Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File:                     hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier:          AknEzIRGcGTHCvF3w+n4OyWrjnNe3tBgronrJCT1+EI=
Subject key identifier:   FF:5B:7F:AB:36:16:0F:B1:B3:6E:73:02:35:74:06:01:66:93:24:D4
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number:          99
Signing time:             Sun 19 Oct 2025 09:38:29 +0000
Manifest this update:     Sun 19 Oct 2025 09:38:28 +0000
Manifest next update:     Sun 26 Oct 2025 09:38:28 +0000
Files and hashes:         1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: cnl+dzfBuB2Ycg++qNuu/RZEG1RoK6WYfOPpuB57ha4=)
                          2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=)
                          3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=)
                          4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=)
                          5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: Oct 19 09:38:28 2025 GMT
            Not After : Oct 26 09:38:28 2025 GMT
        Subject: CN=68f4b194-614f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:8a:88:67:f4:20:c6:16:ad:b6:fe:f4:63:
                    ac:1d:e3:ef:5b:5d:8e:11:20:18:c8:02:50:d5:fb:
                    cc:f3:4b:50:7e:56:d0:a8:cc:51:b5:ce:18:b0:aa:
                    85:61:48:0e:8a:f7:7e:0c:e9:0a:1b:13:5c:08:a1:
                    42:3b:f2:c5:a5:4c:91:9f:fb:16:ae:6d:d1:5f:85:
                    d6:65:25:06:a4:f4:4b:1c:a8:43:c6:a2:9b:14:23:
                    80:67:57:11:5b:d7:a8:a7:61:67:c2:8a:f7:37:5a:
                    ec:3f:f0:30:0c:57:b6:69:17:9d:87:e3:1c:87:8b:
                    08:b4:86:40:69:af:1e:ff:4b:19:e3:58:04:8f:e0:
                    ae:19:80:2b:ca:13:8c:92:d7:f2:3d:45:9a:69:c6:
                    3c:34:4e:d7:3a:17:c3:31:2f:bc:b5:6a:66:d5:42:
                    c2:d7:c8:e7:87:ae:06:94:98:60:8e:e0:73:d3:62:
                    6e:7f:89:b6:de:d5:32:10:0b:7c:fa:b3:1d:1a:ce:
                    60:41:18:bf:0a:27:4f:d2:d4:75:eb:59:f7:40:0a:
                    8a:0d:4f:c3:b9:d6:cf:58:c7:14:9b:fa:d0:80:d1:
                    e4:a2:66:3f:57:6a:05:3c:87:7a:3a:16:b6:c2:5c:
                    11:97:76:35:c4:c5:2e:ae:b1:80:d3:0d:bf:10:e9:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5B:7F:AB:36:16:0F:B1:B3:6E:73:02:35:74:06:01:66:93:24:D4
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e4:5b:22:8e:9f:b4:f0:2d:c5:cc:0b:d6:6b:18:82:fa:ec:
         d5:d5:1e:4a:96:04:cc:24:71:5f:40:70:bc:06:29:27:3b:83:
         29:29:68:6e:fb:a7:e9:3c:23:3d:f8:b4:e3:3d:a0:82:09:25:
         88:4c:9f:31:50:77:c8:01:6e:d2:8e:d0:92:1f:8f:20:a6:79:
         0b:6b:9d:6f:d5:92:a2:de:1e:c5:0a:9e:41:67:84:04:68:c7:
         0e:ae:bc:9c:cd:ea:09:f4:45:7b:3f:0e:25:38:c2:44:e7:c9:
         ad:8e:4a:37:1c:d3:65:31:a5:70:43:da:c3:c3:b4:04:14:67:
         dc:c5:39:ca:3b:35:63:d4:02:a1:fb:8d:21:b6:8a:9a:d1:52:
         51:6a:18:8e:4c:fc:5b:77:3e:fe:87:b1:b8:bc:9e:da:c6:30:
         36:22:46:0d:76:87:d0:6f:26:85:25:d8:99:74:bf:51:05:36:
         7f:44:3b:94:53:7a:11:30:ea:e8:d3:e8:79:fa:8c:92:d4:e0:
         5f:b1:d1:ad:29:40:3e:7f:47:a9:30:22:cc:28:d8:ec:80:6f:
         cd:3d:66:9e:6d:25:5c:cd:a0:d8:44:cf:02:16:fe:a0:ad:c2:
         6f:f5:88:ef:66:9c:a8:f1:c1:2d:53:93:15:af:7d:ec:56:9b:
         d6:f5:d6:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1
MTNERjZCRDcwHhcNMjUxMDE5MDkzODI4WhcNMjUxMDI2MDkzODI4WjAYMRYwFAYD
VQQDEw02OGY0YjE5NC02MTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQyKiGf0IMYWrbb+9GOsHePvW12OESAYyAJQ1fvM80tQflbQqMxRtc4YsKqF
YUgOivd+DOkKGxNcCKFCO/LFpUyRn/sWrm3RX4XWZSUGpPRLHKhDxqKbFCOAZ1cR
W9eop2Fnwor3N1rsP/AwDFe2aRedh+Mch4sItIZAaa8e/0sZ41gEj+CuGYAryhOM
ktfyPUWaacY8NE7XOhfDMS+8tWpm1ULC18jnh64GlJhgjuBz02Juf4m23tUyEAt8
+rMdGs5gQRi/CidP0tR161n3QAqKDU/DudbPWMcUm/rQgNHkomY/V2oFPId6Oha2
wlwRl3Y1xMUurrGA0w2/EOlvDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9bf6s2
Fg+xs25zAjV0BgFmkyTUMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5
MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv
V1pCaTBJeTV5NTFSUGZhOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCm5Fsijp+08C3FzAvWaxiC+uzV1R5KlgTMJHFfQHC8BiknO4MpKWhu
+6fpPCM9+LTjPaCCCSWITJ8xUHfIAW7SjtCSH48gpnkLa51v1ZKi3h7FCp5BZ4QE
aMcOrryczeoJ9EV7Pw4lOMJE58mtjko3HNNlMaVwQ9rDw7QEFGfcxTnKOzVj1AKh
+40htoqa0VJRahiOTPxbdz7+h7G4vJ7axjA2IkYNdofQbyaFJdiZdL9RBTZ/RDuU
U3oRMOro0+h5+oyS1OBfsdGtKUA+f0epMCLMKNjsgG/NPWaebSVczaDYRM8CFv6g
rcJv9YjvZpyo8cEtU5MVr33sVpvW9dYX
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:19 2025 by rpki-client