Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          ZoCLdTBGVaexc6oThMamXd4RNy1NU5A3Ln1y7mIEs28=
Subject key identifier:   FD:47:B3:1D:6D:DA:CF:96:30:1B:2B:22:72:91:C7:CD:BF:6E:6F:7A
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          01BB
Signing time:             Fri 19 Sep 2025 03:39:29 +0000
Manifest this update:     Fri 19 Sep 2025 03:39:28 +0000
Manifest next update:     Fri 26 Sep 2025 03:39:28 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: dk3pUHb8XcaxgkndqnyEflKSU+F/dPD7o0EF5zERhP0=)
                          2: 9F79846406E911EE88450147C4F9AE02.roa (hash: LvbEefo/jIzRbw1qkY9iXb8amhsCn8ZD4oSsz6Ev0wA=)
                          3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: R6zicuGc5j5WIEznRKzKMEUHTEcekYg+eZaMy/xb74A=)
                          4: E5925096093911EEABCFA170C4F9AE02.roa (hash: COVvPwRRBQaYkijAL/8dGT7ATCUM7/oNgeAZamGV0AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 03:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep 19 03:39:28 2025 GMT
            Not After : Sep 26 03:39:28 2025 GMT
        Subject: CN=68ccd071-3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:ae:93:8a:f9:d8:06:54:e5:38:9e:44:06:
                    de:b3:57:5e:7f:45:ba:88:fc:14:6e:b8:6a:75:b7:
                    5c:06:48:28:1f:b0:43:3e:5f:dc:3d:66:f1:5f:f4:
                    5d:d5:61:23:68:47:f4:e7:8c:e0:78:fd:6b:47:e6:
                    d7:57:87:26:03:9a:d7:13:3f:eb:ef:30:9d:29:19:
                    76:64:9a:ab:f1:ce:bf:63:85:43:e0:b3:9f:dc:ae:
                    28:c8:c5:29:b2:12:75:03:50:0c:90:9c:a4:41:09:
                    cc:48:aa:2c:86:da:6c:ba:6d:32:ed:07:2f:1f:8a:
                    27:a3:47:d1:25:aa:21:4c:18:de:20:6e:76:f4:f1:
                    b9:a6:65:d2:83:16:bd:ac:ec:8a:50:8b:20:d0:9d:
                    63:08:f5:02:f2:fe:d0:5a:50:a6:45:ee:ae:fa:dd:
                    88:a9:6f:0a:b7:a2:64:a4:90:8a:23:0e:cd:18:6d:
                    a0:af:b6:d2:55:bc:80:12:64:3a:6b:8f:51:d3:10:
                    6f:73:2d:45:c9:49:39:51:f6:4e:cb:61:48:fd:7f:
                    b0:72:03:33:da:0a:02:7c:7d:41:26:52:f0:c8:2d:
                    59:65:14:59:af:08:78:69:8f:7d:ce:0e:00:a5:c4:
                    7b:76:a6:8c:70:d2:2f:88:52:b5:a8:2d:4b:d1:76:
                    da:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:47:B3:1D:6D:DA:CF:96:30:1B:2B:22:72:91:C7:CD:BF:6E:6F:7A
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:7d:d8:9a:cd:2e:28:78:b9:6c:92:7b:12:50:7f:43:5b:
         60:24:55:12:4c:9b:fa:3d:11:08:10:bc:64:38:fe:42:63:2b:
         1b:b2:27:dc:aa:ac:13:c0:cf:ac:e6:56:4b:34:8a:89:15:27:
         83:d6:7a:3a:16:b4:25:da:02:db:02:70:61:1a:af:7b:82:21:
         89:5c:88:5f:c6:a2:4f:79:55:f9:38:af:f1:29:8a:3e:ea:e3:
         01:43:51:b6:06:d6:2f:63:f2:35:a4:70:68:8a:12:d3:db:f2:
         bd:21:6b:df:7d:02:6a:8a:ac:9a:cd:42:e7:ae:2e:6e:66:7b:
         80:c9:5b:ed:8c:82:61:1c:34:46:78:13:eb:4b:b2:33:73:e6:
         8c:0a:df:98:1e:29:bd:5f:6e:21:41:03:83:34:2f:15:ad:c9:
         20:ad:a1:8b:3f:92:8e:d9:ac:88:33:53:45:97:83:2c:cf:92:
         44:90:ef:23:42:42:cb:a4:84:e0:60:94:41:00:92:bb:af:6b:
         97:d4:0f:98:02:c4:ed:4c:af:7b:4a:db:9e:36:5e:e6:d8:d7:
         f6:6f:90:15:0d:3e:aa:90:c0:5f:26:08:8a:fb:f5:ef:c5:0a:
         aa:a8:a3:c4:86:b2:c3:2b:8c:56:75:01:6e:f6:f0:e2:c3:20:
         7a:94:08:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjUwOTE5MDMzOTI4WhcNMjUwOTI2MDMzOTI4WjAYMRYwFAYD
VQQDEw02OGNjZDA3MS0zMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWCuk4r52AZU5TieRAbes1def0W6iPwUbrhqdbdcBkgoH7BDPl/cPWbxX/Rd
1WEjaEf054zgeP1rR+bXV4cmA5rXEz/r7zCdKRl2ZJqr8c6/Y4VD4LOf3K4oyMUp
shJ1A1AMkJykQQnMSKoshtpsum0y7QcvH4ono0fRJaohTBjeIG529PG5pmXSgxa9
rOyKUIsg0J1jCPUC8v7QWlCmRe6u+t2IqW8Kt6JkpJCKIw7NGG2gr7bSVbyAEmQ6
a49R0xBvcy1FyUk5UfZOy2FI/X+wcgMz2goCfH1BJlLwyC1ZZRRZrwh4aY99zg4A
pcR7dqaMcNIviFK1qC1L0XbaFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1Hsx1t
2s+WMBsrInKRx82/bm96MB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP
MFVqSlBWbExiME1TY0tKTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbRX3Yms0uKHi5bJJ7ElB/Q1tgJFUSTJv6PREIELxkOP5CYysbsifc
qqwTwM+s5lZLNIqJFSeD1no6FrQl2gLbAnBhGq97giGJXIhfxqJPeVX5OK/xKYo+
6uMBQ1G2BtYvY/I1pHBoihLT2/K9IWvffQJqiqyazULnri5uZnuAyVvtjIJhHDRG
eBPrS7Izc+aMCt+YHim9X24hQQODNC8VrckgraGLP5KO2ayIM1NFl4Msz5JEkO8j
QkLLpITgYJRBAJK7r2uX1A+YAsTtTK97StueNl7m2Nf2b5AVDT6qkMBfJgiK+/Xv
xQqqqKPEhrLDK4xWdQFu9vDiwyB6lAjR
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:38:47 2025 by rpki-client