Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File:                     MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier:          2FaZUvLM1sODEu7CBIQliIKttF6BWCeJqxdih7CoHOM=
Subject key identifier:   18:2A:6F:EF:E3:A3:03:D5:46:45:54:99:BB:9A:51:EB:98:08:B7:B6
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0C7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number:          0C6F
Signing time:             Sun 26 Oct 2025 18:57:29 +0000
Manifest this update:     Sun 26 Oct 2025 18:57:28 +0000
Manifest next update:     Sun 02 Nov 2025 18:57:28 +0000
Files and hashes:         1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: +xHGTdNsa9grUncDoEg3ROOw2Kr+0EuShtxAj9Yq8B8=)
                          2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=)
                          3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 18:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: Oct 26 18:57:28 2025 GMT
            Not After : Nov  2 18:57:28 2025 GMT
        Subject: CN=68fe6f18-029e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:91:7a:71:69:02:b9:26:c3:aa:53:f3:6d:
                    ec:12:b6:3a:b9:c1:ab:ec:47:e0:2d:b7:fb:a3:43:
                    d4:52:28:f4:74:9e:27:b3:2a:eb:60:6c:4b:9c:17:
                    d4:ac:1e:ee:11:60:e5:2d:40:36:04:f4:5d:ed:3b:
                    47:44:34:29:77:5f:36:5c:39:a8:64:99:0f:e0:fe:
                    c8:a6:9c:fa:fe:b8:3b:6e:ec:d2:fb:f5:3c:f7:b6:
                    88:28:ca:e8:5c:d5:b4:b0:30:ea:06:7a:43:29:c2:
                    2b:56:a9:6d:0e:8d:fb:94:d5:b6:c7:f3:0f:3e:ae:
                    bb:99:65:49:59:8f:9c:da:42:16:51:4a:d9:04:87:
                    1c:32:6b:00:9c:a7:3c:6e:a1:6d:db:20:6f:e0:15:
                    6e:16:d1:3e:5f:d7:2f:c2:53:25:7f:ae:19:d5:41:
                    38:c4:d3:1d:59:d1:81:c8:09:03:45:12:45:bd:65:
                    b5:b3:dc:1b:07:6c:06:c1:a2:a1:51:7e:4c:5d:a6:
                    6e:95:52:68:f7:4b:f0:7d:20:db:c4:b4:11:fe:2d:
                    93:2a:24:e1:02:ec:8c:d1:6c:01:e2:14:6a:b4:54:
                    e7:e5:88:d6:45:bc:4f:8b:c5:d5:c3:99:73:5d:3e:
                    c4:d7:66:4a:ac:ca:82:6e:e6:08:db:06:33:af:98:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2A:6F:EF:E3:A3:03:D5:46:45:54:99:BB:9A:51:EB:98:08:B7:B6
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:70:b2:7c:b9:ec:e6:76:aa:63:94:19:ac:81:31:d5:e9:
         5a:58:b6:07:1f:fc:3e:3e:f9:e3:02:57:04:e9:d7:51:b8:64:
         59:20:99:e7:44:b1:12:80:d9:71:c8:5e:17:f8:e9:09:e7:36:
         40:bd:21:1c:4a:74:94:76:e5:7b:ba:4f:20:9b:bb:1e:90:a6:
         b3:09:c7:9b:33:11:f8:f0:5f:b5:31:54:1a:3e:fa:cf:60:47:
         c6:0b:ed:32:93:c0:e3:e7:ec:27:59:b3:64:b8:12:d4:42:4f:
         43:ed:ad:5f:5b:5f:e2:d0:9a:ea:44:7e:f1:88:5e:fe:62:b0:
         95:bd:4d:56:93:18:eb:e5:12:e5:24:e7:7d:68:50:e8:b1:2e:
         f8:d8:2e:94:d3:a1:4a:a7:2b:3c:44:60:53:ce:46:1c:a7:19:
         fe:23:11:ec:0c:b4:1e:12:c9:0f:c8:08:8c:61:0a:90:2d:f2:
         bc:a2:f6:4b:c3:b8:7b:8f:39:83:f3:93:f5:61:77:a3:0f:8b:
         65:18:ad:0b:c6:82:88:39:1c:bb:79:70:ca:f6:3f:d3:dc:b1:
         81:7e:50:87:11:86:18:66:0d:5d:23:8e:e4:de:95:2d:ef:35:
         53:38:44:a1:41:5d:e7:16:fe:ff:a1:79:9d:ba:be:11:7a:d2:
         2b:76:8b:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC
MzU1REFCRjQwHhcNMjUxMDI2MTg1NzI4WhcNMjUxMTAyMTg1NzI4WjAYMRYwFAYD
VQQDEw02OGZlNmYxOC0wMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmiRenFpArkmw6pT823sErY6ucGr7EfgLbf7o0PUUij0dJ4nsyrrYGxLnBfU
rB7uEWDlLUA2BPRd7TtHRDQpd182XDmoZJkP4P7Ippz6/rg7buzS+/U897aIKMro
XNW0sDDqBnpDKcIrVqltDo37lNW2x/MPPq67mWVJWY+c2kIWUUrZBIccMmsAnKc8
bqFt2yBv4BVuFtE+X9cvwlMlf64Z1UE4xNMdWdGByAkDRRJFvWW1s9wbB2wGwaKh
UX5MXaZulVJo90vwfSDbxLQR/i2TKiThAuyM0WwB4hRqtFTn5YjWRbxPi8XVw5lz
XT7E12ZKrMqCbuYI2wYzr5iA5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgqb+/j
owPVRkVUmbuaUeuYCLe2MB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD
QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG
ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeVnCyfLns5naqY5QZrIEx1elaWLYHH/w+PvnjAlcE6ddRuGRZIJnn
RLESgNlxyF4X+OkJ5zZAvSEcSnSUduV7uk8gm7sekKazCcebMxH48F+1MVQaPvrP
YEfGC+0yk8Dj5+wnWbNkuBLUQk9D7a1fW1/i0JrqRH7xiF7+YrCVvU1Wkxjr5RLl
JOd9aFDosS742C6U06FKpys8RGBTzkYcpxn+IxHsDLQeEskPyAiMYQqQLfK8ovZL
w7h7jzmD85P1YXejD4tlGK0LxoKIORy7eXDK9j/T3LGBflCHEYYYZg1dI47k3pUt
7zVTOEShQV3nFv7/oXmdur4RetIrdotY
-----END CERTIFICATE-----
Generated at Mon Oct 27 15:00:47 2025 by rpki-client