Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File:                     HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier:          UFAMiVGn0LfBJRerSl6aZnyyo2XzyTuBO9iUtHFH718=
Subject key identifier:   49:E8:A0:EE:E5:D6:ED:1E:28:97:C2:1E:95:FE:96:77:3B:49:73:AB
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number:          0195
Signing time:             Sun 19 Oct 2025 05:58:46 +0000
Manifest this update:     Sun 19 Oct 2025 05:58:46 +0000
Manifest next update:     Sun 26 Oct 2025 05:58:46 +0000
Files and hashes:         1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: /H6Grv5tMNVOXp8iSZE0GODIlTNqrORXSB5dBvd4iOo=)
                          2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: kMBmqA1/dyDv1ZADsMkGis7eLU/R9lLG3vYr3JHV36o=)
                          3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: yui+zHagVlKqBtz9x/Tip9C5MuNKw1xwiJ1l2T37XAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Oct 19 05:58:46 2025 GMT
            Not After : Oct 26 05:58:46 2025 GMT
        Subject: CN=68f47e16-cb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:9d:ec:57:2f:d8:33:75:a0:5e:84:74:d5:
                    d5:09:83:fb:00:98:a1:fe:c0:d2:fe:2d:18:9e:29:
                    ee:b6:bd:49:32:ea:3b:4c:a4:5b:05:1b:bd:24:a3:
                    bd:ce:ba:21:2a:43:b2:89:55:5d:6f:82:4f:57:23:
                    e7:69:b6:18:19:36:4c:4f:f0:99:95:4f:b6:29:18:
                    ed:5a:41:d7:76:29:60:5b:d8:7f:43:91:33:c2:a4:
                    7e:6b:19:f8:f5:39:67:e5:0f:3b:6e:60:93:35:a8:
                    5c:03:8a:66:bb:61:91:05:ca:f2:48:97:f9:01:7f:
                    27:67:1a:9c:a3:e4:08:88:3d:2f:71:66:b4:be:6b:
                    e1:86:6f:1e:9a:c6:10:c8:ab:53:0b:1a:4b:18:32:
                    40:7b:4e:2d:ad:76:89:b4:8c:61:fd:79:24:c0:88:
                    42:9e:68:14:09:8f:2b:17:61:51:e6:d5:f9:ba:eb:
                    5e:93:13:f6:46:12:db:2e:ad:76:a5:e2:98:f0:ba:
                    81:5c:e2:38:ec:f7:2b:27:9c:71:90:96:09:ab:ed:
                    89:60:1c:47:56:01:40:2c:82:08:72:9b:80:6e:71:
                    3f:cf:75:de:32:ee:39:5f:77:e3:8f:61:39:34:66:
                    c5:10:17:3a:b7:fb:c8:21:9b:6e:6c:00:14:5e:16:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E8:A0:EE:E5:D6:ED:1E:28:97:C2:1E:95:FE:96:77:3B:49:73:AB
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:27:64:4d:12:5d:1c:22:6d:24:85:e0:4c:1a:08:fb:a0:
         13:91:70:08:ff:89:d9:e4:83:5c:89:34:49:b6:a5:5f:10:eb:
         3d:11:83:07:93:90:e0:90:e6:63:11:26:32:c3:50:46:0e:68:
         d1:c9:f6:58:c7:7b:2c:d4:89:a8:37:05:e2:06:b6:38:32:3f:
         46:b9:9f:6b:db:f2:75:b6:17:ce:6a:c3:0d:b6:0f:d9:80:c8:
         23:a2:db:26:c0:0c:ae:4d:ce:73:39:6f:3f:30:59:aa:c8:95:
         e8:82:ef:b9:e0:8c:63:3e:e9:91:8a:4f:a1:cd:d7:a7:a7:16:
         90:a9:70:d7:bb:83:7c:c0:87:db:8a:53:6a:66:38:ac:ee:83:
         b8:e5:00:95:80:13:8b:b6:3f:92:eb:19:82:88:d3:87:ba:67:
         e4:71:ae:57:c7:e9:6a:62:18:ae:76:f9:8f:fd:9c:c1:f7:36:
         8b:c5:4a:5f:e8:02:43:44:e5:a0:26:76:32:8e:f6:cf:d5:80:
         cc:76:83:8e:ce:32:5c:9d:fe:37:da:2e:cf:0e:15:ca:6f:7e:
         9f:26:51:bf:c6:85:8f:0a:c9:7d:cc:bd:51:f9:77:f6:ef:d4:
         0d:58:be:af:3e:84:05:88:2e:b1:ae:ea:f9:04:c2:21:e9:42:
         42:b4:d0:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyOEQxMTAvBgNVBAUTKDFFNjAxM0FGMUY4NTY0RUFBMDA5N0RCMUYyMTY4NzRD
NEI3ODY3MEUwHhcNMjUxMDE5MDU1ODQ2WhcNMjUxMDI2MDU1ODQ2WjAYMRYwFAYD
VQQDEw02OGY0N2UxNi1jYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA50qd7Fcv2DN1oF6EdNXVCYP7AJih/sDS/i0Yninutr1JMuo7TKRbBRu9JKO9
zrohKkOyiVVdb4JPVyPnabYYGTZMT/CZlU+2KRjtWkHXdilgW9h/Q5EzwqR+axn4
9Tln5Q87bmCTNahcA4pmu2GRBcrySJf5AX8nZxqco+QIiD0vcWa0vmvhhm8emsYQ
yKtTCxpLGDJAe04trXaJtIxh/XkkwIhCnmgUCY8rF2FR5tX5uutekxP2RhLbLq12
peKY8LqBXOI47PcrJ5xxkJYJq+2JYBxHVgFALIIIcpuAbnE/z3XeMu45X3fjj2E5
NGbFEBc6t/vIIZtubAAUXhYyfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnooO7l
1u0eKJfCHpX+lnc7SXOrMB8GA1UdIwQYMBaAFB5gE68fhWTqoAl9sfIWh0xLeGcO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4RC82MUExREYyRTQw
MzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpPcWdDWDJ4OGhhSFRFdDRa
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0htQVRyeC1GWk9xZ0NYMng4aGFIVEV0NFp3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTI4RC82MUExREYyRTQwMzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpP
cWdDWDJ4OGhhSFRFdDRadzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJLydkTRJdHCJtJIXgTBoI+6ATkXAI/4nZ5INciTRJtqVfEOs9EYMH
k5DgkOZjESYyw1BGDmjRyfZYx3ss1ImoNwXiBrY4Mj9GuZ9r2/J1thfOasMNtg/Z
gMgjotsmwAyuTc5zOW8/MFmqyJXogu+54IxjPumRik+hzdenpxaQqXDXu4N8wIfb
ilNqZjis7oO45QCVgBOLtj+S6xmCiNOHumfkca5Xx+lqYhiudvmP/ZzB9zaLxUpf
6AJDROWgJnYyjvbP1YDMdoOOzjJcnf432i7PDhXKb36fJlG/xoWPCsl9zL1R+Xf2
79QNWL6vPoQFiC6xrur5BMIh6UJCtNCy
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:10 2025 by rpki-client