Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          uJdZ8QjL7g7HwScellJ/HGtuEtLM/tsQkdPXNmpfacI=
Subject key identifier:   2C:D5:ED:6A:38:4F:BF:DE:68:56:C8:78:90:F7:94:41:93:09:0F:BE
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       341A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          340C
Signing time:             Fri 24 Oct 2025 15:32:35 +0000
Manifest this update:     Fri 24 Oct 2025 15:32:35 +0000
Manifest next update:     Fri 31 Oct 2025 15:32:35 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 7wV1CCiZUFNV21D32O3KRU4Ka5sNFJqMjGXqSF+pbYw=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Oct 2025 15:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13338 (0x341a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Oct 24 15:32:35 2025 GMT
            Not After : Oct 31 15:32:35 2025 GMT
        Subject: CN=68fb9c13-b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:97:7f:a4:7e:47:a3:7d:85:21:1d:a2:5c:
                    a2:ad:e8:c6:76:60:ed:cc:8f:04:4c:36:b0:6e:84:
                    23:3f:1d:10:0c:52:cd:ab:e8:37:4f:cc:a7:28:0c:
                    7d:c8:8a:28:d0:09:58:f6:13:9f:fc:a9:4c:63:b0:
                    e0:b3:69:a7:ac:27:0e:a1:66:eb:3a:66:84:09:79:
                    a0:95:90:1d:20:1b:a6:ac:41:8d:e6:a5:94:80:9c:
                    d6:b2:16:9d:ae:49:7c:35:9f:db:18:c3:c4:18:dc:
                    26:ca:a8:f2:d5:37:13:89:59:bb:80:da:76:1e:58:
                    dc:ba:a8:7c:96:96:2a:f2:3f:f6:6f:c6:e8:ac:06:
                    c5:4f:32:04:ed:3c:24:b5:19:d0:af:4f:76:7d:9b:
                    7d:43:f0:81:47:ca:c1:9d:85:bf:b3:4c:88:48:64:
                    64:2e:d5:89:0f:19:e3:fa:7d:2e:9b:41:99:71:54:
                    6b:da:07:ca:5c:37:d4:15:0c:c5:fd:8d:6f:74:9b:
                    21:b4:72:b0:6c:87:24:9a:9a:e6:05:cd:61:39:e2:
                    50:5f:2e:0f:c7:c1:db:1b:bd:23:70:86:4c:79:f0:
                    ab:e6:23:6c:53:42:cc:11:ec:60:07:f6:7b:3f:dc:
                    46:de:0d:8f:10:12:b9:a2:87:0d:37:e7:cf:71:24:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D5:ED:6A:38:4F:BF:DE:68:56:C8:78:90:F7:94:41:93:09:0F:BE
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d1:40:0f:f4:19:8c:c7:f0:11:89:de:54:0b:5a:fd:b4:42:
         ea:7a:e7:59:7c:c3:d5:ae:b8:3b:39:2f:33:ef:10:b1:99:47:
         33:78:ad:86:73:f7:dd:f3:a5:d3:5c:47:92:10:40:b1:1e:f6:
         b8:1f:ec:a0:69:78:c1:ce:7b:32:0b:89:42:91:85:d7:e3:64:
         05:09:64:cb:bf:20:34:4f:72:96:d9:4f:68:2e:df:6a:c5:af:
         c9:85:88:2c:b9:9d:93:2a:6b:cf:58:04:0c:48:08:0d:b4:0f:
         57:9c:51:65:a7:e6:a4:0f:bd:a5:73:a1:7a:4f:96:45:c0:ac:
         28:f6:10:70:3e:68:6b:98:76:b8:5e:7c:58:30:89:fa:e6:a0:
         94:2d:ba:19:9f:2b:d8:e9:59:e1:96:2b:ff:66:e1:62:87:4b:
         e6:45:cc:27:fb:ca:72:e2:61:98:fe:88:c9:63:61:f7:75:a3:
         57:84:4d:13:2c:78:d6:25:0f:36:78:ba:36:ac:0c:30:1c:a4:
         ba:6e:e5:d5:d2:78:26:e5:be:2e:1f:6f:be:67:a2:64:e1:6d:
         03:cd:e0:bd:1c:9d:7d:a5:2e:9b:87:2d:8d:be:47:67:34:06:
         b9:15:e5:d1:72:49:25:3a:ee:cf:31:28:fe:40:1c:d9:69:6e:
         1d:a4:46:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3
QTkwOUMzRjYwHhcNMjUxMDI0MTUzMjM1WhcNMjUxMDMxMTUzMjM1WjAYMRYwFAYD
VQQDEw02OGZiOWMxMy1iNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFSXf6R+R6N9hSEdolyirejGdmDtzI8ETDawboQjPx0QDFLNq+g3T8ynKAx9
yIoo0AlY9hOf/KlMY7Dgs2mnrCcOoWbrOmaECXmglZAdIBumrEGN5qWUgJzWshad
rkl8NZ/bGMPEGNwmyqjy1TcTiVm7gNp2Hljcuqh8lpYq8j/2b8borAbFTzIE7Twk
tRnQr092fZt9Q/CBR8rBnYW/s0yISGRkLtWJDxnj+n0um0GZcVRr2gfKXDfUFQzF
/Y1vdJshtHKwbIckmprmBc1hOeJQXy4Px8HbG70jcIZMefCr5iNsU0LMEexgB/Z7
P9xG3g2PEBK5oocNN+fPcSRMIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzV7Wo4
T7/eaFbIeJD3lEGTCQ++MB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0
QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp
NXIwOGdzXzZtRTU2a0p3X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDB0UAP9BmMx/ARid5UC1r9tELqeudZfMPVrrg7OS8z7xCxmUczeK2G
c/fd86XTXEeSEECxHva4H+ygaXjBznsyC4lCkYXX42QFCWTLvyA0T3KW2U9oLt9q
xa/JhYgsuZ2TKmvPWAQMSAgNtA9XnFFlp+akD72lc6F6T5ZFwKwo9hBwPmhrmHa4
XnxYMIn65qCULboZnyvY6Vnhliv/ZuFih0vmRcwn+8py4mGY/ojJY2H3daNXhE0T
LHjWJQ82eLo2rAwwHKS6buXV0ngm5b4uH2++Z6Jk4W0DzeC9HJ19pS6bhy2Nvkdn
NAa5FeXRckklOu7PMSj+QBzZaW4dpEYL
-----END CERTIFICATE-----
Generated at Sat Oct 25 08:43:46 2025 by rpki-client