Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
File:                     2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json)
Hash identifier:          voB24u0LD7pPxiXApaF7Lgan7Lfuk7fB88UmO0U142I=
Subject key identifier:   E4:3D:C5:0C:F1:5B:7A:73:3D:04:47:85:57:A2:C3:16:E5:89:38:14
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0D38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
Manifest number:          0D22
Signing time:             Sat 18 Oct 2025 18:44:34 +0000
Manifest this update:     Sat 18 Oct 2025 18:44:34 +0000
Manifest next update:     Sat 25 Oct 2025 18:44:34 +0000
Files and hashes:         1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: ynu23/67Rh0/8ZKtMgd1ICyyXgW5bDqEeVTvXeBQUMM=)
                          2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: LD0ithX2780J0eLYJ+pZjxCf/VO5UT20hM3rBP9oW8s=)
                          3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: PkBHUrnClJtIRj3hyvhFOR74ygd0IwmSJ02fNGArhbM=)
                          4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: ORDwcUk6C17rG0Rjjv65wOFUqorGmDWrJEH1nGvJDz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3384 (0xd38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Oct 18 18:44:34 2025 GMT
            Not After : Oct 25 18:44:34 2025 GMT
        Subject: CN=68f3e012-42b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:25:73:ea:32:4d:f9:97:d5:b8:e3:a7:18:
                    ae:0e:51:93:e5:01:1c:04:73:49:a0:5f:8a:77:5a:
                    0c:90:15:fb:21:36:ba:fd:1f:35:3c:fa:20:de:6f:
                    e9:68:5a:ff:4a:01:47:f0:62:4e:ad:6f:fa:1d:38:
                    5e:74:8f:1c:8c:af:db:20:7a:7f:6d:35:00:29:96:
                    d2:24:ab:22:4c:38:12:cd:10:de:b7:0e:4c:12:22:
                    79:ac:a9:55:a8:6e:5f:77:8b:64:61:90:30:47:2f:
                    83:df:ff:ae:c4:28:0f:c7:be:84:d2:0f:f0:6b:82:
                    5d:47:0e:a4:89:7d:5d:5f:b3:ca:43:16:a3:bd:93:
                    86:43:67:04:c5:6b:53:4d:73:6e:c1:bf:3d:e6:b5:
                    12:90:07:97:86:f8:46:69:cf:85:b9:b2:a4:12:32:
                    3f:60:63:50:4b:d1:19:d3:eb:6d:37:b9:a5:ff:14:
                    de:d0:95:03:38:da:8f:c0:5a:01:fa:e0:b4:78:b7:
                    b9:79:f6:d9:07:10:25:b5:b2:1d:a3:61:62:8e:5d:
                    83:2b:bc:a7:4b:ef:59:1a:85:f3:f2:60:01:f7:65:
                    a7:20:bd:0a:8a:93:d5:46:92:02:27:05:c4:ef:13:
                    09:f9:cc:35:a9:8d:a3:a6:e2:63:bf:07:dd:88:af:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3D:C5:0C:F1:5B:7A:73:3D:04:47:85:57:A2:C3:16:E5:89:38:14
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:59:a5:22:6c:0e:8d:64:09:9d:14:aa:ac:86:a1:88:9a:
         43:7a:eb:ed:c2:62:a4:f9:47:fb:db:d4:c4:46:90:d8:80:27:
         19:a7:40:17:9e:9d:ed:ec:34:fd:03:5a:ad:eb:1a:09:d9:36:
         8a:bb:07:60:28:c2:25:24:25:94:90:fb:4c:df:cb:55:94:0f:
         0d:de:9a:22:41:f8:a1:7c:73:dc:aa:e2:58:9d:1e:aa:54:32:
         55:fb:cf:ec:a5:b8:29:a6:48:c0:c7:d2:ba:f3:4c:6f:e4:55:
         e6:13:cc:38:d8:9f:e8:93:15:36:64:b2:4f:b5:fb:76:81:cb:
         5b:48:f7:05:12:ab:e2:c2:db:fd:bc:88:89:b3:50:f0:21:bb:
         99:4d:49:a9:be:a9:02:01:b4:8b:ca:73:05:7c:7e:b4:7c:80:
         f8:79:66:1b:ee:58:66:9b:a9:63:11:c9:5b:4b:bf:df:4e:46:
         bb:eb:26:3f:42:5b:9d:77:30:58:87:82:71:3d:78:69:b6:80:
         3d:a7:d8:b1:d9:ec:0a:f2:7b:4d:d2:a7:a3:12:9c:0a:db:62:
         aa:cd:0a:12:db:97:a0:62:ae:df:f2:ba:bb:6b:33:76:5a:24:
         01:06:4b:fd:43:45:16:6b:12:31:e0:b7:1d:a4:33:57:94:88:
         da:7c:4a:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF
NTQ0NUU5Q0MwHhcNMjUxMDE4MTg0NDM0WhcNMjUxMDI1MTg0NDM0WjAYMRYwFAYD
VQQDEw02OGYzZTAxMi00MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsgQlc+oyTfmX1bjjpxiuDlGT5QEcBHNJoF+Kd1oMkBX7ITa6/R81PPog3m/p
aFr/SgFH8GJOrW/6HThedI8cjK/bIHp/bTUAKZbSJKsiTDgSzRDetw5MEiJ5rKlV
qG5fd4tkYZAwRy+D3/+uxCgPx76E0g/wa4JdRw6kiX1dX7PKQxajvZOGQ2cExWtT
TXNuwb895rUSkAeXhvhGac+FubKkEjI/YGNQS9EZ0+ttN7ml/xTe0JUDONqPwFoB
+uC0eLe5efbZBxAltbIdo2Fijl2DK7ynS+9ZGoXz8mAB92WnIL0KipPVRpICJwXE
7xMJ+cw1qY2jpuJjvwfdiK/3BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ9xQzx
W3pzPQRHhVeiwxbliTgUMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5
RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR
dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAefVmlImwOjWQJnRSqrIahiJpDeuvtwmKk+Uf729TERpDYgCcZp0AX
np3t7DT9A1qt6xoJ2TaKuwdgKMIlJCWUkPtM38tVlA8N3poiQfihfHPcquJYnR6q
VDJV+8/spbgppkjAx9K680xv5FXmE8w42J/okxU2ZLJPtft2gctbSPcFEqviwtv9
vIiJs1DwIbuZTUmpvqkCAbSLynMFfH60fID4eWYb7lhmm6ljEclbS7/fTka76yY/
QluddzBYh4JxPXhptoA9p9ix2ewK8ntN0qejEpwK22KqzQoS25egYq7f8rq7azN2
WiQBBkv9Q0UWaxIx4LcdpDNXlIjafEpY
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:37 2025 by rpki-client