Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
File:                     n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json)
Hash identifier:          UTEsY/l89XJSZl0PrFihz2zPXD6FDbzaQyifjL2ezzk=
Subject key identifier:   73:B0:37:2A:68:94:8A:C2:BA:EA:55:52:14:C7:75:E7:BF:D2:7E:9F
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Certificate issuer:       /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
Manifest number:          01D8
Signing time:             Sun 19 Oct 2025 00:24:43 +0000
Manifest this update:     Sun 19 Oct 2025 00:24:43 +0000
Manifest next update:     Sun 26 Oct 2025 00:24:43 +0000
Files and hashes:         1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: R2fviU76Q+BUinMp/FXDHZtH2wgrsZVj6T/qGO4j9eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
        Validity
            Not Before: Oct 19 00:24:43 2025 GMT
            Not After : Oct 26 00:24:43 2025 GMT
        Subject: CN=68f42fcb-7293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:bf:00:55:d2:02:47:b3:a9:ba:0e:ec:9a:
                    08:6b:32:43:ac:cf:7f:03:88:13:a3:5e:19:21:90:
                    4b:9c:27:cf:50:e7:64:90:08:31:bf:20:a7:30:7b:
                    4c:a6:7f:a8:31:f8:5b:9c:62:ae:fa:06:6d:ce:fc:
                    09:e9:bc:f6:7a:7d:7f:f8:24:36:a8:b2:96:9c:b7:
                    93:29:8f:5e:b8:0d:bd:6b:0c:62:55:eb:83:1f:c5:
                    56:89:47:81:ff:25:b7:61:4f:c2:77:8d:2b:a5:a8:
                    97:14:0b:19:79:e2:bd:3c:d4:da:23:28:fa:c3:94:
                    4e:94:2e:d0:6d:70:f8:f2:f8:4c:89:0e:0a:0b:f5:
                    f7:95:1c:cf:0c:97:3d:3d:02:3e:38:1b:20:0d:24:
                    63:c0:3d:63:fa:ae:9a:ae:30:a0:e8:f3:32:7d:54:
                    83:2d:91:55:77:22:ea:25:17:20:e0:6f:69:94:e0:
                    43:68:51:31:df:0f:bd:97:7f:c5:81:d0:82:bd:7d:
                    db:e4:1f:f4:05:83:a2:9f:c9:90:a3:27:69:13:a8:
                    cd:73:77:0c:4b:d9:ca:cc:e6:54:07:67:bd:3f:62:
                    80:97:56:09:6a:96:ef:ab:dd:38:8f:e6:08:fa:75:
                    f8:0e:06:7c:23:b0:ab:1b:08:ae:1e:dc:d5:24:b4:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:37:2A:68:94:8A:C2:BA:EA:55:52:14:C7:75:E7:BF:D2:7E:9F
            X509v3 Authority Key Identifier:
                keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:f5:b1:c2:2b:ea:9d:29:0b:e2:b7:f6:43:c8:f3:42:42:
         75:88:43:d1:99:47:8c:41:0e:9f:11:31:37:5c:f5:ee:f1:92:
         a1:16:e2:a5:bd:89:ad:81:e2:b5:f1:b0:45:38:a4:a6:cf:bd:
         25:2b:d3:d3:15:5f:21:c9:02:b0:f7:29:55:0e:df:d2:1d:33:
         c7:7c:02:07:6b:1f:95:20:57:ed:d1:7c:99:dc:7b:99:28:bd:
         fa:b5:46:55:f3:8c:12:d0:72:71:0b:7c:a4:86:b9:0a:d2:b8:
         f7:4a:6f:11:cf:d9:8a:bd:22:51:5c:de:de:0c:b4:a3:83:a7:
         98:fc:e3:e7:81:07:e6:29:3f:2c:ca:6b:cd:77:ad:c6:55:b0:
         fb:12:93:ef:f1:25:2b:11:b8:ad:61:48:da:be:27:dc:3e:2f:
         6b:46:85:1c:88:54:ef:99:e1:5b:03:e5:ea:40:68:df:a4:6a:
         f3:79:be:25:51:3e:e6:c6:55:ee:c4:a7:7f:ee:ab:ba:01:d8:
         8e:be:77:f5:4d:06:64:ea:1c:90:e8:08:f7:4f:cd:9c:e3:a1:
         ce:a3:8d:01:15:68:50:b1:69:6d:88:8f:ba:07:6b:fe:15:d1:
         54:c3:09:64:ee:b2:24:5b:6a:c9:54:78:27:5d:8e:d8:0d:0f:
         b4:82:2e:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1
NThGOTZGRjUwHhcNMjUxMDE5MDAyNDQzWhcNMjUxMDI2MDAyNDQzWjAYMRYwFAYD
VQQDEw02OGY0MmZjYi03MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3hi/AFXSAkezqboO7JoIazJDrM9/A4gTo14ZIZBLnCfPUOdkkAgxvyCnMHtM
pn+oMfhbnGKu+gZtzvwJ6bz2en1/+CQ2qLKWnLeTKY9euA29awxiVeuDH8VWiUeB
/yW3YU/Cd40rpaiXFAsZeeK9PNTaIyj6w5ROlC7QbXD48vhMiQ4KC/X3lRzPDJc9
PQI+OBsgDSRjwD1j+q6arjCg6PMyfVSDLZFVdyLqJRcg4G9plOBDaFEx3w+9l3/F
gdCCvX3b5B/0BYOin8mQoydpE6jNc3cMS9nKzOZUB2e9P2KAl1YJapbvq904j+YI
+nX4DgZ8I7CrGwiuHtzVJLSPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOwNypo
lIrCuupVUhTHdee/0n6fMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG
RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1
YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAES/WxwivqnSkL4rf2Q8jzQkJ1iEPRmUeMQQ6fETE3XPXu8ZKhFuKl
vYmtgeK18bBFOKSmz70lK9PTFV8hyQKw9ylVDt/SHTPHfAIHax+VIFft0XyZ3HuZ
KL36tUZV84wS0HJxC3ykhrkK0rj3Sm8Rz9mKvSJRXN7eDLSjg6eY/OPngQfmKT8s
ymvNd63GVbD7EpPv8SUrEbitYUjavifcPi9rRoUciFTvmeFbA+XqQGjfpGrzeb4l
UT7mxlXuxKd/7qu6AdiOvnf1TQZk6hyQ6Aj3T82c46HOo40BFWhQsWltiI+6B2v+
FdFUwwlk7rIkW2rJVHgnXY7YDQ+0gi47
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:12 2025 by rpki-client