Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          Kc5mCZizGtOmqh9jXnyfKH4irKPJ9u/M0y0l+OFDNW4=
Subject key identifier:   51:91:A9:39:D9:40:ED:C8:01:81:CF:0C:A3:F1:49:C5:F6:2E:AB:1E
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          016E
Signing time:             Sun 19 Oct 2025 06:36:59 +0000
Manifest this update:     Sun 19 Oct 2025 06:36:58 +0000
Manifest next update:     Sun 26 Oct 2025 06:36:58 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: U9Eh2LRvA2ueBPg/tM9Rg41BA2tCleuoUX9QoNFHqIE=)
                          2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=)
                          3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: Oct 19 06:36:58 2025 GMT
            Not After : Oct 26 06:36:58 2025 GMT
        Subject: CN=68f4870a-727f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:67:f7:a2:53:fe:67:0c:a5:7f:92:c5:82:
                    b7:31:d7:2d:1f:ad:33:72:14:f7:9f:55:1e:54:e7:
                    8a:82:08:24:bd:56:94:9a:04:84:63:6d:eb:84:91:
                    3a:3c:8e:ef:54:f5:fb:54:c5:5a:58:68:70:69:c5:
                    7a:50:7c:16:5a:91:44:c7:ff:56:8b:d7:11:cd:75:
                    69:48:fa:e7:4d:32:cc:b3:50:0d:5c:da:a8:b8:e1:
                    f7:25:11:57:bf:00:64:67:1c:58:8f:85:84:49:12:
                    2a:d7:dd:fe:16:9a:f5:f7:84:33:23:7c:2a:ff:22:
                    36:6d:0b:f4:03:10:99:98:1d:4c:d5:e8:44:30:cb:
                    14:d7:75:46:ac:99:84:15:05:2a:62:6e:27:d0:9a:
                    27:48:66:de:a3:29:12:91:c7:26:4d:d1:65:47:8c:
                    0c:fe:ce:e6:2d:ff:d5:f9:16:2a:e8:4b:39:a8:fb:
                    fe:82:53:bb:ec:db:4a:df:18:23:3d:bc:43:a1:ac:
                    26:52:57:52:ee:db:41:0f:c5:1c:ec:bf:ac:c8:77:
                    4f:42:e2:8e:f4:cc:f5:e9:f0:e0:59:4b:48:96:d3:
                    28:72:73:e7:d6:8c:2e:a9:bb:5d:ac:1d:92:98:b3:
                    99:ed:ea:a3:6a:25:fc:35:19:ff:f0:90:ce:18:15:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:A9:39:D9:40:ED:C8:01:81:CF:0C:A3:F1:49:C5:F6:2E:AB:1E
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:b0:96:29:fc:be:64:33:81:2a:e6:3a:8e:81:58:c4:e6:
         da:3c:ca:36:8e:f6:2b:f3:58:2d:13:6e:37:01:65:fb:e0:14:
         90:dc:2b:28:38:38:aa:01:ba:3a:82:53:8c:3e:6f:1f:bc:d0:
         7f:13:8d:d3:34:6d:52:4e:c4:1d:bf:84:8b:22:80:32:ee:ff:
         d2:d0:3a:16:d8:12:d2:0a:72:9c:a6:a0:32:c8:a8:a0:67:86:
         9d:dc:22:fc:d7:a8:6f:80:9e:90:7e:c6:8a:ae:46:d2:e0:a9:
         2c:20:d1:10:89:38:bd:a5:7f:71:7c:16:e5:7b:98:66:0c:63:
         59:4f:96:78:9a:d0:df:17:27:73:bd:73:dd:ff:b0:01:dc:b4:
         8f:a9:1c:17:27:bb:13:9c:99:a6:08:26:ac:db:8d:cd:e3:29:
         2f:9b:e7:4c:0d:01:7b:70:2e:0d:8b:a1:71:ca:72:7c:b0:d5:
         b9:3f:d2:34:03:10:00:7a:bf:11:f1:3b:a0:0f:29:03:8a:d4:
         60:14:56:1c:b5:ed:51:e6:5d:62:8d:b8:ce:ce:d0:86:37:c1:
         b5:0b:f6:f1:ff:0e:48:cd:83:46:b4:52:dd:77:06:e7:84:b9:
         54:53:44:a0:6f:67:5e:66:06:ea:c3:37:bc:51:62:d7:65:3f:
         7b:01:59:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB
NTI4REYzQkUwHhcNMjUxMDE5MDYzNjU4WhcNMjUxMDI2MDYzNjU4WjAYMRYwFAYD
VQQDEw02OGY0ODcwYS03MjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJZn96JT/mcMpX+SxYK3MdctH60zchT3n1UeVOeKgggkvVaUmgSEY23rhJE6
PI7vVPX7VMVaWGhwacV6UHwWWpFEx/9Wi9cRzXVpSPrnTTLMs1ANXNqouOH3JRFX
vwBkZxxYj4WESRIq193+Fpr194QzI3wq/yI2bQv0AxCZmB1M1ehEMMsU13VGrJmE
FQUqYm4n0JonSGbeoykSkccmTdFlR4wM/s7mLf/V+RYq6Es5qPv+glO77NtK3xgj
PbxDoawmUldS7ttBD8Uc7L+syHdPQuKO9Mz16fDgWUtIltMocnPn1owuqbtdrB2S
mLOZ7eqjaiX8NRn/8JDOGBWBEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGRqTnZ
QO3IAYHPDKPxScX2LqseMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3
OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJv
M0dRaXJqVVhBX0tsS044NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBICrCWKfy+ZDOBKuY6joFYxObaPMo2jvYr81gtE243AWX74BSQ3Cso
ODiqAbo6glOMPm8fvNB/E43TNG1STsQdv4SLIoAy7v/S0DoW2BLSCnKcpqAyyKig
Z4ad3CL816hvgJ6QfsaKrkbS4KksINEQiTi9pX9xfBble5hmDGNZT5Z4mtDfFydz
vXPd/7AB3LSPqRwXJ7sTnJmmCCas243N4ykvm+dMDQF7cC4Ni6FxynJ8sNW5P9I0
AxAAer8R8TugDykDitRgFFYcte1R5l1ijbjOztCGN8G1C/bx/w5IzYNGtFLddwbn
hLlUU0Sgb2deZgbqwze8UWLXZT97AVmZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:30 2025 by rpki-client