Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File:                     rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier:          AZCKLyBD6fYfk3+AC+LFJrLELDXBMscAPemy9hOr5co=
Subject key identifier:   AE:C5:53:29:69:62:09:5C:01:11:62:25:EE:00:F4:53:F1:3F:9D:06
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer:       /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number:          9F
Signing time:             Sun 19 Oct 2025 09:33:38 +0000
Manifest this update:     Sun 19 Oct 2025 09:33:37 +0000
Manifest next update:     Sun 26 Oct 2025 09:33:37 +0000
Files and hashes:         1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: gBAN7bG/3xX3htdenj1tMej8M8yjQwGzTwq2DBiedgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
                          rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
        Validity
            Not Before: Oct 19 09:33:37 2025 GMT
            Not After : Oct 26 09:33:37 2025 GMT
        Subject: CN=68f4b072-2890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:ac:7a:d9:91:39:0f:82:fc:e5:a9:eb:ca:
                    63:7c:87:1c:00:92:74:a1:74:0a:ec:1b:b1:db:9a:
                    57:ed:b7:e2:d8:ae:0f:6d:7a:ee:e1:56:51:96:8b:
                    a9:ca:19:0d:d8:93:0b:dc:d9:06:f5:68:8f:96:a4:
                    9f:2f:14:e1:50:75:6d:e7:68:11:cf:d6:4f:c9:5b:
                    c7:79:83:c0:68:c7:9c:89:70:d8:98:51:31:fd:a8:
                    09:5e:e1:db:5c:8f:88:85:e4:2f:7a:4e:d0:ab:95:
                    10:33:f7:b0:11:4e:5c:5e:5c:55:a2:69:9a:c9:be:
                    3a:a2:ec:a3:68:66:b3:cc:f7:af:49:07:61:e5:fd:
                    6b:91:94:a1:4f:05:03:36:53:4c:c7:fe:9f:73:40:
                    30:ee:76:75:0f:97:01:91:12:93:c2:c2:c0:39:c4:
                    6c:66:2d:e5:74:4c:ee:81:ed:91:ae:ee:5a:a3:d7:
                    0a:a0:8e:c8:2b:15:54:49:74:fe:87:b4:5e:01:a4:
                    aa:82:49:4b:99:be:c0:9c:46:e2:7b:58:5f:1d:79:
                    2b:c2:a7:35:32:ec:42:31:ce:af:f6:61:e7:23:10:
                    54:7e:8e:bc:09:cf:b6:70:2c:a0:53:c6:f1:26:7f:
                    6e:f2:22:26:cc:12:9c:fd:27:25:b3:d9:52:62:e2:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:53:29:69:62:09:5C:01:11:62:25:EE:00:F4:53:F1:3F:9D:06
            X509v3 Authority Key Identifier:
                keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:bd:f2:e0:1a:31:23:e7:2e:4f:10:bd:ac:55:88:d4:f4:
         73:a1:ff:ce:94:10:15:42:0f:56:72:4d:a6:e3:80:c9:44:cf:
         66:46:ac:d0:b4:07:66:1b:9e:f3:f5:0b:a0:52:f0:0d:05:30:
         95:b5:4d:d2:dd:4e:79:0a:28:cc:4b:25:95:2f:66:e9:87:49:
         41:39:77:ca:6f:74:c4:6a:98:34:95:fd:44:ce:5a:f3:6a:65:
         4a:e8:78:c2:fb:2e:b7:38:61:e1:47:98:30:9d:c1:04:ce:75:
         d4:e4:ff:37:33:f8:70:1f:94:78:0c:a8:7c:72:e9:d7:ed:71:
         4d:55:54:a2:7c:2d:87:53:19:8e:1b:d3:70:ee:06:24:4e:a5:
         7b:39:bf:11:64:bb:e9:11:bf:fe:52:b9:ae:dd:4d:75:81:b5:
         b6:0d:d3:70:b0:c1:c8:5d:43:50:30:40:ae:a8:9b:df:5b:fe:
         25:de:89:6f:3f:7e:64:1c:dd:11:78:3c:14:a1:9c:23:6d:2f:
         16:81:f2:94:60:7e:c1:81:b1:b1:67:64:6b:97:31:14:c9:bd:
         cc:5e:f4:fc:7b:97:39:be:89:95:a4:f0:9a:4a:04:e0:51:7c:
         a0:c3:ad:48:cc:e2:c1:1a:9c:11:88:4b:1e:b4:04:54:3c:24:
         0d:69:41:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzN0IxMTAvBgNVBAUTKEFEMDE5RjAzNUJGRjNGM0IxNzMyM0NEQkJCMTRBMDdE
NURFOEVDMzMwHhcNMjUxMDE5MDkzMzM3WhcNMjUxMDI2MDkzMzM3WjAYMRYwFAYD
VQQDEw02OGY0YjA3Mi0yODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqIusetmROQ+C/OWp68pjfIccAJJ0oXQK7Bux25pX7bfi2K4PbXru4VZRloup
yhkN2JML3NkG9WiPlqSfLxThUHVt52gRz9ZPyVvHeYPAaMeciXDYmFEx/agJXuHb
XI+IheQvek7Qq5UQM/ewEU5cXlxVommayb46ouyjaGazzPevSQdh5f1rkZShTwUD
NlNMx/6fc0Aw7nZ1D5cBkRKTwsLAOcRsZi3ldEzuge2Rru5ao9cKoI7IKxVUSXT+
h7ReAaSqgklLmb7AnEbie1hfHXkrwqc1MuxCMc6v9mHnIxBUfo68Cc+2cCygU8bx
Jn9u8iImzBKc/Scls9lSYuKpIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7FUylp
YglcARFiJe4A9FPxP50GMB8GA1UdIwQYMBaAFK0BnwNb/z87FzI827sUoH1d6Owz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xRDdCNjNCQ0I5
OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi9yUUdmQTF2X1B6c1hNanpidXhTZ2ZWM283
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODM3Qi8xRDdCNjNCQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi9yUUdmQTF2X1B6
c1hNanpidXhTZ2ZWM283RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEX73y4BoxI+cuTxC9rFWI1PRzof/OlBAVQg9Wck2m44DJRM9mRqzQ
tAdmG57z9QugUvANBTCVtU3S3U55CijMSyWVL2bph0lBOXfKb3TEapg0lf1Ezlrz
amVK6HjC+y63OGHhR5gwncEEznXU5P83M/hwH5R4DKh8cunX7XFNVVSifC2HUxmO
G9Nw7gYkTqV7Ob8RZLvpEb/+Urmu3U11gbW2DdNwsMHIXUNQMECuqJvfW/4l3olv
P35kHN0ReDwUoZwjbS8WgfKUYH7BgbGxZ2RrlzEUyb3MXvT8e5c5vomVpPCaSgTg
UXygw61IzOLBGpwRiEsetARUPCQNaUGa
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:34 2025 by rpki-client