Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          1DdlFYP2M5hUWDA+dtEyCsXRrd20LFLp16cycNV+gPY=
Subject key identifier:   25:C9:AB:CB:89:E2:38:BE:10:09:78:8A:7A:56:2D:72:EE:34:64:6A
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       08EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          08E4
Signing time:             Sat 18 Oct 2025 21:30:43 +0000
Manifest this update:     Sat 18 Oct 2025 21:30:43 +0000
Manifest next update:     Sat 25 Oct 2025 21:30:43 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: 7a5TnoLeotB3TaRKgiHPB22OkIQZXgELgMz468IIALc=)
                          2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: xfShO1VY02IlimsR5UFqO1U8WhpdFohjlqZyHRKoITk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Oct 18 21:30:43 2025 GMT
            Not After : Oct 25 21:30:43 2025 GMT
        Subject: CN=68f40703-a0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:92:48:2f:13:91:3f:7d:02:bd:9f:25:86:
                    8f:55:84:f7:f5:5b:31:07:7d:b6:f6:05:9d:18:7c:
                    11:82:fd:6b:36:0d:69:89:e0:21:89:70:e2:86:e6:
                    12:00:f1:32:44:f7:ad:6e:f1:c8:74:62:8a:6a:cf:
                    2e:23:88:2c:d8:36:7c:1d:29:36:5b:4e:6b:dd:f6:
                    52:e4:c4:b9:41:0f:c3:55:97:91:f6:d2:4c:dc:6c:
                    23:7f:f5:7b:fe:c2:b9:0b:cc:3f:c4:87:a0:07:05:
                    fc:7b:0f:60:79:cf:1f:f9:26:fe:19:ed:d8:1a:0a:
                    c9:ae:b1:5f:39:d6:ad:51:cf:4e:3e:6b:70:61:0c:
                    16:c5:29:fb:44:13:68:21:48:91:3f:94:55:3b:8b:
                    1f:18:a7:b1:a6:43:f7:41:06:25:44:6f:dc:2f:5e:
                    fd:0a:d2:67:43:b6:ad:8c:fa:88:00:13:65:ca:f4:
                    86:76:df:50:d4:c5:7a:99:20:5e:da:bc:cc:5f:f1:
                    da:89:1e:5f:3f:14:6a:ce:6d:a5:3a:e4:17:02:80:
                    6d:72:68:6d:a7:5b:9f:ca:75:9f:41:36:07:44:42:
                    4c:f0:0d:8c:b3:69:84:13:a7:91:1c:5d:11:7b:1e:
                    d9:b5:f2:60:e9:2f:38:d8:b3:ff:97:ca:65:ca:ab:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:AB:CB:89:E2:38:BE:10:09:78:8A:7A:56:2D:72:EE:34:64:6A
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:42:d5:0c:1f:3f:3e:06:72:ff:f6:d6:22:7a:30:91:57:32:
         d6:85:16:f8:c8:6e:4c:94:a2:80:5a:a9:f4:61:b1:80:37:8d:
         45:e2:fd:f6:46:97:f0:85:d4:0e:68:dd:53:f1:01:de:70:2f:
         eb:42:6b:da:f1:61:94:a9:95:24:74:3d:0a:e8:cb:ea:36:bb:
         5b:60:b7:a8:e4:7c:34:6f:1e:3f:a3:85:27:bf:8b:89:e2:59:
         6b:22:0b:21:cc:17:23:da:72:3e:f6:27:70:c9:9d:cc:be:13:
         a6:ca:07:1b:a5:49:1f:a7:53:c5:0f:a8:88:b9:df:a4:c4:3f:
         63:16:10:84:82:36:97:64:f5:2e:3d:cb:83:85:eb:b4:e2:e2:
         b4:07:57:65:e6:c0:b6:fd:51:9c:87:51:f3:36:2d:96:58:7c:
         ce:25:89:81:30:0d:e8:25:77:b4:f5:6b:18:74:9b:53:79:78:
         6c:d4:b2:7b:26:25:9a:f3:42:f2:1e:b2:ad:3f:a3:0a:ef:c8:
         eb:38:b2:23:d3:b9:79:36:1b:35:69:e3:de:a9:37:67:11:65:
         f4:70:d3:d6:4e:33:2f:66:43:6c:11:b1:cc:17:c6:ac:09:9d:
         c9:f9:8d:df:c6:2f:b8:8c:ef:4d:67:21:e3:2c:f7:d9:3c:02:
         3d:3e:e7:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE
NDdEMENCQTQwHhcNMjUxMDE4MjEzMDQzWhcNMjUxMDI1MjEzMDQzWjAYMRYwFAYD
VQQDEw02OGY0MDcwMy1hMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YeSSC8TkT99Ar2fJYaPVYT39VsxB3229gWdGHwRgv1rNg1pieAhiXDihuYS
APEyRPetbvHIdGKKas8uI4gs2DZ8HSk2W05r3fZS5MS5QQ/DVZeR9tJM3Gwjf/V7
/sK5C8w/xIegBwX8ew9gec8f+Sb+Ge3YGgrJrrFfOdatUc9OPmtwYQwWxSn7RBNo
IUiRP5RVO4sfGKexpkP3QQYlRG/cL179CtJnQ7atjPqIABNlyvSGdt9Q1MV6mSBe
2rzMX/HaiR5fPxRqzm2lOuQXAoBtcmhtp1ufynWfQTYHREJM8A2Ms2mEE6eRHF0R
ex7ZtfJg6S842LP/l8plyqvmzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXJq8uJ
4ji+EAl4inpWLXLuNGRqMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD
NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP
S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVQtUMHz8+BnL/9tYiejCRVzLWhRb4yG5MlKKAWqn0YbGAN41F4v32
RpfwhdQOaN1T8QHecC/rQmva8WGUqZUkdD0K6MvqNrtbYLeo5Hw0bx4/o4Unv4uJ
4llrIgshzBcj2nI+9idwyZ3MvhOmygcbpUkfp1PFD6iIud+kxD9jFhCEgjaXZPUu
PcuDheu04uK0B1dl5sC2/VGch1HzNi2WWHzOJYmBMA3oJXe09WsYdJtTeXhs1LJ7
JiWa80LyHrKtP6MK78jrOLIj07l5Nhs1aePeqTdnEWX0cNPWTjMvZkNsEbHMF8as
CZ3J+Y3fxi+4jO9NZyHjLPfZPAI9Pucb
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:34 2025 by rpki-client