Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          U3B55U+DVBVSAxN9sKOpn7idUevJgbDnD6w+rhZosmE=
Subject key identifier:   F5:45:F7:93:C8:75:6A:C5:22:3E:A3:EF:E4:A8:51:A0:C4:F1:77:05
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          010D
Signing time:             Sun 19 Oct 2025 07:53:59 +0000
Manifest this update:     Sun 19 Oct 2025 07:53:58 +0000
Manifest next update:     Sun 26 Oct 2025 07:53:58 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: Q7PhyPZpAl6NJf9afLkBybvVvJCW4mtHry3KzRvkqos=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Oct 19 07:53:58 2025 GMT
            Not After : Oct 26 07:53:58 2025 GMT
        Subject: CN=68f49916-ba76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:22:c1:b7:c9:ba:c3:cb:e1:a1:52:c4:6b:
                    f5:bd:05:ae:ac:0c:0e:5c:c3:b2:ca:8a:d4:44:6a:
                    15:6b:3f:85:3f:c0:e8:9a:b4:68:5f:b1:fe:1b:01:
                    94:80:89:eb:7e:b5:97:c5:41:ae:80:d8:9b:7b:6c:
                    da:93:fc:ad:17:57:27:c6:17:b0:ad:ce:10:0b:00:
                    e2:fe:77:04:9e:b3:51:2f:19:5a:83:88:38:89:78:
                    a0:93:30:6a:48:1b:a4:1f:9a:70:e2:31:73:38:b4:
                    b0:75:8e:4a:d8:b2:92:80:c2:22:90:6e:3f:4d:bf:
                    2a:85:4f:25:cf:b0:1f:f4:23:65:65:32:91:be:67:
                    2e:d3:46:95:d6:a7:ce:d9:af:f5:99:d0:d1:50:cc:
                    22:a9:33:72:af:e6:50:16:44:4c:ee:00:36:cd:1f:
                    0b:ff:59:34:e9:2d:5f:2a:e0:3a:a9:89:8d:e4:5e:
                    e3:9e:73:49:c4:eb:70:42:fa:75:29:06:c2:f9:c3:
                    c3:b3:ce:fb:d4:88:ff:ae:24:c7:78:65:f6:b4:a2:
                    48:df:8f:d5:40:0c:fb:d6:d1:6e:98:35:a1:17:10:
                    ae:a2:a8:2f:00:db:59:9f:d5:b7:c4:56:1e:40:06:
                    ee:3b:b1:43:10:47:58:9e:e9:36:79:0a:c6:be:92:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:45:F7:93:C8:75:6A:C5:22:3E:A3:EF:E4:A8:51:A0:C4:F1:77:05
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:96:17:d4:dd:1c:40:33:db:27:ff:84:bc:6a:e5:34:3b:
         ca:78:01:51:01:80:77:f0:c2:c7:e4:b0:44:95:08:1c:47:83:
         9d:a8:84:24:46:f2:4a:1f:31:11:5e:ab:b2:49:e9:46:42:17:
         7b:a3:d3:a9:e0:66:ed:98:e8:40:c7:f6:1d:3b:86:f0:78:da:
         42:7c:ba:aa:33:3a:f7:f5:b2:90:86:b4:ee:90:6a:55:ba:59:
         17:e2:8c:fa:11:53:8c:91:22:6b:2f:3e:90:f9:a5:4f:8a:fc:
         2a:2a:32:eb:d0:b4:2d:ae:37:8c:30:db:bf:2f:bf:15:15:17:
         15:88:16:8c:33:bb:7d:7f:f2:39:e2:15:6f:e4:c1:12:1f:0d:
         be:66:80:ff:c8:69:14:2a:a7:ed:7e:03:d4:fa:e8:93:6a:2d:
         f7:65:f4:62:ec:73:b7:a0:ce:8b:39:7a:5e:69:7f:31:a8:f0:
         48:26:a7:d0:ad:3f:b9:58:1e:96:f7:f2:f5:0d:c5:3d:8b:14:
         6c:4d:91:d2:27:2e:1a:df:d7:88:c1:69:ce:1d:61:d2:50:21:
         cd:a2:1d:13:e7:d9:84:4c:4d:c9:17:32:f0:c2:16:71:8f:1f:
         b2:8b:84:24:93:cc:22:21:ab:84:31:1b:70:e6:21:1e:24:7b:
         43:48:e7:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUREOTkxMTAvBgNVBAUTKDRGQzQ2MEYwOUY5MEFBODZDQUY0NjdDMjg1QUQ3OEY0
MzEyNzIwQjAwHhcNMjUxMDE5MDc1MzU4WhcNMjUxMDI2MDc1MzU4WjAYMRYwFAYD
VQQDEw02OGY0OTkxNi1iYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzgiwbfJusPL4aFSxGv1vQWurAwOXMOyyorURGoVaz+FP8DomrRoX7H+GwGU
gInrfrWXxUGugNibe2zak/ytF1cnxhewrc4QCwDi/ncEnrNRLxlag4g4iXigkzBq
SBukH5pw4jFzOLSwdY5K2LKSgMIikG4/Tb8qhU8lz7Af9CNlZTKRvmcu00aV1qfO
2a/1mdDRUMwiqTNyr+ZQFkRM7gA2zR8L/1k06S1fKuA6qYmN5F7jnnNJxOtwQvp1
KQbC+cPDs8771Ij/riTHeGX2tKJI34/VQAz71tFumDWhFxCuoqgvANtZn9W3xFYe
QAbuO7FDEEdYnuk2eQrGvpIanwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVF95PI
dWrFIj6j7+SoUaDE8XcFMB8GA1UdIwQYMBaAFE/EYPCfkKqGyvRnwoWtePQxJyCw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREQ5OS8wNTcyOUI0QzE5
QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFvYks5R2ZDaGExNDlERW5J
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REQ5OS8wNTcyOUI0QzE5QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFv
Yks5R2ZDaGExNDlERW5JTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMwpYX1N0cQDPbJ/+EvGrlNDvKeAFRAYB38MLH5LBElQgcR4OdqIQk
RvJKHzERXquySelGQhd7o9Op4GbtmOhAx/YdO4bweNpCfLqqMzr39bKQhrTukGpV
ulkX4oz6EVOMkSJrLz6Q+aVPivwqKjLr0LQtrjeMMNu/L78VFRcViBaMM7t9f/I5
4hVv5MESHw2+ZoD/yGkUKqftfgPU+uiTai33ZfRi7HO3oM6LOXpeaX8xqPBIJqfQ
rT+5WB6W9/L1DcU9ixRsTZHSJy4a39eIwWnOHWHSUCHNoh0T59mETE3JFzLwwhZx
jx+yi4Qkk8wiIauEMRtw5iEeJHtDSOcq
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:15 2025 by rpki-client