Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
File:                     aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json)
Hash identifier:          02vSz4oL2k6yfCl1285WjfPgQgOy0OLjvewExjer8bc=
Subject key identifier:   3C:91:A1:BB:BB:8A:B3:4D:85:59:0E:E4:F9:71:A3:A6:56:05:65:37
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       34CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
Manifest number:          34C5
Signing time:             Mon 06 Oct 2025 15:11:52 +0000
Manifest this update:     Mon 06 Oct 2025 15:11:51 +0000
Manifest next update:     Mon 13 Oct 2025 15:11:51 +0000
Files and hashes:         1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: J61IUsmXDYeu+Ci4IwcTcQoetrVpuNYcPWwvEQV+y58=)
                          2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Oct 2025 15:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13517 (0x34cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
        Validity
            Not Before: Oct  6 15:11:51 2025 GMT
            Not After : Oct 13 15:11:51 2025 GMT
        Subject: CN=68e3dc37-ad54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:ab:da:d8:77:21:46:3a:15:ac:73:b3:c6:
                    44:2f:a9:7b:7c:15:4e:66:d2:ac:cc:60:4c:ac:8c:
                    77:b9:01:75:27:0f:d9:9a:bb:70:98:d2:04:2a:d2:
                    11:77:cb:0f:c4:c8:92:37:d4:65:78:cb:78:dc:8c:
                    33:32:f4:cc:63:5c:ef:fc:29:3c:83:9b:d7:46:03:
                    6d:15:1e:40:0c:6c:7c:1c:5f:08:16:3a:b1:58:0e:
                    f8:64:0c:99:6c:28:bb:5e:23:35:45:13:9e:8f:d9:
                    72:91:c1:92:92:3f:82:2a:fe:b9:6e:96:5e:64:95:
                    c0:4c:a5:09:5a:c3:b1:f2:43:8e:21:98:70:cf:01:
                    80:60:33:47:d2:6a:7c:85:72:51:36:53:47:84:a8:
                    9e:e2:8f:55:0c:2e:79:89:d6:24:4f:19:26:6a:cc:
                    31:bd:4a:c3:0f:da:db:8a:fe:0b:55:d7:bf:5e:f7:
                    fc:40:e7:b9:d0:7d:d3:79:3a:61:5e:d8:35:3b:83:
                    4d:7f:31:9a:e7:94:67:c0:6b:10:0d:9c:2f:49:3e:
                    b8:d0:f5:45:37:92:39:54:d4:f3:8b:b5:9e:04:93:
                    d6:2f:f6:35:3b:a8:55:36:12:1e:bb:4e:60:bd:71:
                    06:4f:d6:19:77:53:68:5e:d0:24:22:65:d2:cd:6b:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:91:A1:BB:BB:8A:B3:4D:85:59:0E:E4:F9:71:A3:A6:56:05:65:37
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:5f:d8:fd:ce:0b:dd:69:2d:14:d8:2b:18:8a:ca:ac:a0:
         62:e3:b4:a6:1f:14:89:f1:6f:4c:69:59:e1:fb:32:b5:11:00:
         96:db:7f:05:6b:be:b1:07:7f:f5:b6:58:a4:bc:40:9a:fd:7c:
         bb:3e:10:8b:94:3c:95:a7:72:c1:2a:21:01:ae:00:70:76:fa:
         34:e6:ae:2d:2e:95:f0:ca:ec:ec:77:0f:e4:c9:8b:be:05:59:
         8d:9d:3d:6b:5d:6b:3b:7d:d3:57:70:44:24:1a:24:b6:bf:9e:
         84:ee:99:a2:f4:8f:83:d5:6a:95:ba:dc:cb:00:a1:78:2e:1d:
         87:31:96:ce:04:92:0f:54:fb:87:42:23:b9:39:1e:72:d4:54:
         36:b3:b4:74:e4:3b:8b:58:8d:a2:4e:7f:7f:4e:79:94:de:72:
         6d:11:5d:7d:aa:5f:4f:4a:e3:e6:08:b3:72:fb:dc:d4:a9:1b:
         6b:31:31:4d:fe:b5:3c:c9:22:dd:00:f4:b8:e9:42:45:b1:0b:
         21:6b:b6:2b:32:00:f8:42:73:89:1f:ca:b1:1b:74:01:b9:e4:
         3d:fd:1b:d7:33:c4:a2:44:f3:89:2a:12:c5:8e:8c:b0:cf:fe:
         e7:94:4b:75:bc:61:d1:d6:32:54:8a:3a:4f:9d:ee:bd:69:f6:
         59:c7:b7:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2
OTlDMEMzNjYwHhcNMjUxMDA2MTUxMTUxWhcNMjUxMDEzMTUxMTUxWjAYMRYwFAYD
VQQDEw02OGUzZGMzNy1hZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk7ur2th3IUY6Faxzs8ZEL6l7fBVOZtKszGBMrIx3uQF1Jw/ZmrtwmNIEKtIR
d8sPxMiSN9RleMt43IwzMvTMY1zv/Ck8g5vXRgNtFR5ADGx8HF8IFjqxWA74ZAyZ
bCi7XiM1RROej9lykcGSkj+CKv65bpZeZJXATKUJWsOx8kOOIZhwzwGAYDNH0mp8
hXJRNlNHhKie4o9VDC55idYkTxkmaswxvUrDD9rbiv4LVde/Xvf8QOe50H3TeTph
Xtg1O4NNfzGa55RnwGsQDZwvST640PVFN5I5VNTzi7WeBJPWL/Y1O6hVNhIeu05g
vXEGT9YZd1NoXtAkImXSzWtOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyRobu7
irNNhVkO5Plxo6ZWBWU3MB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE
QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL
aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuh1/Y/c4L3WktFNgrGIrKrKBi47SmHxSJ8W9MaVnh+zK1EQCW238F
a76xB3/1tlikvECa/Xy7PhCLlDyVp3LBKiEBrgBwdvo05q4tLpXwyuzsdw/kyYu+
BVmNnT1rXWs7fdNXcEQkGiS2v56E7pmi9I+D1WqVutzLAKF4Lh2HMZbOBJIPVPuH
QiO5OR5y1FQ2s7R05DuLWI2iTn9/TnmU3nJtEV19ql9PSuPmCLNy+9zUqRtrMTFN
/rU8ySLdAPS46UJFsQsha7YrMgD4QnOJH8qxG3QBueQ9/RvXM8SiRPOJKhLFjoyw
z/7nlEt1vGHR1jJUijpPne69afZZx7fK
-----END CERTIFICATE-----
Generated at Tue Oct 7 22:40:36 2025 by rpki-client