Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          P+HBM5wA8maiJXUgsGvw10iaWjrC/h249A82w/T9gjY=
Subject key identifier:   46:DA:90:10:34:84:1D:CD:2F:63:0B:51:48:58:64:33:86:D9:D2:28
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       3534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          3504
Signing time:             Sat 18 Oct 2025 14:29:59 +0000
Manifest this update:     Sat 18 Oct 2025 14:29:59 +0000
Manifest next update:     Sat 25 Oct 2025 14:29:59 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: fP6P0xSFIaSQp2euVD3sh/ctOZvbzqLjRu7gYRXMEIE=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13620 (0x3534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Oct 18 14:29:59 2025 GMT
            Not After : Oct 25 14:29:59 2025 GMT
        Subject: CN=68f3a467-b5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:1d:a4:7e:30:d5:80:e6:65:2e:04:67:6c:
                    b6:ba:28:64:c7:de:e4:d7:9d:4c:a3:4b:34:fc:7a:
                    f8:41:49:3d:6f:37:f6:46:8c:80:03:b2:9f:e3:fd:
                    42:d7:c3:41:78:7e:42:0e:d3:99:5d:8e:32:ad:bd:
                    f9:c3:a1:51:ac:ba:fd:01:06:3f:fa:07:69:73:dd:
                    ae:5d:00:34:00:90:03:67:0e:da:59:99:6b:19:96:
                    e2:bc:6e:bf:12:75:3c:f3:35:44:31:94:07:4f:a4:
                    3a:65:8f:66:0e:e0:5f:26:2f:8e:01:1e:ae:d0:a1:
                    fa:b7:2f:8c:f1:9d:62:48:51:c7:94:39:66:4d:a3:
                    cc:74:57:f9:0b:1d:86:8b:1d:91:94:82:e3:a4:9a:
                    76:a5:eb:e1:ca:51:01:44:9b:0f:5d:78:94:97:84:
                    de:5b:38:54:8c:f5:45:f5:5f:7e:07:9b:22:e5:e3:
                    bc:36:21:88:2d:40:f9:5f:4d:ef:d1:50:7b:5b:45:
                    a3:c1:df:5f:51:66:21:cd:fb:c7:af:d6:28:1c:1c:
                    6e:0d:d5:69:4e:73:f0:6e:fe:d9:a6:fa:57:ad:3b:
                    22:bc:e9:d0:1a:f1:91:e4:8d:fb:69:2b:2c:20:12:
                    97:c2:8d:93:89:4a:50:f7:e9:0b:28:0a:26:b9:fa:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DA:90:10:34:84:1D:CD:2F:63:0B:51:48:58:64:33:86:D9:D2:28
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:46:82:b8:c0:e1:9f:0b:f6:16:5f:d3:b6:f9:b1:66:79:
         a6:91:27:72:d1:7b:af:0c:1c:a3:9b:93:b9:32:a8:db:95:d0:
         16:e5:c3:6f:35:eb:2d:92:b1:ac:4a:3e:57:12:49:11:ff:4e:
         6e:54:ab:80:6f:a4:4c:19:2c:ef:db:de:82:f7:89:51:34:4c:
         75:8c:8e:36:63:9e:23:a3:c2:de:3d:d8:77:88:02:79:c6:dc:
         1d:b7:b5:85:0f:ea:6a:17:51:5d:b5:20:a5:27:9d:94:4e:63:
         c2:eb:82:02:f0:94:53:73:e9:47:fc:c5:09:1b:e2:be:d8:67:
         99:3f:80:20:8d:d1:56:af:00:db:d4:e6:e8:13:f9:3b:61:a1:
         48:f9:56:39:88:02:ff:3e:87:f7:df:d8:b3:67:0d:09:36:72:
         b9:45:e1:e4:a1:a1:dc:f9:87:d9:a9:1a:53:28:7f:c8:c6:c8:
         0e:55:05:58:2d:37:4a:e4:e2:0b:df:2b:c1:05:76:ab:b2:f9:
         24:b3:56:fb:b6:16:54:ea:81:07:37:15:47:4a:37:65:3d:50:
         3e:29:d8:b2:12:9b:d4:77:be:c3:c5:8e:e6:fa:20:53:05:a3:
         7b:54:c1:69:89:36:33:f9:d0:b7:6c:02:58:58:6e:4b:8d:87:
         eb:d9:71:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1
NTIwMUUzNjgwHhcNMjUxMDE4MTQyOTU5WhcNMjUxMDI1MTQyOTU5WjAYMRYwFAYD
VQQDEw02OGYzYTQ2Ny1iNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0AQdpH4w1YDmZS4EZ2y2uihkx97k151Mo0s0/Hr4QUk9bzf2RoyAA7Kf4/1C
18NBeH5CDtOZXY4yrb35w6FRrLr9AQY/+gdpc92uXQA0AJADZw7aWZlrGZbivG6/
EnU88zVEMZQHT6Q6ZY9mDuBfJi+OAR6u0KH6ty+M8Z1iSFHHlDlmTaPMdFf5Cx2G
ix2RlILjpJp2pevhylEBRJsPXXiUl4TeWzhUjPVF9V9+B5si5eO8NiGILUD5X03v
0VB7W0Wjwd9fUWYhzfvHr9YoHBxuDdVpTnPwbv7ZpvpXrTsivOnQGvGR5I37aSss
IBKXwo2TiUpQ9+kLKAomufowCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbakBA0
hB3NL2MLUUhYZDOG2dIoMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE
ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ
T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7oUaCuMDhnwv2Fl/TtvmxZnmmkSdy0XuvDByjm5O5MqjbldAW5cNv
NestkrGsSj5XEkkR/05uVKuAb6RMGSzv296C94lRNEx1jI42Y54jo8LePdh3iAJ5
xtwdt7WFD+pqF1FdtSClJ52UTmPC64IC8JRTc+lH/MUJG+K+2GeZP4AgjdFWrwDb
1OboE/k7YaFI+VY5iAL/Pof339izZw0JNnK5ReHkoaHc+YfZqRpTKH/IxsgOVQVY
LTdK5OIL3yvBBXarsvkks1b7thZU6oEHNxVHSjdlPVA+KdiyEpvUd77DxY7m+iBT
BaN7VMFpiTYz+dC3bAJYWG5LjYfr2XHB
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:18 2025 by rpki-client