Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          p+SpxN5kT27haDnsZ1HxiZgcIb64dSxgq0F2iyrE5IU=
Subject key identifier:   02:0E:A2:E7:0F:AF:53:22:10:DD:8C:4A:CF:0B:0B:06:DF:38:63:CF
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          0187
Signing time:             Mon 03 Nov 2025 03:35:31 +0000
Manifest this update:     Mon 03 Nov 2025 03:35:30 +0000
Manifest next update:     Mon 10 Nov 2025 03:35:30 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: Ws50H62FkBUe8fOrHQzMtCZymlWT22oPQNS3Sbjy/oA=)
                          2: 98647190660511EE9F741151C4F9AE02.roa (hash: e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=)
                          3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Nov  3 03:35:30 2025 GMT
            Not After : Nov 10 03:35:30 2025 GMT
        Subject: CN=69082303-2dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:1b:75:63:3b:b1:05:35:8a:18:69:2a:e7:
                    a5:f9:5c:e0:e8:3e:4f:54:3c:54:9a:7f:00:fb:5f:
                    61:73:ea:ef:c3:99:8f:d1:1c:e1:e1:1e:9e:68:0b:
                    20:e0:b9:14:28:93:3f:f9:60:75:d6:63:21:9b:27:
                    cd:fc:82:f0:4d:5f:08:d3:c0:2a:54:51:c9:12:0f:
                    21:77:d0:be:ea:ca:09:77:6b:75:49:42:c5:1f:25:
                    0c:c8:d7:de:e0:41:26:6f:84:4c:6c:66:d0:db:a5:
                    b2:98:1b:da:78:90:e3:20:fa:0e:9a:f2:54:62:eb:
                    bb:eb:db:ff:b1:6f:a2:81:f1:1d:58:7e:ee:9c:b0:
                    d0:08:84:39:74:4f:22:20:f8:61:9d:b4:bb:04:d3:
                    fc:aa:6a:f1:8c:cb:1c:2d:0f:9f:4e:6a:d5:ae:69:
                    d7:ea:78:9d:e9:6f:e3:c4:e9:80:bc:ec:7b:48:00:
                    9d:7b:d3:79:6e:00:bc:4b:d6:61:7a:b4:87:8f:19:
                    3d:d9:16:26:43:a9:db:9b:5f:ca:2c:c1:92:9d:f2:
                    21:ec:84:93:52:f4:8c:d1:cc:27:3f:48:bb:e5:c2:
                    ab:64:86:4e:27:b8:a1:29:ca:e2:0e:8b:d8:72:d3:
                    36:31:fe:32:5a:86:8d:37:1c:6d:19:02:27:e3:fa:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:A2:E7:0F:AF:53:22:10:DD:8C:4A:CF:0B:0B:06:DF:38:63:CF
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:03:c6:9a:27:cc:53:13:df:ee:af:09:19:82:03:33:96:
         19:7b:19:2c:f0:24:3e:72:70:3b:76:06:02:75:46:34:1f:dc:
         ed:7e:8a:f9:80:30:6b:dc:f8:8d:8c:9e:40:a3:eb:1b:6f:77:
         62:af:7a:2a:31:ff:5c:c9:1b:17:ad:b3:51:ad:d7:65:ce:0e:
         06:f8:74:a7:a3:4d:f2:fb:c6:c8:20:4f:a2:7f:b7:3b:3e:3a:
         60:24:dc:03:a3:65:5c:61:a4:ac:7b:d1:1d:ce:58:10:17:37:
         4a:08:40:9a:41:d1:12:5e:77:71:ad:b7:96:3a:8e:62:a7:5f:
         a7:af:f2:b4:05:0b:d1:98:8c:15:54:5a:03:80:2c:f1:50:64:
         60:53:07:98:72:81:a2:25:21:87:1f:dc:de:5a:7a:1d:93:52:
         b8:1c:f4:d6:95:d5:7a:ba:57:be:40:25:ff:55:2d:e7:ee:b3:
         9b:59:4d:cb:9d:a0:b3:9c:02:a8:5f:03:8b:16:c2:af:3f:cf:
         ba:cf:22:e6:ea:46:c1:21:d5:49:f5:ca:52:fc:8e:3d:d5:ff:
         8c:8e:eb:72:32:35:c6:cd:d0:84:18:8f:70:69:c1:ef:2e:46:
         03:37:24:80:0a:d0:b8:30:b7:74:ba:e6:03:3f:ad:f8:1a:30:
         c5:c9:1b:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQzRDQ3QzdBNjlC
MjY5NTVFQTEwHhcNMjUxMTAzMDMzNTMwWhcNMjUxMTEwMDMzNTMwWjAYMRYwFAYD
VQQDEw02OTA4MjMwMy0yZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxwbdWM7sQU1ihhpKuel+Vzg6D5PVDxUmn8A+19hc+rvw5mP0Rzh4R6eaAsg
4LkUKJM/+WB11mMhmyfN/ILwTV8I08AqVFHJEg8hd9C+6soJd2t1SULFHyUMyNfe
4EEmb4RMbGbQ26WymBvaeJDjIPoOmvJUYuu769v/sW+igfEdWH7unLDQCIQ5dE8i
IPhhnbS7BNP8qmrxjMscLQ+fTmrVrmnX6nid6W/jxOmAvOx7SACde9N5bgC8S9Zh
erSHjxk92RYmQ6nbm1/KLMGSnfIh7ISTUvSM0cwnP0i75cKrZIZOJ7ihKcriDovY
ctM2Mf4yWoaNNxxtGQIn4/rDhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIOoucP
r1MiEN2MSs8LCwbfOGPPMB8GA1UdIwQYMBaAFPmN3DQvfie2jKCNPUfHppsmlV6h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzY4Qi80RTlDMUY5MDYy
RDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3YU1vSTA5UjhlbW15YVZY
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3
YU1vSTA5UjhlbW15YVZYcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAmwPGmifMUxPf7q8JGYIDM5YZexks8CQ+cnA7dgYCdUY0H9ztfor5
gDBr3PiNjJ5Ao+sbb3dir3oqMf9cyRsXrbNRrddlzg4G+HSno03y+8bIIE+if7c7
PjpgJNwDo2VcYaSse9EdzlgQFzdKCECaQdESXndxrbeWOo5ip1+nr/K0BQvRmIwV
VFoDgCzxUGRgUweYcoGiJSGHH9zeWnodk1K4HPTWldV6ule+QCX/VS3n7rObWU3L
naCznAKoXwOLFsKvP8+6zyLm6kbBIdVJ9cpS/I491f+MjutyMjXGzdCEGI9wacHv
LkYDNySACtC4MLd0uuYDP634GjDFyRuf
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:25 2025 by rpki-client