Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
File:                     JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json)
Hash identifier:          4oPpY0Cv4BuT8BtAQASoaLaDrmmdUGLcm6/7Y6iDlYY=
Subject key identifier:   87:8F:93:8C:33:D6:8B:3E:D8:19:A9:E9:FD:74:54:B3:08:70:F1:BA
Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
Certificate issuer:       /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Certificate serial:       04E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
Manifest number:          04E2
Signing time:             Sun 02 Nov 2025 23:43:52 +0000
Manifest this update:     Sun 02 Nov 2025 23:43:51 +0000
Manifest next update:     Sun 09 Nov 2025 23:43:51 +0000
Files and hashes:         1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: bCdj74cpDp89fWDZJa3nmAukfH+P6aXyrqzv7sf8Dk8=)
                          2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl
                          rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
        Validity
            Not Before: Nov  2 23:43:51 2025 GMT
            Not After : Nov  9 23:43:51 2025 GMT
        Subject: CN=6907ecb8-4ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:11:af:97:64:84:64:a1:fe:91:46:56:b1:
                    75:c0:b2:9e:fc:8f:fd:83:45:8e:27:64:37:6d:b7:
                    b2:44:d3:4e:fa:18:0e:c5:d3:82:03:4c:da:00:01:
                    6c:f7:b3:37:17:c2:b3:02:25:9a:73:a9:3a:9e:da:
                    ce:86:fc:a2:8c:ad:66:5d:59:89:8e:41:39:f8:3f:
                    a2:58:44:d2:cf:9e:92:c5:5f:85:55:d7:32:a4:5d:
                    7e:57:48:f5:06:eb:a7:d6:68:af:81:c6:9c:22:03:
                    bc:e9:90:5f:af:32:f0:45:99:2b:64:3a:68:ae:af:
                    ef:f9:a9:1a:b5:eb:d3:d8:e3:fd:92:a7:d7:71:bc:
                    50:67:a3:6e:0b:9f:0a:ff:6d:f7:60:f1:23:26:9b:
                    55:03:25:de:a2:9d:c1:d3:d0:68:a9:42:72:9f:ea:
                    4c:38:1d:fe:49:3a:7b:b8:ae:e7:b6:82:f5:de:ff:
                    1d:58:6d:63:90:b2:b6:16:4b:2f:9b:52:6c:6a:28:
                    e8:95:1b:07:76:c2:a9:2f:9f:6d:e1:58:99:99:38:
                    29:d0:90:11:cb:30:bb:97:89:dc:ff:44:ab:58:d3:
                    e7:ce:f7:b7:0c:6b:6e:19:f3:3f:e1:b8:d8:27:32:
                    f7:6b:7e:6a:84:bc:90:06:2f:71:85:cb:af:80:3f:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8F:93:8C:33:D6:8B:3E:D8:19:A9:E9:FD:74:54:B3:08:70:F1:BA
            X509v3 Authority Key Identifier:
                keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2d:d9:68:40:8f:16:05:ed:0c:f6:0e:66:03:45:1f:e0:da:
         53:10:a4:f8:46:c1:cd:25:be:be:3d:eb:e0:da:bc:6f:e2:dd:
         5b:8a:b3:6a:6e:45:9b:57:63:26:a2:00:eb:86:c7:cb:11:09:
         ce:c5:54:6c:9e:4a:bf:37:77:c4:46:39:a1:0f:a0:f9:cc:df:
         78:4f:11:dc:b9:ff:a0:cc:b1:60:7e:3f:b9:6a:0b:32:e3:43:
         60:0c:12:4d:2b:c6:fb:59:f6:6e:1d:24:09:bb:62:be:88:05:
         83:32:51:50:8b:1e:04:16:6f:f7:1e:23:9d:76:9e:dd:38:b2:
         26:24:8e:e9:a0:7e:7f:1a:bd:be:c8:1b:ac:70:2f:b6:7e:98:
         b2:7f:97:d1:1b:25:ef:88:13:c7:f4:7e:bf:2b:dd:6a:66:2d:
         77:b0:99:bd:3e:63:dd:08:f4:81:91:f8:a4:07:2c:59:bb:31:
         87:18:2c:44:40:a9:fd:89:dd:b8:1d:03:a3:1a:fb:09:0b:a7:
         d5:81:fc:5c:c5:1f:7c:bc:c8:b8:97:40:76:64:e5:cf:01:9c:
         d3:9e:d8:0a:19:2b:9d:a9:f8:a5:46:e0:6c:15:8f:a2:d0:43:
         c1:73:db:98:ff:08:20:13:ee:e7:bd:a2:1a:ad:3a:40:6f:33:
         ec:b3:c3:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2
QkExMEY2QjEwHhcNMjUxMTAyMjM0MzUxWhcNMjUxMTA5MjM0MzUxWjAYMRYwFAYD
VQQDEw02OTA3ZWNiOC00Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzERr5dkhGSh/pFGVrF1wLKe/I/9g0WOJ2Q3bbeyRNNO+hgOxdOCA0zaAAFs
97M3F8KzAiWac6k6ntrOhvyijK1mXVmJjkE5+D+iWETSz56SxV+FVdcypF1+V0j1
Buun1mivgcacIgO86ZBfrzLwRZkrZDporq/v+akatevT2OP9kqfXcbxQZ6NuC58K
/233YPEjJptVAyXeop3B09BoqUJyn+pMOB3+STp7uK7ntoL13v8dWG1jkLK2Fksv
m1JsaijolRsHdsKpL59t4ViZmTgp0JARyzC7l4nc/0SrWNPnzve3DGtuGfM/4bjY
JzL3a35qhLyQBi9xhcuvgD88ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIePk4wz
1os+2Bmp6f10VLMIcPG6MB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB
MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo
TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJLdloQI8WBe0M9g5mA0Uf4NpTEKT4RsHNJb6+Pevg2rxv4t1birNq
bkWbV2MmogDrhsfLEQnOxVRsnkq/N3fERjmhD6D5zN94TxHcuf+gzLFgfj+5agsy
40NgDBJNK8b7WfZuHSQJu2K+iAWDMlFQix4EFm/3HiOddp7dOLImJI7poH5/Gr2+
yBuscC+2fpiyf5fRGyXviBPH9H6/K91qZi13sJm9PmPdCPSBkfikByxZuzGHGCxE
QKn9id24HQOjGvsJC6fVgfxcxR98vMi4l0B2ZOXPAZzTntgKGSudqfilRuBsFY+i
0EPBc9uY/wggE+7nvaIarTpAbzPss8NV
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:45 2025 by rpki-client