Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File:                     MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier:          VMmO1fJTZAXDqLNhTwzK/JheP+vPIpOH+7L2ZOzqRqA=
Subject key identifier:   F9:B9:AB:14:5E:1C:8F:57:56:7A:36:AA:E1:E7:D3:F1:B4:BC:14:BA
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer:       /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial:       0D58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number:          0D3B
Signing time:             Sat 18 Oct 2025 18:43:58 +0000
Manifest this update:     Sat 18 Oct 2025 18:43:57 +0000
Manifest next update:     Sat 25 Oct 2025 18:43:57 +0000
Files and hashes:         1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: dFPrQFMgwo5MTimxDoNLmucMCKoj1JXd9qaakEdLj/Y=)
                          2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=)
                          3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=)
                          4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3416 (0xd58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
        Validity
            Not Before: Oct 18 18:43:57 2025 GMT
            Not After : Oct 25 18:43:57 2025 GMT
        Subject: CN=68f3dfed-fd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:29:0c:89:50:73:79:9c:66:7e:eb:bb:40:
                    c5:51:ad:50:9d:7c:f3:a9:f1:eb:95:84:a3:69:f1:
                    ad:78:f1:4e:73:cc:ef:6f:88:1c:ec:53:d7:18:e4:
                    f3:b0:70:78:67:d2:ff:a4:b8:9c:86:a8:2b:7b:03:
                    61:39:d1:45:ad:07:19:5a:5a:df:3c:50:05:b8:2a:
                    ae:6c:99:78:32:81:28:50:2d:f8:c8:5d:a3:de:89:
                    1c:65:73:83:80:05:c4:05:59:ae:18:93:c0:22:5f:
                    e3:ab:7d:6c:37:d4:cd:e7:d7:3c:a7:70:3b:98:8d:
                    a0:02:5e:96:76:08:4e:52:2a:3e:a4:55:ab:7f:9c:
                    d3:e4:ee:fc:e9:92:ff:0b:79:53:5b:f3:70:0a:53:
                    2f:09:98:07:5a:97:43:fe:20:3d:8a:40:94:49:c0:
                    88:65:ba:c1:f0:48:d5:85:cc:d6:72:88:47:5b:84:
                    5c:e0:d1:58:de:8a:d4:c1:b1:eb:47:12:cc:62:28:
                    e2:3e:c4:1a:ae:4d:34:31:57:fd:84:e6:de:16:97:
                    dc:eb:fd:8f:3a:63:96:cf:30:b3:da:42:8e:ad:0e:
                    ae:3e:82:ed:13:ee:ce:ab:02:63:8b:9d:88:6b:ee:
                    d8:1b:09:24:3d:59:46:47:f2:b6:34:20:fe:a4:0a:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:AB:14:5E:1C:8F:57:56:7A:36:AA:E1:E7:D3:F1:B4:BC:14:BA
            X509v3 Authority Key Identifier:
                keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:a8:74:16:5d:30:95:b2:40:d9:d3:5a:bc:2d:38:4a:f9:
         c4:95:57:e5:d9:e4:69:03:10:96:6f:ca:fe:81:dc:bb:3d:29:
         24:55:b5:b0:0e:37:f7:33:17:84:c2:cc:67:bc:32:8a:25:73:
         de:be:ad:de:f7:00:93:87:e1:99:5f:7f:4b:6a:ee:e0:86:5b:
         36:d9:23:a6:a0:ec:2a:f7:02:37:d5:dc:c9:bb:d9:4b:3f:32:
         b5:f5:97:2b:6b:85:b9:48:2d:a9:69:cb:6e:28:cc:7b:7d:7b:
         89:ba:1c:89:92:49:62:7b:a7:15:fe:d2:06:6f:7c:d1:e4:7f:
         96:78:b6:5d:c9:90:38:bb:d7:8e:01:1c:6f:a3:d6:52:3d:04:
         43:56:56:55:a3:7c:0b:8a:5c:a4:13:b3:8e:83:fc:64:15:15:
         7d:75:30:1d:43:bb:18:ef:e3:d0:65:d2:66:51:4b:13:ae:76:
         77:53:64:11:80:1e:3e:b2:c1:3b:94:61:ac:8c:ce:e7:8a:8e:
         cb:89:a4:db:22:44:1c:9f:c2:0c:5e:51:5d:80:74:bb:4b:f8:
         20:29:c2:b9:dc:95:aa:cb:20:06:6d:3c:08:56:25:fd:61:78:
         88:d7:91:8c:6c:de:4d:0c:88:65:30:9f:b7:d0:4d:e1:2e:23:
         71:3f:ba:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF
MjA2MUM1QzEwHhcNMjUxMDE4MTg0MzU3WhcNMjUxMDI1MTg0MzU3WjAYMRYwFAYD
VQQDEw02OGYzZGZlZC1mZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVkpDIlQc3mcZn7ru0DFUa1QnXzzqfHrlYSjafGtePFOc8zvb4gc7FPXGOTz
sHB4Z9L/pLichqgrewNhOdFFrQcZWlrfPFAFuCqubJl4MoEoUC34yF2j3okcZXOD
gAXEBVmuGJPAIl/jq31sN9TN59c8p3A7mI2gAl6WdghOUio+pFWrf5zT5O786ZL/
C3lTW/NwClMvCZgHWpdD/iA9ikCUScCIZbrB8EjVhczWcohHW4Rc4NFY3orUwbHr
RxLMYijiPsQark00MVf9hObeFpfc6/2POmOWzzCz2kKOrQ6uPoLtE+7OqwJji52I
a+7YGwkkPVlGR/K2NCD+pArAdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPm5qxRe
HI9XVno2quHn0/G0vBS6MB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1
RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5
bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9Dah0Fl0wlbJA2dNavC04SvnElVfl2eRpAxCWb8r+gdy7PSkkVbWw
Djf3MxeEwsxnvDKKJXPevq3e9wCTh+GZX39Lau7ghls22SOmoOwq9wI31dzJu9lL
PzK19Zcra4W5SC2pactuKMx7fXuJuhyJkklie6cV/tIGb3zR5H+WeLZdyZA4u9eO
ARxvo9ZSPQRDVlZVo3wLilykE7OOg/xkFRV9dTAdQ7sY7+PQZdJmUUsTrnZ3U2QR
gB4+ssE7lGGsjM7nio7LiaTbIkQcn8IMXlFdgHS7S/ggKcK53JWqyyAGbTwIViX9
YXiI15GMbN5NDIhlMJ+30E3hLiNxP7rI
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:54 2025 by rpki-client