Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          6snMMvdl4miMDX7lgv8IlilM7h90nuXG7MU4pYl9FbI=
Subject key identifier:   1A:41:12:48:1B:41:47:AE:0D:08:69:EF:6D:04:49:2F:4E:52:E1:B0
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          017D
Signing time:             Sun 19 Oct 2025 06:17:32 +0000
Manifest this update:     Sun 19 Oct 2025 06:17:31 +0000
Manifest next update:     Sun 26 Oct 2025 06:17:31 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: 99ipoDg9mTNPq3qwkgVNThDFUkAP8ijI8WjGy6ReB8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: Oct 19 06:17:31 2025 GMT
            Not After : Oct 26 06:17:31 2025 GMT
        Subject: CN=68f4827b-265c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:60:87:18:1e:34:4f:1e:12:bf:36:8d:8f:
                    9b:d6:a6:7a:ff:6a:cc:bb:00:df:7a:7f:04:ba:3c:
                    17:23:94:1b:83:f1:06:f4:69:72:ac:9c:63:41:7f:
                    e6:db:27:8c:62:cf:24:ec:25:96:5a:a5:bb:32:ff:
                    1f:82:58:3a:de:85:d9:20:c2:31:f2:3d:65:b1:7e:
                    d1:b8:85:ff:2f:7c:a3:19:bf:3b:eb:91:de:bc:22:
                    48:a8:97:9a:14:3e:2e:88:fb:f7:af:c8:b1:29:fc:
                    ea:08:ef:4e:e3:78:95:62:a0:a7:bd:41:ba:c0:b6:
                    e7:96:83:04:72:ce:fc:03:28:2b:71:ae:62:6c:ea:
                    36:7b:57:b8:0b:8e:82:7a:90:99:49:08:14:ba:89:
                    e5:60:79:c3:f0:a7:8a:d5:f2:13:58:38:3b:17:40:
                    c6:31:a7:e4:ad:15:6d:c3:dc:f1:27:f8:55:f3:fb:
                    7e:b3:ac:84:72:e8:a8:08:ba:81:73:b4:c2:ed:f2:
                    ab:8c:03:e8:9d:25:7d:43:a8:5c:e9:1c:38:34:66:
                    a5:0e:e2:3c:50:c0:50:06:91:8f:53:e1:cf:4e:3c:
                    2f:2a:25:97:35:e8:90:8c:1d:ce:3d:6c:4d:db:0a:
                    cc:5c:5d:f2:80:f8:52:dd:6c:19:d6:9a:74:34:d1:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:41:12:48:1B:41:47:AE:0D:08:69:EF:6D:04:49:2F:4E:52:E1:B0
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:27:da:94:99:a6:73:b3:ad:f3:40:36:4a:45:3d:90:f5:d7:
         e2:02:0f:86:eb:bd:c1:3b:cc:fa:5b:f8:bf:59:36:44:05:36:
         08:98:0c:9e:57:4f:87:93:a9:4d:01:6c:f2:46:7b:fb:94:59:
         84:8d:cb:f9:14:87:e8:67:78:8b:6d:07:e1:4a:52:3a:a0:aa:
         f7:c5:5a:fd:7c:04:a9:11:d0:15:69:ae:a7:8a:83:bc:e0:24:
         c4:81:a3:51:8f:1c:f3:23:e3:75:37:88:1c:b2:bc:e9:ae:e4:
         81:0b:2d:9d:e6:a4:f5:b2:5b:56:83:b5:b6:ba:b1:63:9a:6c:
         33:cb:a6:05:4c:6e:10:bc:71:b0:d2:49:cf:6f:ee:f2:f2:b3:
         97:f3:b9:0c:dd:4f:06:0f:ba:51:f6:1c:04:37:94:b8:a4:b7:
         32:31:21:76:fe:c3:99:b8:21:07:c5:86:e3:76:57:f7:a7:5c:
         54:e1:c2:95:86:7b:2e:f5:49:1f:b2:65:c7:74:06:d2:3c:2c:
         d5:35:78:8a:c6:ed:48:80:fb:b4:c8:f1:f0:5a:e0:67:c6:4b:
         37:f6:6b:0f:ba:a4:84:44:09:38:bd:e0:91:fa:35:24:de:7e:
         d9:e9:96:90:5c:0a:dc:4f:1f:b1:92:8b:da:1b:63:39:26:c0:
         93:13:fb:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGNjIxMTAvBgNVBAUTKEVFRUM1M0VBRDE3RkJGODlCMjIxRDlCQTVBRkNEMDEw
NzkwQzk5NEQwHhcNMjUxMDE5MDYxNzMxWhcNMjUxMDI2MDYxNzMxWjAYMRYwFAYD
VQQDEw02OGY0ODI3Yi0yNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRVghxgeNE8eEr82jY+b1qZ6/2rMuwDfen8EujwXI5Qbg/EG9GlyrJxjQX/m
2yeMYs8k7CWWWqW7Mv8fglg63oXZIMIx8j1lsX7RuIX/L3yjGb8765HevCJIqJea
FD4uiPv3r8ixKfzqCO9O43iVYqCnvUG6wLbnloMEcs78Aygrca5ibOo2e1e4C46C
epCZSQgUuonlYHnD8KeK1fITWDg7F0DGMafkrRVtw9zxJ/hV8/t+s6yEcuioCLqB
c7TC7fKrjAPonSV9Q6hc6Rw4NGalDuI8UMBQBpGPU+HPTjwvKiWXNeiQjB3OPWxN
2wrMXF3ygPhS3WwZ1pp0NNEpNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpBEkgb
QUeuDQhp720ESS9OUuGwMB8GA1UdIwQYMBaAFO7sU+rRf7+JsiHZulr80BB5DJlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xQThBMDY2NDYy
NjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0bXlJZG02V3Z6UUVIa01t
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1VMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkY2Mi8xQThBMDY2NDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0
bXlJZG02V3Z6UUVIa01tVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWJ9qUmaZzs63zQDZKRT2Q9dfiAg+G673BO8z6W/i/WTZEBTYImAye
V0+Hk6lNAWzyRnv7lFmEjcv5FIfoZ3iLbQfhSlI6oKr3xVr9fASpEdAVaa6nioO8
4CTEgaNRjxzzI+N1N4gcsrzpruSBCy2d5qT1sltWg7W2urFjmmwzy6YFTG4QvHGw
0knPb+7y8rOX87kM3U8GD7pR9hwEN5S4pLcyMSF2/sOZuCEHxYbjdlf3p1xU4cKV
hnsu9UkfsmXHdAbSPCzVNXiKxu1IgPu0yPHwWuBnxks39msPuqSERAk4veCR+jUk
3n7Z6ZaQXArcTx+xkovaG2M5JsCTE/vw
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:39 2025 by rpki-client