Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
File:                     RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json)
Hash identifier:          aArEs1HE4b3P6bme1JqGINakW5HKg2V1XIqVCCLdYCU=
Subject key identifier:   42:A4:F3:A7:83:99:19:F9:6B:7B:64:33:76:21:BE:E7:36:4E:42:13
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
Manifest number:          069B
Signing time:             Sat 18 Oct 2025 23:53:17 +0000
Manifest this update:     Sat 18 Oct 2025 23:53:16 +0000
Manifest next update:     Sat 25 Oct 2025 23:53:16 +0000
Files and hashes:         1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: ho91TWv05nMHZ9pyII4t4ocqd+I2sYZL2bOHnejPWzI=)
                          2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=)
                          3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
                          rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Oct 18 23:53:16 2025 GMT
            Not After : Oct 25 23:53:16 2025 GMT
        Subject: CN=68f4286d-6250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:71:05:ce:fd:88:0c:60:e9:8c:51:68:83:
                    d0:e3:a3:aa:cc:57:1a:c5:6f:9e:70:61:13:e0:94:
                    f4:68:0d:d7:f1:50:20:c6:1a:63:b2:da:91:bb:65:
                    f0:21:3c:60:73:9b:d5:34:f2:fb:02:b5:6b:b6:dd:
                    8f:81:78:d1:91:43:34:57:c7:26:24:a5:f4:2b:8b:
                    98:77:b8:4e:e9:0e:cd:29:9c:0e:5c:d6:98:31:9d:
                    67:8f:48:75:ed:9d:9c:e7:84:e9:bf:a8:fa:8d:fe:
                    1b:c8:c6:5b:72:1b:2f:98:52:aa:48:9c:f1:2d:e5:
                    56:ab:bd:a4:f4:31:52:a7:28:ab:ea:07:76:55:c2:
                    af:4d:fd:b7:65:f2:e3:07:a4:35:35:62:c6:cf:e0:
                    a8:aa:d5:d1:35:dd:df:27:b5:c1:ce:bc:9a:2a:9b:
                    83:ba:de:6e:71:71:ee:7a:59:85:aa:53:8f:3d:f6:
                    e3:82:ee:b6:60:f4:4d:27:5a:ee:06:86:a9:2c:15:
                    ed:32:6b:ad:e7:19:79:52:f6:ac:a1:d1:2d:7b:9f:
                    59:01:12:c1:09:f8:07:e6:aa:21:bf:b0:66:8e:2e:
                    c4:f7:fd:cf:b1:cb:24:5c:f6:a6:a4:a0:73:80:5e:
                    9e:7e:55:8b:84:e5:38:b9:55:0f:87:65:5e:3d:71:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:F3:A7:83:99:19:F9:6B:7B:64:33:76:21:BE:E7:36:4E:42:13
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1a:0b:66:12:52:62:34:63:76:bd:e1:ae:a9:d4:66:dc:5e:
         56:eb:97:bc:67:c6:96:dc:72:84:b1:e1:8a:51:3b:0e:fa:0c:
         85:e3:ef:e9:52:69:f0:f7:86:f3:1a:be:a8:5b:ba:8e:ad:44:
         ad:a8:a6:de:e3:e8:ee:9d:c6:d4:73:49:ba:44:1f:98:27:d5:
         75:34:bb:de:e3:25:40:61:60:8b:3a:99:c7:7e:18:e1:98:d4:
         c7:c1:3a:58:08:28:49:93:63:08:d4:eb:5d:a5:f2:cc:5d:3c:
         63:a0:81:05:52:3a:86:b0:aa:91:ac:36:e7:5d:86:9e:82:4e:
         5e:4e:9b:ee:37:9b:e2:0e:af:47:d5:1d:da:41:18:f4:90:b0:
         5b:41:0c:26:60:c6:c2:4f:03:05:44:2f:bd:6f:4d:56:19:48:
         c7:19:61:dc:fc:0a:cb:3d:e2:59:c1:a6:62:02:14:33:5c:c0:
         98:6a:f0:62:3a:08:56:79:04:88:32:7b:73:ce:43:93:52:0f:
         36:00:83:0e:ed:5d:86:bf:f6:bc:49:b8:f9:9a:91:bf:2a:27:
         6f:82:34:27:94:d8:4b:d0:ac:96:b4:f5:ec:aa:ba:8c:e3:41:
         59:94:14:1d:3e:bb:55:0f:56:f9:db:05:2d:6d:2c:0b:ae:1d:
         0a:a5:e8:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1
RUZFQTQ0OTYwHhcNMjUxMDE4MjM1MzE2WhcNMjUxMDI1MjM1MzE2WjAYMRYwFAYD
VQQDEw02OGY0Mjg2ZC02MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IZxBc79iAxg6YxRaIPQ46OqzFcaxW+ecGET4JT0aA3X8VAgxhpjstqRu2Xw
ITxgc5vVNPL7ArVrtt2PgXjRkUM0V8cmJKX0K4uYd7hO6Q7NKZwOXNaYMZ1nj0h1
7Z2c54Tpv6j6jf4byMZbchsvmFKqSJzxLeVWq72k9DFSpyir6gd2VcKvTf23ZfLj
B6Q1NWLGz+CoqtXRNd3fJ7XBzryaKpuDut5ucXHuelmFqlOPPfbjgu62YPRNJ1ru
BoapLBXtMmut5xl5UvasodEte59ZARLBCfgH5qohv7Bmji7E9/3PscskXPampKBz
gF6eflWLhOU4uVUPh2VePXHnJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKk86eD
mRn5a3tkM3Yhvuc2TkITMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE
MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjY4Qi80MjZGNTdDMDhEMzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExx
ZHhJbW9CV0l0U0JlX3FSSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqGgtmElJiNGN2veGuqdRm3F5W65e8Z8aW3HKEseGKUTsO+gyF4+/p
Umnw94bzGr6oW7qOrUStqKbe4+juncbUc0m6RB+YJ9V1NLve4yVAYWCLOpnHfhjh
mNTHwTpYCChJk2MI1OtdpfLMXTxjoIEFUjqGsKqRrDbnXYaegk5eTpvuN5viDq9H
1R3aQRj0kLBbQQwmYMbCTwMFRC+9b01WGUjHGWHc/ArLPeJZwaZiAhQzXMCYavBi
OghWeQSIMntzzkOTUg82AIMO7V2Gv/a8Sbj5mpG/KidvgjQnlNhL0KyWtPXsqrqM
40FZlBQdPrtVD1b52wUtbSwLrh0Kpegr
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:09 2025 by rpki-client