Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File:                     qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier:          NzPsAmuGfvBPiPqCiKIFRQl9HOKDBLw5cMH8Nk7Ru5Q=
Subject key identifier:   DD:36:7C:9B:EE:8E:D0:7A:BB:16:C1:81:56:4F:1C:B1:55:3B:BD:12
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer:       /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number:          052E
Signing time:             Mon 08 Sep 2025 23:36:12 +0000
Manifest this update:     Mon 08 Sep 2025 23:36:11 +0000
Manifest next update:     Mon 15 Sep 2025 23:36:11 +0000
Files and hashes:         1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: Inp20zpA0RB4zl3va/Lg0OfnjBe9NNCPF76CzMwJj10=)
                          2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk=)
                          3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: iYMv0Y2btiNQDsASykiNYZLlnHo5rRZ4eb3rA88k1B0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 23:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Validity
            Not Before: Sep  8 23:36:11 2025 GMT
            Not After : Sep 15 23:36:11 2025 GMT
        Subject: CN=68bf686c-94f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:5e:ba:63:90:c8:78:0f:4e:6a:4d:3c:93:
                    62:bf:7a:09:3e:65:03:a8:f0:1c:fa:03:7f:eb:76:
                    88:4a:6f:c8:96:b2:bc:50:b7:3b:73:8e:76:d1:87:
                    0e:a8:4c:97:38:4b:cf:88:2b:14:ca:05:9d:cb:52:
                    7e:d6:cc:4a:01:26:4f:fe:5a:27:b3:3b:1b:ea:19:
                    d4:c0:1d:40:f5:08:ae:c0:c4:9c:c5:3d:75:3b:78:
                    c8:04:24:49:d4:3c:24:b7:47:2f:9f:93:9b:f9:2f:
                    8e:20:9a:e5:82:68:fa:4c:a9:47:d3:66:63:f8:b6:
                    bf:52:ee:b6:e8:da:ae:65:55:eb:81:3b:e6:93:24:
                    32:11:81:2c:fe:5e:59:ce:25:44:12:bc:0c:e5:6e:
                    6e:15:69:d8:ec:08:35:0e:fb:20:9c:21:0a:79:be:
                    92:e8:ae:09:4c:1e:f3:fc:96:03:cd:cc:6c:9f:49:
                    85:66:5b:fa:47:32:02:b6:be:73:c6:91:be:b3:dc:
                    08:7c:32:c0:37:28:10:1b:01:3f:0a:ff:be:ec:84:
                    c6:8d:1b:24:e8:d3:95:12:30:e5:d9:21:55:a1:b2:
                    6f:5a:11:4d:b3:46:e5:29:ed:62:ac:9a:d5:1f:b4:
                    e2:0a:16:2a:cd:c3:8e:05:3a:0d:10:94:0e:4d:ad:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:36:7C:9B:EE:8E:D0:7A:BB:16:C1:81:56:4F:1C:B1:55:3B:BD:12
            X509v3 Authority Key Identifier:
                keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:ef:73:73:9a:8f:22:74:8f:af:75:e1:e1:3c:a1:93:ee:
         2b:36:5c:ab:26:13:ab:9d:f9:e5:16:8c:21:b9:5b:ca:b9:ea:
         29:56:a6:7b:0b:51:1c:3c:db:5d:2d:d0:7e:6d:33:64:d2:8a:
         68:2e:eb:3a:4c:6f:f5:5a:eb:1a:ba:8a:0c:a1:8c:d5:e4:ae:
         e2:fa:38:5c:c9:a1:a9:27:63:c7:d2:6f:bd:9b:88:64:ac:46:
         8a:62:2b:ed:7a:9a:f3:04:55:5e:19:26:4b:07:49:69:b9:1a:
         d7:be:7e:ae:f9:09:1d:cb:55:a9:3e:34:d2:a7:41:76:1d:d7:
         cc:dd:fb:a7:73:9e:eb:9f:28:0f:02:d6:b9:76:dd:ec:9a:42:
         e6:23:92:4d:79:18:db:c1:1a:db:09:58:a5:d4:07:39:4f:65:
         ae:61:a2:aa:10:41:9a:1a:a5:c9:4f:57:70:84:f6:b9:68:cd:
         86:9c:82:63:c9:f8:ed:1f:e8:ec:1b:cc:0c:dc:d7:e2:39:d1:
         f0:fe:01:9a:13:12:39:76:02:66:1f:d1:90:e5:20:b1:42:0c:
         ca:6a:3a:2f:a1:74:0a:4c:a0:47:80:ee:4e:4e:28:77:ed:a1:
         b4:c3:f0:3b:f4:b1:25:81:32:32:98:69:c8:0e:23:14:60:d7:
         ad:d9:12:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD
REVDRkRBRjIwHhcNMjUwOTA4MjMzNjExWhcNMjUwOTE1MjMzNjExWjAYMRYwFAYD
VQQDEw02OGJmNjg2Yy05NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArT1eumOQyHgPTmpNPJNiv3oJPmUDqPAc+gN/63aISm/IlrK8ULc7c4520YcO
qEyXOEvPiCsUygWdy1J+1sxKASZP/lonszsb6hnUwB1A9QiuwMScxT11O3jIBCRJ
1Dwkt0cvn5Ob+S+OIJrlgmj6TKlH02Zj+La/Uu626NquZVXrgTvmkyQyEYEs/l5Z
ziVEErwM5W5uFWnY7Ag1DvsgnCEKeb6S6K4JTB7z/JYDzcxsn0mFZlv6RzICtr5z
xpG+s9wIfDLANygQGwE/Cv++7ITGjRsk6NOVEjDl2SFVobJvWhFNs0blKe1irJrV
H7TiChYqzcOOBToNEJQOTa2adwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN02fJvu
jtB6uxbBgVZPHLFVO70SMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy
M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0
SnU2TXZxS2d2YVhON1AydkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzTO9zc5qPInSPr3Xh4Tyhk+4rNlyrJhOrnfnlFowhuVvKueopVqZ7
C1EcPNtdLdB+bTNk0opoLus6TG/1WusauooMoYzV5K7i+jhcyaGpJ2PH0m+9m4hk
rEaKYivteprzBFVeGSZLB0lpuRrXvn6u+Qkdy1WpPjTSp0F2HdfM3func57rnygP
Ata5dt3smkLmI5JNeRjbwRrbCVil1Ac5T2WuYaKqEEGaGqXJT1dwhPa5aM2GnIJj
yfjtH+jsG8wM3NfiOdHw/gGaExI5dgJmH9GQ5SCxQgzKajovoXQKTKBHgO5OTih3
7aG0w/A79LElgTIymGnIDiMUYNet2RK3
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:26:23 2025 by rpki-client