Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          rbmlOPURNC6CJH5E2oUrRP4zjNbTasumL9MZmeizd9w=
Subject key identifier:   E5:05:A8:25:7C:F6:53:97:0D:E4:72:D1:B4:2A:D2:D5:B3:4D:CF:DF
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          080C
Signing time:             Sun 19 Oct 2025 02:14:59 +0000
Manifest this update:     Sun 19 Oct 2025 02:14:58 +0000
Manifest next update:     Sun 26 Oct 2025 02:14:58 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: iaWcd4n5UVn2STuCR30wvKhfZVn6kJZYV1t8mmkOlVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Oct 19 02:14:58 2025 GMT
            Not After : Oct 26 02:14:58 2025 GMT
        Subject: CN=68f449a2-9f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:06:12:cb:1f:4d:8f:c2:10:46:26:26:9f:
                    ba:ab:ea:2c:a9:7d:e1:cb:61:89:4b:31:43:25:8a:
                    ce:72:6a:1a:6e:a1:29:16:e4:8e:60:a0:09:a6:b2:
                    de:8a:c4:44:bb:48:8d:36:9d:68:73:8d:a9:5f:c0:
                    1e:89:98:0d:49:7b:5c:4a:e7:fb:00:a3:87:18:09:
                    46:a2:b5:00:19:32:c1:5d:c1:e8:38:c9:a0:b6:6e:
                    cf:12:fc:89:eb:a0:f2:86:8e:9c:de:16:93:ae:fc:
                    c5:9e:da:e7:fd:52:71:ea:bf:e1:fd:1e:9a:ff:ef:
                    14:5c:03:12:57:f0:01:29:ae:23:66:72:c4:b7:84:
                    dd:7e:dc:8f:d2:0e:0a:10:98:f1:84:83:c5:9c:0b:
                    85:9d:c6:83:33:07:3e:6b:31:3f:04:22:b5:ef:48:
                    60:3f:1a:bf:ac:af:ca:02:cf:18:18:dd:08:e1:07:
                    dc:b7:32:c0:4a:7e:2b:f2:3c:a0:35:02:be:6e:33:
                    88:36:20:cd:d2:c3:03:cc:74:fe:b8:bc:37:aa:85:
                    bf:ed:7b:8b:67:ed:90:0b:a5:e3:6c:fa:7e:c6:a1:
                    3f:bb:7c:b4:77:68:63:85:7c:46:ff:3c:cb:78:9a:
                    63:8d:1b:62:91:b1:df:85:76:bd:9d:b1:c6:ea:99:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:A8:25:7C:F6:53:97:0D:E4:72:D1:B4:2A:D2:D5:B3:4D:CF:DF
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4a:aa:e5:15:5f:37:6b:c6:4a:4b:75:6e:c5:8c:6e:f6:5c:
         9e:ea:fc:4c:95:6f:b1:4f:a3:1d:78:1e:ca:21:34:56:ec:d4:
         82:cb:3f:39:e0:57:1b:8c:8b:11:eb:9b:d1:47:6c:7b:ee:9b:
         c0:35:00:f7:1d:1a:3b:55:1f:0d:12:f4:62:a0:d5:a5:df:88:
         09:e8:48:36:69:0e:39:54:d6:b2:21:ef:60:87:db:7f:7e:74:
         fb:f8:a6:a2:e9:ed:87:94:b4:3d:83:5c:5e:58:42:18:b9:db:
         35:3b:f0:a5:f7:63:90:e3:b7:22:92:84:e1:ca:80:dd:c0:88:
         07:25:12:2a:84:a5:d2:1a:d9:fd:bb:58:68:72:68:0c:b6:25:
         d0:22:33:e1:4d:1b:b8:91:d1:6d:c5:d8:84:a7:21:26:78:37:
         94:81:59:ac:37:19:eb:a3:ec:41:f7:86:91:ef:5e:f4:72:05:
         d2:72:dd:6e:1c:01:95:4b:05:e4:58:e3:22:81:ae:45:84:18:
         79:0f:ba:ad:05:34:6f:6c:a5:c7:d3:05:5f:b7:de:0a:50:ed:
         d4:0b:0f:c2:67:09:2a:9c:30:d8:41:8f:56:4f:0e:ac:60:1a:
         8c:db:94:47:02:bc:82:be:6d:55:85:8a:d2:7b:c6:6d:ef:80:
         80:02:c0:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE
RjYzQzg2Q0QwHhcNMjUxMDE5MDIxNDU4WhcNMjUxMDI2MDIxNDU4WjAYMRYwFAYD
VQQDEw02OGY0NDlhMi05ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6UGEssfTY/CEEYmJp+6q+osqX3hy2GJSzFDJYrOcmoabqEpFuSOYKAJprLe
isREu0iNNp1oc42pX8AeiZgNSXtcSuf7AKOHGAlGorUAGTLBXcHoOMmgtm7PEvyJ
66Dyho6c3haTrvzFntrn/VJx6r/h/R6a/+8UXAMSV/ABKa4jZnLEt4TdftyP0g4K
EJjxhIPFnAuFncaDMwc+azE/BCK170hgPxq/rK/KAs8YGN0I4QfctzLASn4r8jyg
NQK+bjOINiDN0sMDzHT+uLw3qoW/7XuLZ+2QC6XjbPp+xqE/u3y0d2hjhXxG/zzL
eJpjjRtikbHfhXa9nbHG6pmoWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUFqCV8
9lOXDeRy0bQq0tWzTc/fMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy
NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z
ZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2SqrlFV83a8ZKS3VuxYxu9lye6vxMlW+xT6MdeB7KITRW7NSCyz85
4FcbjIsR65vRR2x77pvANQD3HRo7VR8NEvRioNWl34gJ6Eg2aQ45VNayIe9gh9t/
fnT7+Kai6e2HlLQ9g1xeWEIYuds1O/Cl92OQ47cikoThyoDdwIgHJRIqhKXSGtn9
u1hocmgMtiXQIjPhTRu4kdFtxdiEpyEmeDeUgVmsNxnro+xB94aR7170cgXSct1u
HAGVSwXkWOMiga5FhBh5D7qtBTRvbKXH0wVft94KUO3UCw/CZwkqnDDYQY9WTw6s
YBqM25RHAryCvm1VhYrSe8Zt74CAAsB4
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:17 2025 by rpki-client