Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File:                     ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier:          0JmgqPy8tPygv3eaEkGT2acsMIsOTT/9cTQVUxmc/O0=
Subject key identifier:   D6:54:C0:87:75:8D:EB:AC:91:0E:41:94:84:60:5D:CB:1C:58:C4:AF
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number:          CA
Signing time:             Sun 19 Oct 2025 08:56:16 +0000
Manifest this update:     Sun 19 Oct 2025 08:56:16 +0000
Manifest next update:     Sun 26 Oct 2025 08:56:16 +0000
Files and hashes:         1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: Wgc6scVz+7NyjSSXnFwqUi/bwk5wufJhtU+AMaU9nfc=)
                          2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: cqlcdGiLqE3aY+b7c71D9qJhiS/wi/pJbFxJk9OTyQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Oct 19 08:56:16 2025 GMT
            Not After : Oct 26 08:56:16 2025 GMT
        Subject: CN=68f4a7b0-d09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:26:b0:98:dd:de:94:0b:87:68:5f:29:cd:
                    38:6e:a9:e4:4e:a0:57:a6:c9:59:19:e0:ee:99:92:
                    b4:ec:a1:aa:da:3d:33:03:a3:f4:45:f4:28:14:39:
                    31:a8:a9:29:45:77:35:76:47:2f:f8:a8:90:b8:3c:
                    18:e7:ec:4f:bf:9f:b9:2e:4e:2a:69:12:90:19:80:
                    19:cd:a7:df:60:b2:75:69:90:93:30:2a:62:d1:85:
                    41:c9:ed:08:08:9a:86:8f:08:09:c6:59:22:9a:53:
                    69:a1:51:5a:4b:e5:e6:e4:e3:37:0b:47:35:61:61:
                    df:e4:0f:ac:52:c3:4b:74:0b:bb:c8:a9:7c:a1:b8:
                    2e:78:f0:c0:3b:44:eb:b4:d3:ba:5f:0c:83:73:1c:
                    02:64:49:90:35:58:db:dd:ba:45:02:25:77:db:a0:
                    58:92:d9:98:f0:70:18:df:aa:5c:9f:83:e4:6d:8a:
                    86:50:36:00:0a:ec:35:90:87:3a:d9:7f:79:18:b9:
                    73:a4:ba:66:43:74:5e:d7:a1:a7:d8:3c:df:ea:09:
                    d1:2e:a0:e4:2c:60:db:35:c4:ac:5f:b8:bd:33:4f:
                    63:12:1b:27:63:e2:37:11:06:40:8c:57:4f:cc:ec:
                    a8:16:5a:e8:25:1d:f6:59:ca:13:e1:15:55:ef:2c:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:54:C0:87:75:8D:EB:AC:91:0E:41:94:84:60:5D:CB:1C:58:C4:AF
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:a3:89:4c:70:56:8b:f7:2d:72:d0:f9:85:22:e2:cb:20:
         cd:00:4e:6b:a7:86:07:fd:0f:ce:5a:e9:e4:bd:ab:e0:94:26:
         96:f4:1a:fa:43:27:e4:11:33:e7:d7:32:42:59:25:e5:19:77:
         27:d0:18:88:f3:f6:b2:03:8c:b8:b0:e9:33:8b:fb:7d:a4:e9:
         59:85:e2:95:ee:e6:59:d4:9f:8f:e0:8f:e7:bb:c7:5b:ef:59:
         94:e1:90:8f:0b:b7:34:5e:a7:c7:c4:aa:91:f3:5e:42:2d:cb:
         fa:f1:06:39:e5:99:09:00:38:3e:37:32:28:9b:08:bc:b8:bd:
         18:f5:a9:88:19:52:b6:50:74:53:e3:00:8f:f3:e8:46:62:6d:
         f4:75:16:5f:70:32:eb:73:af:a1:00:c9:8c:1c:12:f3:90:88:
         f4:a1:41:c5:4a:55:d4:d0:bf:7e:fb:53:86:45:27:44:a8:a9:
         17:1c:ab:5c:c1:4e:45:c7:e8:65:cb:48:05:20:b0:f8:12:f6:
         63:29:17:b6:96:02:91:c9:08:d9:d7:bc:b5:8f:bb:d2:2c:e2:
         dc:71:7c:e2:cf:c4:df:ed:f6:90:80:63:3c:d5:ac:5a:f3:09:
         0d:44:83:f8:32:fa:ee:fa:d5:46:a8:0f:bc:51:8b:41:18:f5:
         38:14:62:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I3MzYxMTAvBgNVBAUTKDMwQkUxRUI5RDNBQzQ5RDBBRkVFMTM1M0MzRjlEMTE2
N0EwMDdCMTcwHhcNMjUxMDE5MDg1NjE2WhcNMjUxMDI2MDg1NjE2WjAYMRYwFAYD
VQQDEw02OGY0YTdiMC1kMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPAmsJjd3pQLh2hfKc04bqnkTqBXpslZGeDumZK07KGq2j0zA6P0RfQoFDkx
qKkpRXc1dkcv+KiQuDwY5+xPv5+5Lk4qaRKQGYAZzaffYLJ1aZCTMCpi0YVBye0I
CJqGjwgJxlkimlNpoVFaS+Xm5OM3C0c1YWHf5A+sUsNLdAu7yKl8obguePDAO0Tr
tNO6XwyDcxwCZEmQNVjb3bpFAiV326BYktmY8HAY36pcn4PkbYqGUDYACuw1kIc6
2X95GLlzpLpmQ3Re16Gn2Dzf6gnRLqDkLGDbNcSsX7i9M09jEhsnY+I3EQZAjFdP
zOyoFlroJR32WcoT4RVV7yyLkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZUwId1
jeuskQ5BlIRgXcscWMSvMB8GA1UdIwQYMBaAFDC+HrnTrEnQr+4TU8P50RZ6AHsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjczNi9GMTMzRUYwQzg0
MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1NkQ3Y3aE5Ud19uUkZub0Fl
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1Nk
Q3Y3aE5Ud19uUkZub0FleGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAs+6OJTHBWi/ctctD5hSLiyyDNAE5rp4YH/Q/OWunkvavglCaW9Br6
QyfkETPn1zJCWSXlGXcn0BiI8/ayA4y4sOkzi/t9pOlZheKV7uZZ1J+P4I/nu8db
71mU4ZCPC7c0XqfHxKqR815CLcv68QY55ZkJADg+NzIomwi8uL0Y9amIGVK2UHRT
4wCP8+hGYm30dRZfcDLrc6+hAMmMHBLzkIj0oUHFSlXU0L9++1OGRSdEqKkXHKtc
wU5Fx+hly0gFILD4EvZjKRe2lgKRyQjZ17y1j7vSLOLccXziz8Tf7faQgGM81axa
8wkNRIP4Mvru+tVGqA+8UYtBGPU4FGL1
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:15 2025 by rpki-client