Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File:                     dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier:          UypkdDlcK9hfKp2s0AuMFS3zBbBUsCHJoArq1l7/ZNw=
Subject key identifier:   DC:31:A2:9E:FC:F3:4E:F4:58:68:EF:27:01:2F:A8:B4:61:A8:EC:36
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer:       /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number:          0616
Signing time:             Sun 19 Oct 2025 00:26:07 +0000
Manifest this update:     Sun 19 Oct 2025 00:26:06 +0000
Manifest next update:     Sun 26 Oct 2025 00:26:06 +0000
Files and hashes:         1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: aR2yHxb78TyXly8RNdzPjWu7Kc/GaOBpKLFFiixcLuw=)
                          2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
                          rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
        Validity
            Not Before: Oct 19 00:26:06 2025 GMT
            Not After : Oct 26 00:26:06 2025 GMT
        Subject: CN=68f4301e-0c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:33:e7:47:f1:0d:36:55:44:7c:db:58:c9:
                    c6:1e:a1:a3:18:28:2c:6e:16:49:04:5f:88:74:45:
                    dd:be:40:23:08:f7:a6:01:14:3c:77:77:03:30:ca:
                    a6:d8:20:57:76:be:eb:11:bc:6e:40:cf:f1:32:9f:
                    31:2e:83:ac:a0:54:d3:29:e7:d7:67:bc:6c:1d:11:
                    92:3f:4b:9e:40:58:5c:aa:9b:a8:9b:de:0a:f6:77:
                    f6:b5:69:8d:aa:73:86:e0:c5:df:5a:21:36:30:71:
                    1f:60:6b:1c:90:d9:69:a6:5a:f1:91:ce:50:35:b4:
                    69:0e:cb:56:3e:d6:a8:c8:03:51:90:b4:f0:83:9f:
                    d9:1a:cc:2e:c8:58:45:85:a8:6a:ae:a5:d6:a4:3e:
                    2e:47:70:97:62:f7:1a:81:8e:50:e6:b3:72:23:4d:
                    1f:ff:c4:1c:8f:01:65:91:18:34:6d:b1:3d:8a:e1:
                    5c:dd:51:40:89:cb:ad:78:03:bd:96:41:18:c2:b7:
                    e4:2c:61:c4:fe:6c:96:d0:34:e8:f8:a1:b3:0e:9c:
                    7f:65:33:5d:c1:09:4f:f7:6d:00:f3:24:d8:53:a3:
                    62:f6:51:c8:05:21:7c:3e:3f:d2:2c:14:bc:2b:9d:
                    42:19:72:82:78:1e:c4:d2:cf:1b:09:a5:c5:70:dd:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:31:A2:9E:FC:F3:4E:F4:58:68:EF:27:01:2F:A8:B4:61:A8:EC:36
            X509v3 Authority Key Identifier:
                keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:2c:d5:6c:f0:66:10:61:5f:08:a0:67:ad:0c:ad:8a:5d:
         99:93:f0:fe:98:a6:80:c9:bb:54:c3:15:9f:43:bf:70:6a:8e:
         31:55:83:32:5e:54:0e:ce:30:2d:b7:5b:62:e3:94:88:d5:c8:
         96:c5:2e:08:03:b1:4e:00:ec:39:b4:ff:48:d3:35:f9:f5:28:
         b5:12:49:15:b7:5e:8c:cf:07:a4:34:d8:b2:95:f0:9c:19:4a:
         06:2c:52:16:de:b1:c7:af:da:e3:ed:5a:10:f8:01:3c:79:c8:
         6d:af:e2:02:b0:28:76:80:b1:87:11:10:44:b1:af:21:06:01:
         8c:f7:f3:fc:b0:ea:f4:f3:e5:2f:56:71:3d:5f:82:03:3a:6e:
         89:7f:25:e6:3d:6f:1e:f7:b2:83:1c:6e:91:4e:aa:cd:4a:9c:
         1d:37:d1:3b:c4:20:d4:ff:b3:0c:2e:91:dc:cb:a8:26:ab:f0:
         85:62:90:ac:5f:74:88:08:ba:70:8a:7a:f2:af:f2:35:a0:3c:
         8d:8c:6e:aa:9b:4b:14:0e:9c:7c:56:f5:bc:f9:cc:df:d0:46:
         c4:14:b0:4c:13:ce:7c:6d:2a:1a:bb:47:e3:4b:72:9c:5c:39:
         94:a5:fe:19:36:e5:97:05:36:6a:e6:8f:6f:90:1b:b0:84:1e:
         06:9d:87:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF
NkM4MTY0NUYwHhcNMjUxMDE5MDAyNjA2WhcNMjUxMDI2MDAyNjA2WjAYMRYwFAYD
VQQDEw02OGY0MzAxZS0wYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiwz50fxDTZVRHzbWMnGHqGjGCgsbhZJBF+IdEXdvkAjCPemARQ8d3cDMMqm
2CBXdr7rEbxuQM/xMp8xLoOsoFTTKefXZ7xsHRGSP0ueQFhcqpuom94K9nf2tWmN
qnOG4MXfWiE2MHEfYGsckNlpplrxkc5QNbRpDstWPtaoyANRkLTwg5/ZGswuyFhF
hahqrqXWpD4uR3CXYvcagY5Q5rNyI00f/8QcjwFlkRg0bbE9iuFc3VFAicuteAO9
lkEYwrfkLGHE/myW0DTo+KGzDpx/ZTNdwQlP920A8yTYU6Ni9lHIBSF8Pj/SLBS8
K51CGXKCeB7E0s8bCaXFcN0PNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwxop78
8070WGjvJwEvqLRhqOw2MB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE
MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy
S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZzyzVbPBmEGFfCKBnrQytil2Zk/D+mKaAybtUwxWfQ79wao4xVYMy
XlQOzjAtt1ti45SI1ciWxS4IA7FOAOw5tP9I0zX59Si1EkkVt16MzwekNNiylfCc
GUoGLFIW3rHHr9rj7VoQ+AE8echtr+ICsCh2gLGHERBEsa8hBgGM9/P8sOr08+Uv
VnE9X4IDOm6JfyXmPW8e97KDHG6RTqrNSpwdN9E7xCDU/7MMLpHcy6gmq/CFYpCs
X3SICLpwinryr/I1oDyNjG6qm0sUDpx8VvW8+czf0EbEFLBME858bSoau0fjS3Kc
XDmUpf4ZNuWXBTZq5o9vkBuwhB4GnYdX
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:00 2025 by rpki-client