Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
File:                     tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json)
Hash identifier:          Zsjgyztbon/7/RC0XhJJPY+28TFI4qH5PKZ5mXLKpsc=
Subject key identifier:   E5:06:A9:EF:78:DE:E4:86:2D:6B:D0:96:95:91:49:80:9E:19:1A:0E
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Certificate issuer:       /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
Manifest number:          1D
Signing time:             Sun 19 Oct 2025 11:21:11 +0000
Manifest this update:     Sun 19 Oct 2025 11:21:10 +0000
Manifest next update:     Sun 26 Oct 2025 11:21:10 +0000
Files and hashes:         1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: KNHQALpEDObyyPd4lILOYdGbh+oBmlLxK3pJkSE8nx8=)
                          2: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: 4bcnfZJKTPDDeyNdHgj7RafzwnOWjUaA8+FGoC8oOtU=)
                          3: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: l8LhCuq+T1sKUB7SQKQReUgSY0Aj/z/i1GPpIkc0AeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
        Validity
            Not Before: Oct 19 11:21:10 2025 GMT
            Not After : Oct 26 11:21:10 2025 GMT
        Subject: CN=68f4c9a7-c662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:c6:02:5a:0d:32:bb:0d:25:0d:46:3f:bc:
                    2d:de:59:42:a2:ad:6a:b4:1a:94:3b:f9:89:25:24:
                    b7:c9:f2:89:e0:ee:29:07:84:0d:6e:2a:a4:00:71:
                    06:dd:f1:61:c0:8c:f9:36:28:6d:5a:df:c0:cc:22:
                    d2:11:09:22:dc:48:80:72:ef:95:8b:ff:64:a3:40:
                    bc:f1:40:ed:73:40:ef:6d:19:5a:19:b2:79:33:0a:
                    c9:ed:d8:5c:f3:27:03:dc:13:f8:96:56:86:9d:5f:
                    56:59:d6:20:58:86:c6:98:88:87:d3:8a:1e:d5:83:
                    16:59:7b:f7:c5:a6:c3:0e:8b:ec:06:9b:27:54:c4:
                    dd:52:cf:86:04:d6:98:fb:7b:62:64:6e:f5:92:f4:
                    34:e4:b2:c0:4f:83:40:e2:af:bc:74:ea:b9:16:57:
                    6c:b4:57:2a:c1:a0:03:e6:a7:4f:08:d0:fc:9c:94:
                    f5:37:0f:2c:86:8e:9f:05:f4:20:0a:01:fb:97:1c:
                    2d:71:26:7a:23:1c:de:ed:4a:97:b6:73:da:86:2e:
                    78:a0:8b:bf:0f:00:2b:fc:25:db:84:24:88:97:57:
                    c5:fa:f4:69:50:e4:84:a7:77:e1:e2:bc:dc:3b:2f:
                    de:c6:31:06:05:a8:ac:5f:af:10:4d:05:3f:cf:c6:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:06:A9:EF:78:DE:E4:86:2D:6B:D0:96:95:91:49:80:9E:19:1A:0E
            X509v3 Authority Key Identifier:
                keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:f1:8b:e2:2e:39:d5:b2:45:70:8d:9f:9f:d0:5b:07:ac:
         6b:0f:ca:cb:87:3f:e9:ba:50:60:46:fe:65:7e:7f:cd:9d:c5:
         2b:94:68:14:7b:10:5f:22:fc:dc:d8:69:68:b5:55:47:1f:8c:
         58:14:d5:9d:02:31:c5:f8:2f:48:73:00:48:43:6c:1d:ac:a3:
         b8:7b:25:03:7b:e9:71:c6:ce:49:5f:a2:85:4b:b1:4c:47:2a:
         63:6a:56:f7:7d:aa:91:5d:cb:23:52:43:0d:c7:82:d4:48:c3:
         67:5d:c8:b5:30:9c:47:2b:f0:5e:4c:91:b3:39:24:1f:a8:8c:
         88:da:da:7c:93:14:39:1f:90:0f:46:27:22:fa:fa:6e:8e:45:
         b5:57:da:b4:3b:b4:93:60:19:7f:99:f4:95:00:4c:51:ad:79:
         cb:db:25:47:52:e8:7e:91:9a:1b:aa:7e:69:8e:3e:81:23:2a:
         c8:b0:7e:01:08:d3:95:c9:35:61:67:b4:84:90:e1:b6:4e:1e:
         4b:03:60:40:cd:d6:d0:9d:22:c7:ac:c5:b3:28:da:bb:89:41:
         7b:d2:bf:96:09:3d:2c:5d:6d:72:29:77:c7:1a:98:9f:f2:f9:
         2d:af:11:aa:43:18:5e:f8:33:1a:45:fd:f6:43:64:cc:db:45:
         8e:50:91:6d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjZDRDExMC8GA1UEBRMoQjRGQkUzNEFCNzY2MTJBOUQyMEFFNTJCMEFEQjQxRkNG
ODBBMTJGRjAeFw0yNTEwMTkxMTIxMTBaFw0yNTEwMjYxMTIxMTBaMBgxFjAUBgNV
BAMTDTY4ZjRjOWE3LWM2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0kcYCWg0yuw0lDUY/vC3eWUKirWq0GpQ7+YklJLfJ8ong7ikHhA1uKqQAcQbd
8WHAjPk2KG1a38DMItIRCSLcSIBy75WL/2SjQLzxQO1zQO9tGVoZsnkzCsnt2Fzz
JwPcE/iWVoadX1ZZ1iBYhsaYiIfTih7VgxZZe/fFpsMOi+wGmydUxN1Sz4YE1pj7
e2JkbvWS9DTkssBPg0Dir7x06rkWV2y0VyrBoAPmp08I0PyclPU3DyyGjp8F9CAK
AfuXHC1xJnojHN7tSpe2c9qGLnigi78PACv8JduEJIiXV8X69GlQ5ISnd+HivNw7
L97GMQYFqKxfrxBNBT/PxmnlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Qap73je
5IYta9CWlZFJgJ4ZGg4wHwYDVR0jBBgwFoAUtPvjSrdmEqnSCuUrCttB/PgKEv8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNkNELzMzM0JDNjA4ODE2
RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdFB2alNyZG1FcW5TQ3VVckN0dEJfUGdLRXY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
NkNELzMzM0JDNjA4ODE2RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFu
U0N1VXJDdHRCX1BnS0V2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIpn8YviLjnVskVwjZ+f0FsHrGsPysuHP+m6UGBG/mV+f82dxSuUaBR7
EF8i/NzYaWi1VUcfjFgU1Z0CMcX4L0hzAEhDbB2so7h7JQN76XHGzklfooVLsUxH
KmNqVvd9qpFdyyNSQw3HgtRIw2ddyLUwnEcr8F5MkbM5JB+ojIja2nyTFDkfkA9G
JyL6+m6ORbVX2rQ7tJNgGX+Z9JUATFGtecvbJUdS6H6RmhuqfmmOPoEjKsiwfgEI
05XJNWFntISQ4bZOHksDYEDN1tCdIsesxbMo2ruJQXvSv5YJPSxdbXIpd8camJ/y
+S2vEapDGF74MxpF/fZDZMzbRY5QkW0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:27 2025 by rpki-client