Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
File:                     bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json)
Hash identifier:          PttjiSteb3smhVw7kVylfsRuqAjR8RZp90QbchSwDL0=
Subject key identifier:   82:71:79:34:86:C1:C3:10:76:90:E8:CF:A7:FD:E5:25:FE:DC:8C:EC
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       367D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
Manifest number:          35B7
Signing time:             Sat 18 Oct 2025 14:18:31 +0000
Manifest this update:     Sat 18 Oct 2025 14:18:30 +0000
Manifest next update:     Sat 25 Oct 2025 14:18:30 +0000
Files and hashes:         1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: shOGySSGDlwEiUhgmI5voeL16thMSSfkPwj3jXQkYGs=)
                          2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: zYkOqurzCzToKjFWw1JFREq9sP5L0Ox+j8SjAIM1s0g=)
                          3: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: QIkAoP/By0cGmSZKZV7Us1AkVMW2odFekLlf+/kQhNs=)
                          4: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: mbhuy04A8zuqh2VQYoyVQz/nubKm5uM/LXn3ihnguHc=)
                          5: 88978730772311EBB972032EC4F9AE02.roa (hash: HjKqHMfxVfYxTOl9WdJ4/LY87H7R42UxSxjcHgvm5bI=)
                          6: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: BOms9OY6+UIB6aMBGACYroj4QGSk/YT0f0983Woe8qE=)
                          7: 7EF4796CA7DF11F0B8B8DF33C4F9AE02.roa (hash: gBzIoTcl0pF/I9Mogf5bYnX80PYd1Prm+6rq6teZd8w=)
                          8: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: I6jxZTqpjwiUfJAwpZoNi2Gm52AIuuh+evMbf0QauW8=)
                          9: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: LVPfSpZ0kKMp22v4SWIIQyCCry6IBJmlcWqFISdxj5A=)
                          10: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: aOSpyI8MZjB7JifoHMKo83Bhs4V52OgvV8PHhV/cS3k=)
                          11: 89A73D46772311EBB972032EC4F9AE02.roa (hash: ENYLfShbh18F4DkP0j/X7mK87WIoKIhUNMFfz+VNeYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13949 (0x367d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Oct 18 14:18:30 2025 GMT
            Not After : Oct 25 14:18:30 2025 GMT
        Subject: CN=68f3a1b6-886a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:78:36:a0:84:6b:5c:3b:57:0c:94:ac:8b:
                    ec:53:b6:4d:47:b0:69:35:75:32:37:db:6d:ae:fb:
                    d8:58:89:19:17:5f:91:c2:5b:f2:6e:9b:af:64:26:
                    f2:a1:42:c4:59:0a:aa:19:4c:fd:16:ef:af:a2:92:
                    88:ea:c3:b7:6f:4f:cb:8e:67:7a:f5:80:d1:b3:f8:
                    8b:c8:4a:1f:bd:89:fd:83:98:10:06:e3:88:e8:9b:
                    04:56:90:5f:c8:98:3c:e8:34:59:06:f5:fb:70:f2:
                    bf:54:69:bd:09:4c:40:ed:2d:07:ca:2b:0a:66:1b:
                    48:c9:0e:c7:2b:4d:03:aa:e8:ed:72:41:59:9b:4f:
