Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
File:                     K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json)
Hash identifier:          UpF4Ydd5cleOjn+nlmlMOWdlJUwJJMWhKsTpF5JJ9Dg=
Subject key identifier:   EA:7A:74:EA:7B:03:63:AF:53:78:A2:04:53:1D:7E:E4:ED:33:63:E7
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Certificate issuer:       /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial:       1708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
Manifest number:          16EF
Signing time:             Sat 18 Oct 2025 17:02:17 +0000
Manifest this update:     Sat 18 Oct 2025 17:02:16 +0000
Manifest next update:     Sat 25 Oct 2025 17:02:16 +0000
Files and hashes:         1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: 4ThNC//AqPk14GlC2fhsewp4/0mRX5PoWBf80nIeJmk=)
                          2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=)
                          3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5896 (0x1708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
        Validity
            Not Before: Oct 18 17:02:16 2025 GMT
            Not After : Oct 25 17:02:16 2025 GMT
        Subject: CN=68f3c818-49e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:bb:d6:9a:6c:ea:d9:35:8d:48:13:12:26:
                    a7:7d:7e:5d:42:45:b9:63:7a:fb:50:2b:4e:74:02:
                    72:81:6b:51:d0:fd:c6:39:7c:0b:05:9a:e8:3e:25:
                    eb:83:91:56:98:4e:bd:43:97:1a:9d:4e:28:b9:32:
                    43:27:ea:11:b6:e3:23:95:46:9a:54:ef:ea:c8:c2:
                    da:4e:18:ab:7f:dc:88:cf:78:6b:b6:04:ad:96:20:
                    ba:c5:eb:40:66:2c:f5:a0:3b:00:59:d4:6f:aa:05:
                    92:1a:6f:de:88:f6:ed:56:ea:00:9a:82:4f:ce:0c:
                    55:1f:32:05:e1:45:8e:e6:31:c7:25:89:b9:ac:e5:
                    e5:f8:73:38:41:88:e3:62:ae:90:98:52:cc:6f:d5:
                    1e:53:55:b6:35:1b:65:9d:70:5b:f6:23:9b:b0:89:
                    71:83:f6:ee:37:39:fc:dc:a4:ba:72:76:1b:5a:10:
                    01:04:f0:46:94:eb:9f:0e:32:ce:2f:d4:5e:e2:1a:
                    93:77:32:4c:ce:e8:97:1b:3f:b8:e8:e5:3f:2e:5c:
                    ef:c5:b2:ca:62:86:35:a4:1f:d3:e2:2c:ec:5d:35:
                    88:48:07:4a:4b:c2:89:03:11:ca:df:0d:75:7b:80:
                    40:a6:e5:64:c0:9e:c9:8f:a5:95:ef:d1:4d:8e:74:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:74:EA:7B:03:63:AF:53:78:A2:04:53:1D:7E:E4:ED:33:63:E7
            X509v3 Authority Key Identifier:
                keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:ff:91:32:a0:f7:2d:57:d6:d3:13:22:e2:57:58:b1:f9:
         1d:d8:6c:63:2d:c9:2e:71:29:a8:06:b6:a4:f5:28:eb:86:16:
         d3:7e:97:74:ba:61:4f:a3:78:85:66:4a:7a:ef:7f:2a:e5:a0:
         fe:9c:e9:10:60:76:44:84:b8:4c:fa:2c:7d:2d:0b:02:56:d7:
         9c:f3:69:b4:ec:2d:fe:5b:79:a7:ba:13:64:26:52:d0:04:53:
         df:6c:59:7b:52:cd:52:54:74:a0:c8:c0:4c:f4:fa:f8:52:fb:
         de:b4:9f:2f:20:a4:60:70:5a:f7:2d:fd:8b:5a:8e:73:33:c1:
         f1:26:c2:9a:d2:d5:8e:ca:c4:ea:ad:f2:d3:b7:92:a1:be:d3:
         b4:c7:18:56:ba:d4:7b:67:00:5b:9e:be:10:50:b1:0b:bd:c8:
         9e:f8:91:eb:e3:e4:55:ee:4e:b0:80:af:b0:23:b0:f0:9c:59:
         f3:01:9d:6b:d2:8f:03:a5:a6:91:fb:b3:46:19:6b:f1:1b:4b:
         ca:a6:b0:3c:f4:bc:ca:a2:74:af:f7:0d:1f:34:56:25:22:ec:
         f2:7c:62:c4:3f:27:4b:0d:b9:68:45:e1:f1:19:b6:42:80:8c:
         5a:23:4f:32:77:b9:e3:2c:b8:72:2f:42:e5:de:67:84:7a:2b:
         b9:9d:55:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw
QUVEREJCNkIwHhcNMjUxMDE4MTcwMjE2WhcNMjUxMDI1MTcwMjE2WjAYMRYwFAYD
VQQDEw02OGYzYzgxOC00OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4271pps6tk1jUgTEianfX5dQkW5Y3r7UCtOdAJygWtR0P3GOXwLBZroPiXr
g5FWmE69Q5canU4ouTJDJ+oRtuMjlUaaVO/qyMLaThirf9yIz3hrtgStliC6xetA
Ziz1oDsAWdRvqgWSGm/eiPbtVuoAmoJPzgxVHzIF4UWO5jHHJYm5rOXl+HM4QYjj
Yq6QmFLMb9UeU1W2NRtlnXBb9iObsIlxg/buNzn83KS6cnYbWhABBPBGlOufDjLO
L9Re4hqTdzJMzuiXGz+46OU/LlzvxbLKYoY1pB/T4izsXTWISAdKS8KJAxHK3w11
e4BApuVkwJ7Jj6WV79FNjnSG8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp6dOp7
A2OvU3iiBFMdfuTtM2PnMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE
MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS
UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXJ/+RMqD3LVfW0xMi4ldYsfkd2GxjLckucSmoBrak9SjrhhbTfpd0
umFPo3iFZkp6738q5aD+nOkQYHZEhLhM+ix9LQsCVtec82m07C3+W3mnuhNkJlLQ
BFPfbFl7Us1SVHSgyMBM9Pr4UvvetJ8vIKRgcFr3Lf2LWo5zM8HxJsKa0tWOysTq
rfLTt5KhvtO0xxhWutR7ZwBbnr4QULELvcie+JHr4+RV7k6wgK+wI7DwnFnzAZ1r
0o8DpaaR+7NGGWvxG0vKprA89LzKonSv9w0fNFYlIuzyfGLEPydLDbloReHxGbZC
gIxaI08yd7njLLhyL0Ll3meEeiu5nVXN
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:02 2025 by rpki-client