Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
File:                     8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json)
Hash identifier:          95Sw3pB3Ofohf0/biWNvbrrWKAEWoMwEJ7PzxpoUEqQ=
Subject key identifier:   27:20:AC:AD:07:3C:DA:68:DE:89:6E:1F:AD:42:45:A4:17:4E:E1:78
Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Certificate issuer:       /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
Certificate serial:       0A4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
Manifest number:          0A48
Signing time:             Sat 18 Oct 2025 20:41:14 +0000
Manifest this update:     Sat 18 Oct 2025 20:41:13 +0000
Manifest next update:     Sat 25 Oct 2025 20:41:13 +0000
Files and hashes:         1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: 8Asiql1ykCuAOxZHtT5k/u5EPXAz0WqGIPPRTt3GJKg=)
                          2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638 (0xa4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Validity
            Not Before: Oct 18 20:41:13 2025 GMT
            Not After : Oct 25 20:41:13 2025 GMT
        Subject: CN=68f3fb69-a65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:c3:ed:a7:a5:cd:99:62:64:3c:b3:86:87:
                    a7:81:f4:d0:ab:7a:a3:20:bb:9f:a6:fc:6e:12:e6:
                    aa:3f:fa:21:c5:b5:ed:63:82:64:23:fb:62:27:f6:
                    5f:5a:64:43:f2:8c:52:1b:20:80:83:0a:07:d5:34:
                    71:92:8e:07:11:b2:0b:6a:6f:f5:b1:d5:9f:0e:5e:
                    64:00:52:c4:1e:fb:b4:61:4f:72:58:57:5e:75:7a:
                    0e:33:0d:61:bb:40:9d:c6:2f:40:f7:87:d9:af:29:
                    74:a9:da:e1:b1:f9:57:2a:18:9b:b9:ca:99:93:94:
                    0a:0b:4f:73:c5:24:aa:be:c7:f5:27:2c:b6:87:d5:
                    98:c3:75:55:e4:b7:1e:82:e1:9d:61:c6:21:32:a1:
                    7d:a2:b2:1b:2e:bf:c4:c6:82:aa:8a:9f:0a:0d:b5:
                    3c:d6:8d:e2:bd:fe:e1:46:5d:3a:43:be:f6:1b:b7:
                    dd:4d:06:70:77:8c:2c:c6:c8:6e:4f:d1:51:4a:52:
                    33:89:ef:cf:a4:8c:61:5e:71:21:64:12:7f:da:61:
                    eb:08:96:dc:ab:46:ec:63:cb:c4:eb:e6:b0:1e:02:
                    34:23:d6:bc:ea:92:97:55:bc:e7:c7:1d:5e:ed:ee:
                    7e:b9:f3:ca:c5:41:e4:00:5e:8f:fb:a8:7b:1b:40:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:AC:AD:07:3C:DA:68:DE:89:6E:1F:AD:42:45:A4:17:4E:E1:78
            X509v3 Authority Key Identifier:
                keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:95:d5:3e:8f:64:86:da:66:a8:26:2f:5a:07:7e:70:ff:
         47:6f:a1:a0:45:bf:83:26:e1:a3:64:af:90:6d:fd:1c:ce:2a:
         8b:14:ab:54:d2:ca:e6:09:d4:05:23:f6:04:91:ce:0a:0c:3b:
         a4:6b:ab:93:2d:41:2e:51:ea:72:01:fa:89:99:68:55:0e:2d:
         ef:f8:62:c7:1c:de:90:4a:7a:fe:27:20:57:ef:65:66:60:1a:
         50:e1:f3:09:68:03:54:c0:d1:9d:43:a4:3f:dc:6f:94:0e:bc:
         ee:ed:c0:02:bc:8c:a3:ef:ed:87:d3:31:47:f1:97:bf:36:86:
         6f:c4:c5:3e:dc:20:87:ba:de:3c:49:b9:2a:04:fb:60:24:2c:
         bd:3f:42:ff:4e:30:e3:f3:c9:c0:cc:28:3d:15:db:99:e1:10:
         dc:3d:58:bf:e9:04:3c:87:97:d4:8f:87:31:4a:7c:52:85:78:
         8d:25:ea:d6:4c:95:8e:bf:dc:7e:1d:22:af:a3:df:55:2c:a8:
         1d:d2:ac:2c:49:74:13:23:9d:4a:44:08:b0:e5:5d:18:0f:6d:
         6e:2a:0a:d9:cd:bf:3a:83:b7:eb:64:05:c4:d1:71:72:d5:07:
         c6:86:58:c8:8c:18:18:92:21:25:b6:da:99:6b:f3:98:db:ab:
         01:b6:dc:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My
M0E2OTJBMjIwHhcNMjUxMDE4MjA0MTEzWhcNMjUxMDI1MjA0MTEzWjAYMRYwFAYD
VQQDEw02OGYzZmI2OS1hNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcXD7aelzZliZDyzhoengfTQq3qjILufpvxuEuaqP/ohxbXtY4JkI/tiJ/Zf
WmRD8oxSGyCAgwoH1TRxko4HEbILam/1sdWfDl5kAFLEHvu0YU9yWFdedXoOMw1h
u0Cdxi9A94fZryl0qdrhsflXKhibucqZk5QKC09zxSSqvsf1Jyy2h9WYw3VV5Lce
guGdYcYhMqF9orIbLr/ExoKqip8KDbU81o3ivf7hRl06Q772G7fdTQZwd4wsxshu
T9FRSlIzie/PpIxhXnEhZBJ/2mHrCJbcq0bsY8vE6+awHgI0I9a86pKXVbznxx1e
7e5+ufPKxUHkAF6P+6h7G0BdFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcgrK0H
PNpo3oluH61CRaQXTuF4MB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1
REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh
UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuQJXVPo9khtpmqCYvWgd+cP9Hb6GgRb+DJuGjZK+Qbf0cziqLFKtU
0srmCdQFI/YEkc4KDDuka6uTLUEuUepyAfqJmWhVDi3v+GLHHN6QSnr+JyBX72Vm
YBpQ4fMJaANUwNGdQ6Q/3G+UDrzu7cACvIyj7+2H0zFH8Ze/NoZvxMU+3CCHut48
SbkqBPtgJCy9P0L/TjDj88nAzCg9FduZ4RDcPVi/6QQ8h5fUj4cxSnxShXiNJerW
TJWOv9x+HSKvo99VLKgd0qwsSXQTI51KRAiw5V0YD21uKgrZzb86g7frZAXE0XFy
1QfGhljIjBgYkiElttqZa/OY26sBttzV
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:12 2025 by rpki-client