Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File:                     ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier:          COAmy0K21TcY9OTmKXE9qfAOXdlJVPVwT+Vh3KeNxiY=
Subject key identifier:   79:4E:18:21:64:C6:24:E3:D9:FA:9C:F7:E9:83:9D:F6:D3:69:9F:59
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer:       /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number:          0174
Signing time:             Sun 19 Oct 2025 06:46:43 +0000
Manifest this update:     Sun 19 Oct 2025 06:46:42 +0000
Manifest next update:     Sun 26 Oct 2025 06:46:42 +0000
Files and hashes:         1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: 4GjRaUcZvKN8lzS/+wsq59y+oNuFQMk3BEYZjwWto0Q=)
                          2: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (hash: 42v/8WB31KluVgugWaqssdygke8Q1F8h8HksLJ872Jw=)
                          3: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: ZZF37Hfq3LjjYT+YFdLOw5WGtyeL8yUS6RmDGMnnQ7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
                          rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
        Validity
            Not Before: Oct 19 06:46:42 2025 GMT
            Not After : Oct 26 06:46:42 2025 GMT
        Subject: CN=68f48952-5165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:be:09:48:e2:b4:d0:43:97:8f:12:a6:34:
                    b3:dd:89:60:80:3f:83:13:37:4f:df:dc:6b:f3:ed:
                    c6:15:3c:c2:84:bc:f4:25:df:36:e7:07:24:bd:16:
                    3c:78:02:10:dd:a0:21:04:ec:3c:6a:0d:fd:c4:5a:
                    32:af:ac:db:4d:d0:9f:7f:af:26:b2:50:5a:f2:47:
                    9a:d2:98:68:b4:a2:ff:ad:b5:8b:60:36:ab:2f:f1:
                    81:ef:b2:ab:80:66:19:d0:dc:b5:8e:53:ff:4a:1d:
                    01:62:2e:d6:26:f5:b4:f7:07:cb:36:90:39:e5:b4:
                    88:e1:a4:d3:b0:3a:61:c7:81:c7:e6:54:82:f2:39:
                    ad:db:c6:82:fd:17:85:b7:8b:79:88:ab:6e:09:0c:
                    46:48:d7:a4:fb:58:db:74:1f:12:18:04:a9:b4:97:
                    03:69:cc:f7:ce:cf:02:3d:17:68:9b:7c:85:d1:22:
                    f4:d3:5b:f4:79:33:73:93:5f:36:3f:d0:da:3d:7b:
                    e3:83:5f:58:fb:6a:4a:c0:18:b0:67:b1:cb:aa:ca:
                    4e:fe:a5:54:b0:64:04:0d:40:32:8c:83:bc:c6:6e:
                    29:29:60:43:27:12:4d:b5:7a:6e:0c:99:6d:d7:a4:
                    a6:e5:33:fd:8a:36:84:d2:92:ec:e0:e6:ec:d2:88:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:18:21:64:C6:24:E3:D9:FA:9C:F7:E9:83:9D:F6:D3:69:9F:59
            X509v3 Authority Key Identifier:
                keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:de:53:9c:bf:9c:6b:f2:84:57:55:07:7a:41:49:5d:97:
         3e:18:dd:cc:ea:d9:94:a9:cf:39:6e:84:40:3a:b6:41:db:0f:
         c5:d8:4c:f8:0c:05:3f:af:d6:72:74:51:f5:24:db:86:78:e7:
         19:f5:43:ae:c8:6b:a6:89:56:ad:d3:ce:62:9e:38:7b:94:4f:
         4d:23:0b:6c:7a:bd:61:00:d2:a8:4d:1a:a5:50:5c:10:08:02:
         e7:f2:ed:fa:f5:24:aa:0c:8f:3b:46:18:74:4b:5e:ef:0a:fe:
         82:65:19:9a:aa:31:d3:f5:36:65:ed:b0:c9:f3:75:45:92:c1:
         26:af:de:23:90:1f:fb:1e:19:2c:98:38:bc:50:a1:f0:9b:bc:
         ae:5a:cb:c7:83:9a:1d:b5:61:db:7b:ca:1f:2f:e3:6e:23:34:
         05:cc:50:f6:be:ba:01:0f:b6:d5:7f:4f:c2:49:a3:f2:01:07:
         97:34:20:bc:3a:2e:0b:11:10:90:8e:0c:a1:f7:ee:ab:05:47:
         a5:0b:c4:ad:ae:f9:6c:8e:e3:c2:c9:33:ff:75:74:4d:09:b9:
         bb:fe:4f:39:fd:52:ed:7f:25:db:38:ec:79:d4:f2:10:f7:0b:
         16:1c:2c:68:74:85:c8:88:65:01:8e:18:a9:cc:2b:a9:5e:2b:
         bb:69:ae:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG
ODA5REUyNzYwHhcNMjUxMDE5MDY0NjQyWhcNMjUxMDI2MDY0NjQyWjAYMRYwFAYD
VQQDEw02OGY0ODk1Mi01MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsP2+CUjitNBDl48SpjSz3YlggD+DEzdP39xr8+3GFTzChLz0Jd825wckvRY8
eAIQ3aAhBOw8ag39xFoyr6zbTdCff68mslBa8kea0photKL/rbWLYDarL/GB77Kr
gGYZ0Ny1jlP/Sh0BYi7WJvW09wfLNpA55bSI4aTTsDphx4HH5lSC8jmt28aC/ReF
t4t5iKtuCQxGSNek+1jbdB8SGASptJcDacz3zs8CPRdom3yF0SL001v0eTNzk182
P9DaPXvjg19Y+2pKwBiwZ7HLqspO/qVUsGQEDUAyjIO8xm4pKWBDJxJNtXpuDJlt
16Sm5TP9ijaE0pLs4Obs0oijIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlOGCFk
xiTj2fqc9+mDnfbTaZ9ZMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1
OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE
aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJfd5TnL+ca/KEV1UHekFJXZc+GN3M6tmUqc85boRAOrZB2w/F2Ez4
DAU/r9ZydFH1JNuGeOcZ9UOuyGumiVat085injh7lE9NIwtser1hANKoTRqlUFwQ
CALn8u369SSqDI87Rhh0S17vCv6CZRmaqjHT9TZl7bDJ83VFksEmr94jkB/7Hhks
mDi8UKHwm7yuWsvHg5odtWHbe8ofL+NuIzQFzFD2vroBD7bVf0/CSaPyAQeXNCC8
Oi4LERCQjgyh9+6rBUelC8StrvlsjuPCyTP/dXRNCbm7/k85/VLtfyXbOOx51PIQ
9wsWHCxodIXIiGUBjhipzCupXiu7aa4N
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:58 2025 by rpki-client