDgCgIKSZ
rsFe/9/oocGo0iqDoLOSEq7XEiETLCYQk1QnnqgejWGYoPA9BVboAv6b5SMxCAa4
EKHiGfWclFDCBodv2r1joHMZdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtm/Gh0
sfy1GYMPme2qHMh+s1JgMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3
NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV
anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKRbtMflVACBPrVZwPFGeztn+CwuNz+jnemOMLHmYm0gGg/3z1LsOh
AoE/PoeAelaP5fJT/Dvw/VWuaCfGReK1rmcHS74EGnS1n/uZInRbc5Y6AACZa6i1
/QrdcNlE0+JTZXTR/uqLaVVzB+lmRpBFdP6rzzTLfRDPWYeHN3K75iEpJKmgfmWR
vdoczKnP1ooqWtz44AiiBO2St6fWm72Y+wGXyakXSV1DX6H4osLtBz9wGeWCIWjw
8tnOChozG2AYJck3y6x53aLTeoLuak2ivbEdjz85wmwN8smZIBWrCsP87B73FrQl
9yya0QsQUCtKMgerGWfFrDIcvAtG0oyN
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:55 2025 by rpki-client