Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
File:                     7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json)
Hash identifier:          ezUB7ocXTv/5OyQn3/K50/JVUGmfOit5EYSDox/m5n0=
Subject key identifier:   15:A9:35:8A:EB:E2:14:D4:16:84:B3:03:B7:44:EF:14:E1:A3:40:23
Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF
Certificate issuer:       /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
Certificate serial:       06A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
Manifest number:          06A2
Signing time:             Sat 18 Oct 2025 23:45:36 +0000
Manifest this update:     Sat 18 Oct 2025 23:45:35 +0000
Manifest next update:     Sat 25 Oct 2025 23:45:35 +0000
Files and hashes:         1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: r6oHh/agrrxlKpUfwgm5IsxVRrateZSUUpTGF7pqZ3M=)
                          2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: twDSchPdGzrqlLCoHP097W881rTgiSF0Kw2KrznKgJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl
                          rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
        Validity
            Not Before: Oct 18 23:45:35 2025 GMT
            Not After : Oct 25 23:45:35 2025 GMT
        Subject: CN=68f4269f-881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:ac:a0:95:2b:34:4c:1d:64:f7:41:a5:67:
                    f1:d3:17:ee:cb:49:18:1d:86:fd:6a:dd:36:ac:4f:
                    ff:f9:86:f3:e6:a3:fc:13:4b:58:77:ed:ec:4c:18:
                    22:ba:fe:1c:59:9b:94:fb:99:d6:7b:8e:cd:b7:4a:
                    91:2a:a6:cc:f5:53:a6:ba:c7:93:6e:9d:b7:51:ad:
                    c0:23:36:e6:11:69:14:07:5e:d6:ff:5b:ad:fa:8d:
                    19:62:41:66:d9:e6:f5:c8:4a:ef:42:0c:07:34:39:
                    0b:80:af:20:86:4b:85:da:2f:60:64:74:24:14:10:
                    cb:51:8a:d8:88:9c:8b:dc:06:a5:fe:ba:07:0f:7a:
                    a9:ac:11:f3:70:8e:65:29:7b:70:b5:9d:2e:56:e8:
                    b1:16:6b:b1:23:55:00:4d:b0:11:04:1b:c0:0c:9e:
                    ef:ed:c8:88:fa:3b:2c:7c:d0:d9:7a:b7:c8:7f:1c:
                    3c:fd:57:34:d6:ae:a3:8c:9f:d3:cb:20:b9:39:7e:
                    e8:bf:6d:88:ed:14:8c:d5:45:03:52:e5:d7:83:ff:
                    5a:ec:d7:3f:5d:ce:40:ca:b3:b2:12:3e:80:1f:35:
                    83:8a:6d:44:88:d8:2d:ad:07:4d:9e:00:78:60:52:
                    12:80:0c:25:e4:10:d5:be:0f:7f:17:2f:d2:d9:66:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:35:8A:EB:E2:14:D4:16:84:B3:03:B7:44:EF:14:E1:A3:40:23
            X509v3 Authority Key Identifier:
                keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:06:4b:af:10:2f:24:b1:fa:b2:7a:ff:f1:bf:83:d5:c5:53:
         55:75:9a:12:2d:53:46:7d:27:0c:df:0f:6d:3b:17:fb:7d:b5:
         6c:a0:f1:f9:d4:a0:06:5c:f6:54:4d:83:02:77:18:fa:43:58:
         80:92:6b:30:8d:2f:5d:75:80:f6:f7:6d:99:9b:2c:d0:c4:e3:
         bb:91:4f:c6:86:80:c5:7e:27:6a:78:41:32:34:ef:7a:9a:62:
         a1:99:96:cf:bd:70:b5:47:9d:3e:ec:3a:fe:9a:01:3e:63:93:
         ea:81:f0:26:14:1a:8e:6f:8f:86:37:3f:a3:02:bd:b2:54:b9:
         f3:2d:f8:c1:65:40:4e:b8:e3:f2:52:2c:ae:ed:03:cf:a2:b8:
         ba:15:80:b4:a2:5f:45:f2:71:7d:b8:5f:53:3f:c5:6c:61:56:
         78:32:70:9e:28:fe:33:e9:8b:4b:77:97:b6:c3:d5:c7:40:d9:
         95:86:b7:58:cb:7b:2a:7a:8d:b6:25:9e:d0:54:f3:80:ea:5f:
         6f:ed:58:b0:de:c4:f6:b5:d8:18:f0:6a:fb:25:65:ed:8b:62:
         0c:ef:21:74:9b:8a:fd:01:e9:8f:52:75:0f:42:63:25:43:fe:
         1c:e5:9f:db:0a:f8:3a:cf:0d:7a:36:52:36:8a:6e:1d:45:95:
         39:dd:6c:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy
QUU1QkMwRUYwHhcNMjUxMDE4MjM0NTM1WhcNMjUxMDI1MjM0NTM1WjAYMRYwFAYD
VQQDEw02OGY0MjY5Zi04ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn+GsoJUrNEwdZPdBpWfx0xfuy0kYHYb9at02rE//+Ybz5qP8E0tYd+3sTBgi
uv4cWZuU+5nWe47Nt0qRKqbM9VOmuseTbp23Ua3AIzbmEWkUB17W/1ut+o0ZYkFm
2eb1yErvQgwHNDkLgK8ghkuF2i9gZHQkFBDLUYrYiJyL3Aal/roHD3qprBHzcI5l
KXtwtZ0uVuixFmuxI1UATbARBBvADJ7v7ciI+jssfNDZerfIfxw8/Vc01q6jjJ/T
yyC5OX7ov22I7RSM1UUDUuXXg/9a7Nc/Xc5AyrOyEj6AHzWDim1EiNgtrQdNngB4
YFISgAwl5BDVvg9/Fy/S2WaEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWpNYrr
4hTUFoSzA7dE7xTho0AjMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1
M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR
MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0BkuvEC8ksfqyev/xv4PVxVNVdZoSLVNGfScM3w9tOxf7fbVsoPH5
1KAGXPZUTYMCdxj6Q1iAkmswjS9ddYD2922ZmyzQxOO7kU/GhoDFfidqeEEyNO96
mmKhmZbPvXC1R50+7Dr+mgE+Y5PqgfAmFBqOb4+GNz+jAr2yVLnzLfjBZUBOuOPy
Uiyu7QPPori6FYC0ol9F8nF9uF9TP8VsYVZ4MnCeKP4z6YtLd5e2w9XHQNmVhrdY
y3sqeo22JZ7QVPOA6l9v7Viw3sT2tdgY8Gr7JWXti2IM7yF0m4r9AemPUnUPQmMl
Q/4c5Z/bCvg6zw16NlI2im4dRZU53Wxs
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:59 2025 by rpki-client