Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
File:                     Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json)
Hash identifier:          U2HSMvePvXAetlpJZP5FWI9d4DrBDrBEYHt92BkgnUY=
Subject key identifier:   AE:D1:DB:58:A5:54:59:34:57:92:5D:1B:44:77:99:21:B1:20:AA:82
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
Manifest number:          0194
Signing time:             Fri 19 Sep 2025 03:54:14 +0000
Manifest this update:     Fri 19 Sep 2025 03:54:14 +0000
Manifest next update:     Fri 26 Sep 2025 03:54:14 +0000
Files and hashes:         1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: fW48c/muvJmnD3m1jifRbehSPwOedeqs2FusirUCuxo=)
                          2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: QlGjMXDN4esCEiynluo/msiy33cpphW/TtlNsWHyAK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 03:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Sep 19 03:54:14 2025 GMT
            Not After : Sep 26 03:54:14 2025 GMT
        Subject: CN=68ccd3e6-d9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:97:ab:75:8d:ba:ee:68:01:a0:b3:cd:65:
                    a5:73:80:42:70:50:4e:16:86:2e:e3:29:3b:6d:d9:
                    f6:1d:92:89:62:b5:b6:40:19:bc:1b:dc:3f:9c:75:
                    3f:a8:93:d1:08:cc:43:c3:f5:f4:8b:7e:67:a0:86:
                    0d:cc:1a:6d:aa:d5:d5:10:98:b8:3c:21:0f:83:f1:
                    85:2b:e2:e3:90:24:cb:7f:c1:ef:a5:54:09:b4:ed:
                    b2:84:b9:d0:2e:74:3b:a9:72:3f:32:54:d0:66:79:
                    10:d4:eb:27:04:00:5b:dd:49:c2:d7:8b:20:6f:9b:
                    ff:0b:45:12:a5:e1:70:32:16:81:47:f0:42:fc:02:
                    15:dd:de:2e:f1:11:77:77:c7:3e:65:56:3f:ae:52:
                    98:4d:7c:c1:c4:38:f6:c9:a1:b8:e1:b9:51:ab:ae:
                    91:19:1b:e3:35:78:00:d1:c8:bd:52:0b:88:90:b6:
                    8d:fe:59:c3:1f:1e:91:38:58:63:69:94:4d:84:1f:
                    37:87:4f:81:4f:88:a5:b7:82:5e:b8:b3:fa:ee:9a:
                    ae:e5:30:da:a1:76:fe:ce:99:5c:f5:7b:b6:8a:65:
                    a1:b9:c4:75:b7:3a:56:9b:b5:e4:70:fc:c9:b2:e6:
                    fe:90:87:b3:63:14:7a:c3:f9:e8:45:09:a9:a9:f5:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D1:DB:58:A5:54:59:34:57:92:5D:1B:44:77:99:21:B1:20:AA:82
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:6c:e4:c9:3f:e8:26:7e:b5:ea:1c:c5:19:a2:8f:a9:ef:
         0a:06:88:d5:8a:ad:df:27:bf:13:70:16:ba:65:7c:23:eb:28:
         df:6d:d9:d7:be:42:e9:c8:07:2f:21:fe:46:c4:33:bb:1d:56:
         cb:8e:ba:6a:a3:51:40:39:51:89:6c:e5:ad:53:86:6f:48:76:
         30:89:5e:0e:c2:60:72:58:72:c2:3d:3d:74:97:91:70:71:f4:
         e2:ed:9e:47:d6:81:26:da:c7:cf:90:ea:82:c8:ed:6e:1d:a7:
         bd:43:11:17:71:48:20:4a:df:7e:cc:41:05:87:a6:ae:d0:57:
         17:16:96:53:92:48:52:94:cf:10:df:28:af:e2:a5:54:6f:99:
         71:a4:81:d0:2c:bf:2c:00:52:a9:42:df:e8:d8:9f:0f:c7:c0:
         cf:4a:9c:50:12:d9:2b:e8:d9:db:d5:12:aa:b8:e4:3c:b4:51:
         b0:27:8b:3d:b7:71:63:b8:ec:be:89:eb:53:f1:9b:5a:2e:b3:
         98:2b:d4:29:45:cc:27:c0:99:01:39:93:de:7a:ad:4a:dc:98:
         e3:da:29:0c:46:3a:e2:6b:97:b7:12:99:c9:a0:99:17:8f:9e:
         04:c0:ed:5d:35:c7:4d:5a:d1:8f:3f:9f:c5:bf:4e:a1:48:f3:
         94:e4:63:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3OEExMTAvBgNVBAUTKDEyQUJCRTlENEU1OTk4NTg1OTgxMzQ5QTVGQTlCNzVG
REFCQzU4NzYwHhcNMjUwOTE5MDM1NDE0WhcNMjUwOTI2MDM1NDE0WjAYMRYwFAYD
VQQDEw02OGNjZDNlNi1kOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6GXq3WNuu5oAaCzzWWlc4BCcFBOFoYu4yk7bdn2HZKJYrW2QBm8G9w/nHU/
qJPRCMxDw/X0i35noIYNzBptqtXVEJi4PCEPg/GFK+LjkCTLf8HvpVQJtO2yhLnQ
LnQ7qXI/MlTQZnkQ1OsnBABb3UnC14sgb5v/C0USpeFwMhaBR/BC/AIV3d4u8RF3
d8c+ZVY/rlKYTXzBxDj2yaG44blRq66RGRvjNXgA0ci9UguIkLaN/lnDHx6ROFhj
aZRNhB83h0+BT4ilt4JeuLP67pqu5TDaoXb+zplc9Xu2imWhucR1tzpWm7XkcPzJ
sub+kIezYxR6w/noRQmpqfUiwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7R21il
VFk0V5JdG0R3mSGxIKqCMB8GA1UdIwQYMBaAFBKrvp1OWZhYWYE0ml+pt1/avFh2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc4QS85MDJBQUU5ODJC
NkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1GaFpnVFNhWDZtM1g5cThX
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VxdS1uVTVabUZoWmdUU2FYNm0zWDlxOFdIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc4QS85MDJBQUU5ODJCNkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1G
aFpnVFNhWDZtM1g5cThXSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABamzkyT/oJn616hzFGaKPqe8KBojViq3fJ78TcBa6ZXwj6yjfbdnX
vkLpyAcvIf5GxDO7HVbLjrpqo1FAOVGJbOWtU4ZvSHYwiV4OwmByWHLCPT10l5Fw
cfTi7Z5H1oEm2sfPkOqCyO1uHae9QxEXcUggSt9+zEEFh6au0FcXFpZTkkhSlM8Q
3yiv4qVUb5lxpIHQLL8sAFKpQt/o2J8Px8DPSpxQEtkr6Nnb1RKquOQ8tFGwJ4s9
t3FjuOy+ietT8ZtaLrOYK9QpRcwnwJkBOZPeeq1K3Jjj2ikMRjria5e3EpnJoJkX
j54EwO1dNcdNWtGPP5/Fv06hSPOU5GOf
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:52:22 2025 by rpki-client