                    e0:9e:ef:50:1c:c0:10:ec:30:83:dd:ab:5f:b2:de:
                    b6:52:63:70:83:f7:2e:d1:15:f8:4a:54:ca:56:65:
                    e8:e5:fa:e3:b6:64:b9:3e:99:c8:70:eb:d3:08:9b:
                    c3:bb:ea:f1:1e:33:bf:32:76:6d:88:37:d9:9a:ab:
                    bc:b8:e9:55:73:71:6c:e0:5f:03:3a:c0:5d:12:bd:
                    27:10:9d:e9:43:ce:f6:7d:a0:f6:64:1e:98:a5:42:
                    77:7c:47:55:57:0e:a8:23:be:5f:e6:dc:2b:bb:ba:
                    d6:94:bf:83:ee:72:0f:c4:d7:58:65:44:2c:06:26:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:71:79:34:86:C1:C3:10:76:90:E8:CF:A7:FD:E5:25:FE:DC:8C:EC
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:45:bf:54:c8:04:ec:e0:b8:88:a7:24:26:9d:d8:b5:2f:
         d5:3c:33:e8:f7:69:2c:ff:82:f6:f2:15:eb:d1:6a:56:92:b4:
         80:82:e0:c2:14:32:cf:6a:b9:9e:57:9a:a2:cb:41:ce:26:f5:
         5b:c9:c1:61:35:69:23:27:0b:77:2e:5b:15:78:b9:c2:8d:a7:
         48:1b:90:23:35:22:a7:5d:5c:e2:c1:53:f7:c9:6c:87:88:77:
         35:bf:ec:cf:eb:34:ec:92:58:6b:1d:b1:db:dd:ef:0e:f5:9d:
         ee:89:19:84:6c:dc:c7:7d:1c:ce:0a:c3:63:bc:b2:c6:b5:ec:
         f5:d3:54:33:3a:8d:ac:a0:71:e5:cc:25:9d:29:ea:2f:17:06:
         c8:fb:eb:8e:0a:33:cb:bf:cd:76:d4:a8:d1:85:2d:88:9c:00:
         03:2c:f1:31:de:03:54:45:0a:11:5b:92:76:c9:67:83:6f:a7:
         3f:a0:fa:d1:a7:20:35:da:b8:9c:6d:2b:29:6a:aa:3e:71:45:
         2e:71:c2:18:8c:29:33:72:8e:f8:3a:4d:b0:8d:33:9b:cf:ad:
         7a:eb:91:d8:db:54:a1:16:20:1a:96:43:ab:0a:0e:93:e1:4d:
         b4:3d:f0:58:1a:8d:e4:98:62:e0:97:1b:fa:2f:c5:ae:50:99:
         5f:5b:2a:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2
OTYwQkUyNjgwHhcNMjUxMDE4MTQxODMwWhcNMjUxMDI1MTQxODMwWjAYMRYwFAYD
VQQDEw02OGYzYTFiNi04ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9B4NqCEa1w7VwyUrIvsU7ZNR7BpNXUyN9ttrvvYWIkZF1+RwlvybpuvZCby
oULEWQqqGUz9Fu+vopKI6sO3b0/Ljmd69YDRs/iLyEofvYn9g5gQBuOI6JsEVpBf
yJg86DRZBvX7cPK/VGm9CUxA7S0HyisKZhtIyQ7HK00DqujtckFZm0/gnu9QHMAQ
7DCD3atfst62UmNwg/cu0RX4SlTKVmXo5frjtmS5PpnIcOvTCJvDu+rxHjO/MnZt
iDfZmqu8uOlVc3Fs4F8DOsBdEr0nEJ3pQ872faD2ZB6YpUJ3fEdVVw6oI75f5twr
u7rWlL+D7nIPxNdYZUQsBiZecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJxeTSG
wcMQdpDoz6f95SX+3IzsMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE
NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU
MllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMh0W/VMgE7OC4iKckJp3YtS/VPDPo92ks/4L28hXr0WpWkrSAguDC
FDLParmeV5qiy0HOJvVbycFhNWkjJwt3LlsVeLnCjadIG5AjNSKnXVziwVP3yWyH
iHc1v+zP6zTsklhrHbHb3e8O9Z3uiRmEbNzHfRzOCsNjvLLGtez101QzOo2soHHl
zCWdKeovFwbI++uOCjPLv8121KjRhS2InAADLPEx3gNURQoRW5J2yWeDb6c/oPrR
pyA12ricbSspaqo+cUUuccIYjCkzco74Ok2wjTObz61665HY21ShFiAalkOrCg6T
4U20PfBYGo3kmGLglxv6L8WuUJlfWyqO
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:50 2025 by rpki-client