Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          FlRRXTji64PAzF2B+hSn/0H0c3o022dDJOTNm3XOgiw=
Subject key identifier:   07:6B:CA:F0:38:B2:71:66:35:1E:5E:E6:4F:11:86:11:C2:3B:42:62
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       09E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          09DF
Signing time:             Wed 22 Oct 2025 20:36:08 +0000
Manifest this update:     Wed 22 Oct 2025 20:36:07 +0000
Manifest next update:     Wed 29 Oct 2025 20:36:07 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: 4OzXQP1mryjlvXvngKjU1iEE/o9hKzlGf22TUsiAAmU=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534 (0x9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Oct 22 20:36:07 2025 GMT
            Not After : Oct 29 20:36:07 2025 GMT
        Subject: CN=68f94038-fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:dc:70:ea:f3:c7:45:64:10:7c:b4:c9:43:
                    9d:fc:6e:3b:d1:ab:e5:9b:9f:b7:1f:36:46:7a:0e:
                    de:dd:51:ad:00:32:a5:66:50:9d:cd:aa:9d:1c:39:
                    a3:48:27:89:81:b3:0c:fe:f3:39:ed:2b:d2:2b:17:
                    6f:a6:98:31:8e:f4:a5:0f:7f:d8:55:75:60:eb:0b:
                    dc:32:17:c7:6f:29:c8:a7:cf:45:f5:4f:9b:be:3e:
                    ad:7f:db:20:89:13:7a:92:17:4a:d5:e5:9f:26:33:
                    55:25:de:74:ad:31:8c:2b:44:a2:6f:9b:e8:39:66:
                    be:bd:95:1f:1f:6a:3d:eb:19:7d:90:19:b9:5d:5f:
                    55:85:ba:c0:33:35:06:d7:6a:ff:d6:46:1d:c6:c9:
                    a0:1b:e8:3d:98:50:13:ee:2f:1e:c4:bf:1c:3f:46:
                    2b:15:a1:3b:64:ef:9b:cd:c7:ee:e6:e0:c8:b9:1d:
                    51:6e:7b:cd:8a:35:e1:2d:75:55:63:0e:b0:cd:73:
                    bc:2d:f0:0d:1b:70:8c:29:f8:dc:2b:81:d4:5f:3f:
                    d0:5b:9e:25:29:76:fb:4e:30:5c:cc:cd:fa:88:0e:
                    18:ba:ee:44:c1:96:2c:06:e1:36:8c:3f:76:72:3e:
                    cb:4f:4a:0f:c5:b1:73:8f:bf:c6:d4:05:ee:41:27:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:CA:F0:38:B2:71:66:35:1E:5E:E6:4F:11:86:11:C2:3B:42:62
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f7:ca:de:b9:6f:c0:64:a9:e7:b5:c9:fc:60:67:17:cc:b2:
         fb:4b:20:25:a0:b1:a9:22:c3:11:ac:6f:38:58:3d:da:ac:ce:
         26:af:a2:2e:96:40:31:72:6f:9f:70:3f:72:3c:c8:36:da:47:
         2b:5d:6f:78:2c:ab:bf:eb:cb:7d:85:1b:fa:b9:87:9c:22:11:
         81:62:5c:cc:62:31:f9:4c:90:0c:46:8a:a9:1b:53:45:eb:c6:
         49:4e:3a:8c:41:8a:09:33:f2:71:41:f8:28:ae:a3:96:a8:c8:
         c4:5d:68:bf:07:11:ef:9c:a0:3c:77:4a:e8:24:36:5a:ac:c8:
         e0:b4:c0:78:c7:c1:9b:9c:8e:c3:9e:d2:9a:3f:06:a2:c1:14:
         70:6d:10:56:50:95:60:24:a4:4d:7f:e1:ff:e4:be:4e:d5:fa:
         3d:36:b6:d3:7c:fe:ae:94:ac:7a:8e:6a:28:51:f2:3d:e1:1b:
         e2:27:0b:bb:6f:5f:29:01:9e:88:69:8f:1e:17:0f:07:76:19:
         59:6f:25:9e:51:9f:91:2f:7d:a4:5b:e7:c0:fb:6d:58:65:bc:
         63:60:7b:c9:95:8a:e3:cb:32:18:fd:87:c5:c1:01:41:fb:77:
         ac:10:b2:0d:89:06:fd:90:66:30:4a:f3:ac:d5:10:0e:8a:48:
         2a:4f:89:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB
QUREODNCMzIwHhcNMjUxMDIyMjAzNjA3WhcNMjUxMDI5MjAzNjA3WjAYMRYwFAYD
VQQDEw02OGY5NDAzOC1mYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1h7ccOrzx0VkEHy0yUOd/G470avlm5+3HzZGeg7e3VGtADKlZlCdzaqdHDmj
SCeJgbMM/vM57SvSKxdvppgxjvSlD3/YVXVg6wvcMhfHbynIp89F9U+bvj6tf9sg
iRN6khdK1eWfJjNVJd50rTGMK0Sib5voOWa+vZUfH2o96xl9kBm5XV9VhbrAMzUG
12r/1kYdxsmgG+g9mFAT7i8exL8cP0YrFaE7ZO+bzcfu5uDIuR1RbnvNijXhLXVV
Yw6wzXO8LfANG3CMKfjcK4HUXz/QW54lKXb7TjBczM36iA4Yuu5EwZYsBuE2jD92
cj7LT0oPxbFzj7/G1AXuQScheQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdryvA4
snFmNR5e5k8RhhHCO0JiMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB
MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr
MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA998reuW/AZKnntcn8YGcXzLL7SyAloLGpIsMRrG84WD3arM4mr6Iu
lkAxcm+fcD9yPMg22kcrXW94LKu/68t9hRv6uYecIhGBYlzMYjH5TJAMRoqpG1NF
68ZJTjqMQYoJM/JxQfgorqOWqMjEXWi/BxHvnKA8d0roJDZarMjgtMB4x8GbnI7D
ntKaPwaiwRRwbRBWUJVgJKRNf+H/5L5O1fo9NrbTfP6ulKx6jmooUfI94RviJwu7
b18pAZ6IaY8eFw8HdhlZbyWeUZ+RL32kW+fA+21YZbxjYHvJlYrjyzIY/YfFwQFB
+3esELINiQb9kGYwSvOs1RAOikgqT4lt
-----END CERTIFICATE-----
Generated at Thu Oct 23 19:07:45 2025 by rpki-client