Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File:                     qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier:          iegg+r1uerBhBvhZsRF7Alzk4J7/hLnweEz3EeG8GWY=
Subject key identifier:   1C:EB:7D:0F:4E:C7:FA:B6:A4:49:C2:76:BB:8F:10:74:DD:3B:C3:4C
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number:          93
Signing time:             Mon 03 Nov 2025 06:30:36 +0000
Manifest this update:     Mon 03 Nov 2025 06:30:36 +0000
Manifest next update:     Mon 10 Nov 2025 06:30:36 +0000
Files and hashes:         1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: d1m7oZlJU0WEm3OI/miFB1Vdy23IikN8EzLU62preIw=)
                          2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: K71+YfyZb/sq1ejJDvO1hCnjvjzaiRU1ev/4lLqwtW0=)
                          3: 1BE631B0668C11F092BB0479C4F9AE02.roa (hash: 889zGZBsMfgV1bTIc5AsOgt3rk6bmVAUBCLPcamrp9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
                          rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
        Validity
            Not Before: Nov  3 06:30:36 2025 GMT
            Not After : Nov 10 06:30:36 2025 GMT
        Subject: CN=69084c0c-76c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:04:ab:b0:5d:63:af:a2:85:d9:ba:d9:b4:
                    df:c4:13:fe:46:27:9e:b9:fc:e7:b5:b8:3f:6f:ce:
                    c6:24:01:ce:b4:fe:30:2d:56:6b:37:97:30:04:52:
                    ff:8c:35:68:22:37:ea:bc:39:3a:5c:f9:5b:55:34:
                    85:46:77:4c:2b:b5:1d:4a:ec:3f:74:64:57:60:7a:
                    cd:9d:ca:44:a8:cf:cc:a6:c8:55:64:74:67:60:4f:
                    b1:c0:40:f1:dc:c5:36:13:12:0c:4c:5a:09:01:7d:
                    0d:81:57:6d:3c:85:ea:af:28:c1:d0:22:95:e3:24:
                    8d:c2:05:05:b9:03:4d:09:9a:2d:bf:49:9e:dc:92:
                    c9:50:14:d8:52:d7:3d:f3:bb:cc:24:aa:95:a3:6b:
                    3a:8b:60:24:68:60:c6:13:32:29:c4:0f:2f:7a:24:
                    71:e5:6c:59:ea:86:d4:01:47:a1:2b:97:4f:de:98:
                    83:90:c9:99:5f:33:e7:8b:6d:42:36:d5:5b:bd:fa:
                    ee:7d:77:ae:fe:b2:e7:b5:75:ec:a0:2d:3d:f9:e9:
                    dd:cc:04:a9:73:6a:a7:3a:47:d0:7c:f1:13:19:3c:
                    2e:c9:52:95:28:c6:ce:a7:2b:dd:ca:95:11:84:30:
                    8d:42:e8:85:b5:c2:9b:83:77:03:aa:ea:a4:b9:eb:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:7D:0F:4E:C7:FA:B6:A4:49:C2:76:BB:8F:10:74:DD:3B:C3:4C
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:84:07:1c:9b:f2:fb:62:df:f4:fd:3c:41:1d:1c:ec:59:36:
         7d:b2:e3:f8:9c:3a:39:23:f9:60:e8:0b:fd:0d:89:78:93:64:
         b8:60:b9:ef:4d:39:66:50:3b:6d:31:bd:b6:9d:33:0d:66:23:
         6c:e5:14:a9:4a:c2:6d:65:fd:2f:93:66:89:30:08:2e:f7:70:
         d6:78:3d:20:d0:e5:89:79:0c:a9:d4:af:7b:72:39:61:04:73:
         a9:f1:cf:58:e6:66:0c:ac:2d:47:03:8a:c4:ac:0e:5d:61:44:
         d5:e6:88:7c:f6:9c:a9:f9:f5:3f:4f:a1:f1:90:8d:c2:64:f0:
         cb:f5:c5:64:b0:af:2c:46:fc:16:ba:03:71:93:9a:f3:3a:d0:
         2a:78:a4:27:5e:21:87:9e:d1:f1:9c:cc:49:cf:93:fc:25:5d:
         85:ee:c8:2e:1e:24:0e:ec:94:3f:f2:8f:db:5d:47:53:c3:1f:
         63:43:4e:cb:e3:5a:46:8d:83:e7:a9:17:a4:87:09:35:6c:f4:
         f2:d9:97:62:f5:fb:c1:25:c1:3c:c7:db:fc:57:2c:96:36:60:
         88:43:70:d4:ef:2b:d7:39:72:85:3b:85:3e:61:da:2e:45:ef:
         d0:d8:cf:28:d1:64:0b:d6:46:f8:12:d4:ff:69:c6:a5:17:7a:
         01:42:be:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBNDYxMTAvBgNVBAUTKEE4OEVFMjNGRjhENzA4MjhDRURCQzcwMUU3OEM4MDc0
N0ZGQzExQ0EwHhcNMjUxMTAzMDYzMDM2WhcNMjUxMTEwMDYzMDM2WjAYMRYwFAYD
VQQDEw02OTA4NGMwYy03NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyhgEq7BdY6+ihdm62bTfxBP+Rieeufzntbg/b87GJAHOtP4wLVZrN5cwBFL/
jDVoIjfqvDk6XPlbVTSFRndMK7UdSuw/dGRXYHrNncpEqM/MpshVZHRnYE+xwEDx
3MU2ExIMTFoJAX0NgVdtPIXqryjB0CKV4ySNwgUFuQNNCZotv0me3JLJUBTYUtc9
87vMJKqVo2s6i2AkaGDGEzIpxA8veiRx5WxZ6obUAUehK5dP3piDkMmZXzPni21C
NtVbvfrufXeu/rLntXXsoC09+endzASpc2qnOkfQfPETGTwuyVKVKMbOpyvdypUR
hDCNQuiFtcKbg3cDquqkuetNlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzrfQ9O
x/q2pEnCdruPEHTdO8NMMB8GA1UdIwQYMBaAFKiO4j/41wgoztvHAeeMgHR//BHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEE0Ni9ENjRFNUE3RURD
ODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWENDak8yOGNCNTR5QWRIXzhF
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEE0Ni9ENjRFNUE3RURDODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWEND
ak8yOGNCNTR5QWRIXzhFY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAShAccm/L7Yt/0/TxBHRzsWTZ9suP4nDo5I/lg6Av9DYl4k2S4YLnv
TTlmUDttMb22nTMNZiNs5RSpSsJtZf0vk2aJMAgu93DWeD0g0OWJeQyp1K97cjlh
BHOp8c9Y5mYMrC1HA4rErA5dYUTV5oh89pyp+fU/T6HxkI3CZPDL9cVksK8sRvwW
ugNxk5rzOtAqeKQnXiGHntHxnMxJz5P8JV2F7sguHiQO7JQ/8o/bXUdTwx9jQ07L
41pGjYPnqRekhwk1bPTy2Zdi9fvBJcE8x9v8VyyWNmCIQ3DU7yvXOXKFO4U+Ydou
Re/Q2M8o0WQL1kb4EtT/acalF3oBQr4k
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:09 2025 by rpki-client