Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File:                     k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier:          7HFIZ7CmcNju7PF96y4TSYjf8zv8IPPKdTuZH02qA/Q=
Subject key identifier:   34:3C:A2:D6:A5:20:A4:84:74:D7:C3:98:31:7A:69:33:CB:00:A8:72
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer:       /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number:          0135
Signing time:             Sun 19 Oct 2025 07:25:16 +0000
Manifest this update:     Sun 19 Oct 2025 07:25:16 +0000
Manifest next update:     Sun 26 Oct 2025 07:25:16 +0000
Files and hashes:         1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: xud2ZV8Z9JSWlw9cVcIARY57X4P79KwdidzVquFm9dw=)
                          2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: 6O+gN+s3nYuHADI/TEqtB2x9DBi8NBjryPUz/maJeSc=)
                          3: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: Tr2BD+TjkZLpINWnT5Dv/SJcrrMfCgyU3wvXQZmqI2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Validity
            Not Before: Oct 19 07:25:16 2025 GMT
            Not After : Oct 26 07:25:16 2025 GMT
        Subject: CN=68f4925c-4185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:8a:a8:ec:e2:4f:85:73:ee:c9:8e:27:c4:
                    6a:df:0f:ff:41:de:5e:bc:f4:fb:bf:fe:aa:13:fc:
                    53:7c:07:51:fe:b1:eb:97:e6:f8:c1:3b:d7:45:00:
                    be:18:d1:18:de:e8:c7:eb:ed:9a:a3:e6:d2:05:6e:
                    c5:88:1f:13:92:39:ac:77:71:7e:4e:a5:0b:7d:04:
                    aa:a4:40:dd:06:9e:84:f0:08:3d:91:71:f9:08:ff:
                    17:c1:3f:05:a0:6d:b3:89:4c:8f:6d:6e:fa:90:3f:
                    51:8b:92:b8:6f:68:60:ca:a1:ae:bb:4b:18:8d:f7:
                    2b:16:33:77:f7:07:71:d3:73:db:c9:4d:11:ff:e4:
                    53:10:b4:21:30:25:94:6c:68:57:0f:90:d2:6a:30:
                    48:ab:b6:c4:88:4c:ba:4e:35:21:7f:9d:27:28:e5:
                    d8:5d:61:e3:f5:9a:97:44:cd:2d:06:87:55:ca:78:
                    11:ed:c9:41:a9:39:3e:f9:82:5d:e2:ce:52:6b:69:
                    d2:f1:a2:59:e7:48:d4:1f:dd:b7:6f:f3:91:9d:d0:
                    42:53:f3:33:3f:90:b9:4a:e2:64:7c:3b:62:28:4c:
                    a6:6a:ee:72:46:b6:19:ac:22:18:86:27:af:c1:0a:
                    2a:f5:b1:c1:3f:44:bd:e2:8d:7d:70:cd:bd:ea:91:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:A2:D6:A5:20:A4:84:74:D7:C3:98:31:7A:69:33:CB:00:A8:72
            X509v3 Authority Key Identifier:
                keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:75:d8:f1:47:bb:46:7a:91:2e:40:c9:cb:08:db:2f:8b:0a:
         43:5a:cd:b8:88:cf:4f:a4:6a:ec:29:31:33:68:26:24:bd:6f:
         f0:d7:da:e9:2d:c2:3a:e9:e0:fe:56:dd:87:90:18:5c:da:5c:
         6a:a7:ad:47:47:ec:89:0e:1b:af:82:bf:50:60:81:59:c1:c5:
         66:08:d3:9e:35:fd:5c:7f:4e:44:1d:75:c6:8e:56:da:e9:e2:
         b8:26:51:6a:1c:63:b2:4d:d3:ae:b6:28:6e:ec:af:00:62:1a:
         36:0b:de:c8:54:a1:9d:87:04:78:93:2d:eb:bd:e8:00:ff:d3:
         fc:34:d9:e0:5a:ee:f1:5b:4d:12:46:b0:88:95:ce:5d:4a:e4:
         01:d3:d8:76:84:0e:7c:92:12:15:59:2a:39:1e:a7:69:07:bc:
         f0:2c:ba:9b:b3:5d:b2:0d:b3:ea:14:5d:92:b1:95:fe:8d:5d:
         af:99:f7:9d:0d:f5:05:73:75:ad:28:54:dd:77:b9:24:df:5b:
         02:ca:e3:e6:1a:4e:81:2f:72:3f:c8:6f:e9:e1:ae:d6:f1:74:
         c3:80:2c:bd:8a:49:2f:be:08:d6:b8:46:c2:c3:79:f8:fb:e6:
         af:c4:9a:99:29:d5:32:e5:08:80:fe:cd:87:f4:65:86:ac:65:
         e4:79:21:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG
RDM2Q0M3QTUwHhcNMjUxMDE5MDcyNTE2WhcNMjUxMDI2MDcyNTE2WjAYMRYwFAYD
VQQDEw02OGY0OTI1Yy00MTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzNWKqOziT4Vz7smOJ8Rq3w//Qd5evPT7v/6qE/xTfAdR/rHrl+b4wTvXRQC+
GNEY3ujH6+2ao+bSBW7FiB8Tkjmsd3F+TqULfQSqpEDdBp6E8Ag9kXH5CP8XwT8F
oG2ziUyPbW76kD9Ri5K4b2hgyqGuu0sYjfcrFjN39wdx03PbyU0R/+RTELQhMCWU
bGhXD5DSajBIq7bEiEy6TjUhf50nKOXYXWHj9ZqXRM0tBodVyngR7clBqTk++YJd
4s5Sa2nS8aJZ50jUH923b/ORndBCU/MzP5C5SuJkfDtiKEymau5yRrYZrCIYhiev
wQoq9bHBP0S94o19cM296pFHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ8otal
IKSEdNfDmDF6aTPLAKhyMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx
OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU
Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0ddjxR7tGepEuQMnLCNsviwpDWs24iM9PpGrsKTEzaCYkvW/w19rp
LcI66eD+Vt2HkBhc2lxqp61HR+yJDhuvgr9QYIFZwcVmCNOeNf1cf05EHXXGjlba
6eK4JlFqHGOyTdOutihu7K8AYho2C97IVKGdhwR4ky3rvegA/9P8NNngWu7xW00S
RrCIlc5dSuQB09h2hA58khIVWSo5HqdpB7zwLLqbs12yDbPqFF2SsZX+jV2vmfed
DfUFc3WtKFTdd7kk31sCyuPmGk6BL3I/yG/p4a7W8XTDgCy9ikkvvgjWuEbCw3n4
++avxJqZKdUy5QiA/s2H9GWGrGXkeSEq
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:15:12 2025 by rpki-client