Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
File:                     bRdadMGgmL-i337kNxYF_2owQkk.mft (raw, json)
Hash identifier:          q8F7NNiEcJgSGkaLf1Jt+DVOL9k0dNd96nQrb3G8cdE=
Subject key identifier:   8A:08:6C:00:75:A1:23:31:B8:02:12:02:EF:76:5A:02:E5:11:6C:29
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Certificate issuer:       /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
Manifest number:          055E
Signing time:             Sun 19 Oct 2025 01:07:40 +0000
Manifest this update:     Sun 19 Oct 2025 01:07:39 +0000
Manifest next update:     Sun 26 Oct 2025 01:07:39 +0000
Files and hashes:         1: bRdadMGgmL-i337kNxYF_2owQkk.crl (hash: k/lpFIdba1gKywr0dcTBO0OM6jqMUo3rFq2AK8I06nw=)
                          2: 80379A8A09EA11EC8762242CC4F9AE02.roa (hash: oUfVdTa0mjIDOWEk7LkWCWIoYXH4veF78cMtHzj33q8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
                          rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
        Validity
            Not Before: Oct 19 01:07:39 2025 GMT
            Not After : Oct 26 01:07:39 2025 GMT
        Subject: CN=68f439db-cbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:58:b4:b1:90:47:df:27:45:58:f7:57:a9:
                    c4:ce:be:09:4b:f4:ea:36:a8:9c:a8:3c:84:12:d1:
                    20:0c:2e:93:b0:ab:f4:eb:03:98:a4:86:a0:31:3a:
                    0c:9e:b8:e7:e0:48:4e:09:56:b5:62:04:e8:30:40:
                    e5:37:29:4c:69:5e:b8:23:ac:94:4c:72:29:88:dd:
                    7d:88:cb:58:79:86:98:9d:18:5e:7d:12:30:8b:df:
                    02:29:a7:26:f7:7c:5f:83:3e:e9:3c:81:c2:20:95:
                    57:08:a0:44:18:7d:26:a0:c0:a6:ba:eb:f2:6d:78:
                    ae:40:a1:3d:1d:3c:93:17:81:aa:d2:7a:91:5a:d9:
                    01:90:79:e2:13:1b:4e:68:23:b4:f1:a8:31:db:e8:
                    c1:c8:9d:13:0b:2d:77:80:e8:dc:a2:f1:00:f6:3d:
                    cf:c3:8a:ec:bb:0c:82:54:96:8a:3c:20:98:c6:22:
                    76:8f:2e:c7:75:75:f4:3d:b5:ca:01:f2:4b:9b:f3:
                    c9:37:91:d2:d2:0f:73:51:4f:a9:50:c2:fb:25:20:
                    dc:56:83:0f:35:27:36:0b:04:32:df:12:a5:de:5b:
                    47:da:94:ca:8d:74:3a:cb:a6:fb:b5:a3:76:14:68:
                    a3:58:43:30:8f:8a:88:32:2a:b5:76:bd:9a:19:6d:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:6C:00:75:A1:23:31:B8:02:12:02:EF:76:5A:02:E5:11:6C:29
            X509v3 Authority Key Identifier:
                keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:1a:91:7e:0f:38:c8:5a:3f:4b:06:b3:cc:63:b4:d6:c6:
         fd:8d:f6:ef:9f:5a:50:84:43:de:f2:f4:0e:a4:12:fc:da:8d:
         d0:ae:87:fc:be:86:53:a0:7f:73:d2:5f:72:28:29:a9:4e:c0:
         9d:13:c5:8c:8d:9f:35:00:4d:d4:20:d9:a5:7e:ab:e2:c2:c9:
         c6:ee:27:16:92:16:d0:b5:b6:66:97:1a:75:00:ef:ed:ec:7e:
         8f:96:a9:71:90:62:dd:f2:50:ce:54:dc:92:d2:23:4d:0d:0b:
         ec:8d:77:fb:e8:89:6d:b6:f5:d2:f5:f5:58:99:d8:61:c1:cf:
         a5:7e:84:29:1f:cb:88:67:d6:55:c0:31:0a:17:fa:71:08:19:
         c7:d1:27:19:65:8b:0a:14:85:c9:1f:87:e4:22:fc:52:8f:57:
         47:17:a5:52:3c:08:f8:97:38:30:4c:9f:c1:15:0b:12:88:ff:
         77:97:8c:4f:9e:5a:b9:5d:5f:46:6d:7a:11:1a:26:e0:69:54:
         11:f7:7d:9f:79:a1:cb:1a:5b:e7:28:6f:c0:4d:e1:a7:c0:cc:
         54:10:77:7f:2b:08:20:ca:f0:93:b4:d6:bc:6f:0a:57:52:85:
         b3:a4:ec:30:48:4c:89:1c:12:4e:70:c0:e9:f2:64:da:eb:f9:
         d7:e4:82:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZDQjAxMTAvBgNVBAUTKDZEMTc1QTc0QzFBMDk4QkZBMkRGN0VFNDM3MTYwNUZG
NkEzMDQyNDkwHhcNMjUxMDE5MDEwNzM5WhcNMjUxMDI2MDEwNzM5WjAYMRYwFAYD
VQQDEw02OGY0MzlkYi1jYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszJYtLGQR98nRVj3V6nEzr4JS/TqNqicqDyEEtEgDC6TsKv06wOYpIagMToM
nrjn4EhOCVa1YgToMEDlNylMaV64I6yUTHIpiN19iMtYeYaYnRhefRIwi98CKacm
93xfgz7pPIHCIJVXCKBEGH0moMCmuuvybXiuQKE9HTyTF4Gq0nqRWtkBkHniExtO
aCO08agx2+jByJ0TCy13gOjcovEA9j3Pw4rsuwyCVJaKPCCYxiJ2jy7HdXX0PbXK
AfJLm/PJN5HS0g9zUU+pUML7JSDcVoMPNSc2CwQy3xKl3ltH2pTKjXQ6y6b7taN2
FGijWEMwj4qIMiq1dr2aGW2rTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoIbAB1
oSMxuAISAu92WgLlEWwpMB8GA1UdIwQYMBaAFG0XWnTBoJi/ot9+5DcWBf9qMEJJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkNCMC8zNTU2MjAxQzA5
MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21MLWkzMzdrTnhZRl8yb3dR
a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JSZGFkTUdnbUwtaTMzN2tOeFlGXzJvd1Fray5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkNCMC8zNTU2MjAxQzA5MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21M
LWkzMzdrTnhZRl8yb3dRa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwpBqRfg84yFo/SwazzGO01sb9jfbvn1pQhEPe8vQOpBL82o3Qrof8
voZToH9z0l9yKCmpTsCdE8WMjZ81AE3UINmlfqviwsnG7icWkhbQtbZmlxp1AO/t
7H6PlqlxkGLd8lDOVNyS0iNNDQvsjXf76IlttvXS9fVYmdhhwc+lfoQpH8uIZ9ZV
wDEKF/pxCBnH0ScZZYsKFIXJH4fkIvxSj1dHF6VSPAj4lzgwTJ/BFQsSiP93l4xP
nlq5XV9GbXoRGibgaVQR932feaHLGlvnKG/ATeGnwMxUEHd/KwggyvCTtNa8bwpX
UoWzpOwwSEyJHBJOcMDp8mTa6/nX5IIY
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:20 2025 by rpki-client