Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File:                     S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier:          0o0RLmbbEpMfSUI3b5rA4w6G9gCE8mH5LW8BBaxG8bQ=
Subject key identifier:   65:43:DF:74:41:BB:49:DE:9D:7F:9D:C9:48:EA:07:C9:C7:5E:4A:28
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0B45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number:          0B3E
Signing time:             Sat 18 Oct 2025 20:07:42 +0000
Manifest this update:     Sat 18 Oct 2025 20:07:41 +0000
Manifest next update:     Sat 25 Oct 2025 20:07:41 +0000
Files and hashes:         1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: uqv3jOIvTFPtssVp+EqSGO+DPxjLfA9PCF8BsxK+1uc=)
                          2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2885 (0xb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Oct 18 20:07:41 2025 GMT
            Not After : Oct 25 20:07:41 2025 GMT
        Subject: CN=68f3f38d-0a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:a2:f3:d2:df:c3:19:cd:cf:40:78:fa:97:
                    39:9a:f5:46:f9:6e:12:56:54:24:5e:40:19:0a:d2:
                    ff:06:79:ec:93:81:1c:25:9d:d3:8c:50:59:f7:c3:
                    73:3c:88:29:eb:f8:1f:04:51:2b:a5:46:e1:4a:62:
                    a7:1c:b5:92:4c:79:7a:49:b5:4b:f3:fe:9e:3e:29:
                    24:2c:b6:d5:0e:70:a4:92:41:24:94:24:2b:90:19:
                    39:c2:87:f8:95:77:5b:ee:3b:9f:ad:dc:29:cc:bc:
                    e6:92:40:a9:77:75:1e:da:4b:d9:8f:d2:26:ec:6a:
                    e9:86:48:d8:79:48:65:91:6a:7d:f2:cf:62:9c:bd:
                    06:12:e9:12:a3:2c:b6:4d:6d:ac:d3:d1:8f:45:2b:
                    d7:28:7e:2f:d3:94:73:ac:a4:92:58:74:82:69:5d:
                    aa:ce:31:99:09:48:7d:f9:70:0d:ae:c5:86:77:4f:
                    e5:c3:ef:8e:ff:2e:5f:de:9d:52:6d:3e:c1:b8:d9:
                    44:e4:a6:91:fa:c3:00:db:26:59:31:d3:56:7e:d8:
                    5b:70:df:96:89:b5:81:1e:61:68:e0:5c:d7:0a:a3:
                    a4:c5:a6:d9:58:36:37:70:2e:f3:55:c0:b1:f8:18:
                    91:87:36:4a:0d:63:69:72:b1:42:45:88:c5:b7:c8:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:43:DF:74:41:BB:49:DE:9D:7F:9D:C9:48:EA:07:C9:C7:5E:4A:28
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:25:f7:b5:c3:e5:97:45:df:ac:76:db:0d:54:a3:96:74:
         37:67:49:24:89:47:ea:c9:2d:8a:e7:08:d3:93:ae:c7:db:f4:
         7d:85:2b:17:69:10:34:34:c4:74:80:83:03:b3:d3:5e:3b:00:
         ea:e3:7e:ce:35:f3:88:b1:63:69:f5:fd:01:9a:dc:b7:9d:21:
         6c:11:2e:cd:6a:6b:ef:da:53:89:7b:fd:24:7d:02:04:82:d9:
         0e:ff:73:77:69:20:de:60:72:bf:1b:1d:e3:76:54:af:39:75:
         b1:be:9a:70:0d:70:6a:c6:45:c1:72:18:b9:0a:63:d1:fe:31:
         c9:6d:87:a3:9c:1b:d2:12:7f:f5:5b:59:a7:f1:35:ec:19:bd:
         36:9b:54:53:57:73:28:ca:b3:46:48:a9:6c:da:ea:38:37:b3:
         5c:9f:34:d2:32:a4:e6:e9:d2:04:16:e1:cb:c1:1c:6a:b6:17:
         0e:eb:9d:6d:f8:3e:eb:6d:63:da:5d:21:71:3b:9a:7c:21:21:
         4f:49:2d:89:6b:72:93:9d:d6:c1:2f:fa:36:22:a0:5d:f6:6c:
         b3:28:27:1f:af:d3:f0:3e:10:55:3c:a3:1f:87:bb:75:ca:a8:
         c3:8c:b7:ac:19:12:e6:f4:3b:41:57:e4:48:e7:f3:c0:9f:d3:
         bb:4b:26:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw
RjcyODdDOUEwHhcNMjUxMDE4MjAwNzQxWhcNMjUxMDI1MjAwNzQxWjAYMRYwFAYD
VQQDEw02OGYzZjM4ZC0wYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyOqi89LfwxnNz0B4+pc5mvVG+W4SVlQkXkAZCtL/Bnnsk4EcJZ3TjFBZ98Nz
PIgp6/gfBFErpUbhSmKnHLWSTHl6SbVL8/6ePikkLLbVDnCkkkEklCQrkBk5wof4
lXdb7jufrdwpzLzmkkCpd3Ue2kvZj9Im7GrphkjYeUhlkWp98s9inL0GEukSoyy2
TW2s09GPRSvXKH4v05RzrKSSWHSCaV2qzjGZCUh9+XANrsWGd0/lw++O/y5f3p1S
bT7BuNlE5KaR+sMA2yZZMdNWfthbcN+WibWBHmFo4FzXCqOkxabZWDY3cC7zVcCx
+BiRhzZKDWNpcrFCRYjFt8jcwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVD33RB
u0nenX+dyUjqB8nHXkooMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1
QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH
LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcxCX3tcPll0XfrHbbDVSjlnQ3Z0kkiUfqyS2K5wjTk67H2/R9hSsX
aRA0NMR0gIMDs9NeOwDq437ONfOIsWNp9f0Bmty3nSFsES7Namvv2lOJe/0kfQIE
gtkO/3N3aSDeYHK/Gx3jdlSvOXWxvppwDXBqxkXBchi5CmPR/jHJbYejnBvSEn/1
W1mn8TXsGb02m1RTV3MoyrNGSKls2uo4N7NcnzTSMqTm6dIEFuHLwRxqthcO651t
+D7rbWPaXSFxO5p8ISFPSS2Ja3KTndbBL/o2IqBd9myzKCcfr9PwPhBVPKMfh7t1
yqjDjLesGRLm9DtBV+RI5/PAn9O7SyZd
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:15 2025 by rpki-client