Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File:                     Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier:          chd0xVhLeRRqaajzE1/P5tg9YeRhued9Tk6947PyWI8=
Subject key identifier:   22:FB:CA:E9:8B:12:E2:01:DD:65:1E:99:7C:DA:50:A4:30:B2:AD:C4
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer:       /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number:          0101
Signing time:             Mon 03 Nov 2025 05:07:00 +0000
Manifest this update:     Mon 03 Nov 2025 05:06:59 +0000
Manifest next update:     Mon 10 Nov 2025 05:06:59 +0000
Files and hashes:         1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: ZPk9jPQTlXiAyUwKoOjknvS/vj0h8jdD8nr9t7hHZX8=)
                          2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: 59HLMBrfjjdy7ZkLbK5ZAyw/H+2uYObVepiHANeb3uU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
        Validity
            Not Before: Nov  3 05:06:59 2025 GMT
            Not After : Nov 10 05:06:59 2025 GMT
        Subject: CN=69083874-fb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:7a:b6:27:51:88:99:6d:68:b9:26:0c:47:
                    eb:14:0c:31:25:f9:e7:5b:79:fb:f8:16:6f:55:9a:
                    31:48:05:42:9a:63:80:ea:59:53:aa:d6:75:80:14:
                    39:67:c6:70:d6:fd:cd:a0:7c:0a:e6:25:2c:d5:d2:
                    91:8d:d8:b1:f7:8a:93:84:3c:e6:55:03:e4:c5:db:
                    25:56:5f:1a:83:62:e5:5b:d3:f3:79:a9:34:32:ee:
                    fb:e9:ee:b0:5d:54:6b:d1:95:c2:20:c0:31:8b:b2:
                    53:bd:66:a7:1b:b4:86:7e:4a:2a:5b:f8:fc:3d:82:
                    fe:a5:f6:93:7f:c9:5f:78:df:03:32:4b:3e:2b:c1:
                    67:ce:8e:97:47:0b:cb:f9:e2:79:01:ab:ad:7c:0e:
                    26:78:01:69:e5:2e:52:a9:2a:3d:35:1e:d3:a9:47:
                    79:65:24:0e:32:fa:52:2b:30:7a:cb:8c:f6:15:23:
                    96:c0:2a:70:1e:fc:a9:96:46:33:a3:d7:fd:8b:47:
                    57:1d:04:96:c5:eb:d5:46:cd:95:29:e5:67:04:57:
                    92:f2:4b:f3:d8:39:f4:be:12:f0:6f:7e:a2:32:19:
                    c6:31:fd:76:51:25:96:ae:08:9b:52:1a:7e:b6:50:
                    19:eb:b8:78:62:c6:08:75:81:0e:34:45:dd:f4:37:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:CA:E9:8B:12:E2:01:DD:65:1E:99:7C:DA:50:A4:30:B2:AD:C4
            X509v3 Authority Key Identifier:
                keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:d4:fb:a6:96:a0:92:8a:d0:c7:aa:4c:45:58:73:5d:be:
         34:a5:99:3f:5e:ee:ae:04:0c:cf:c7:28:ee:17:fc:12:11:25:
         f4:b8:f6:cf:b2:af:72:6a:d3:6b:e3:f4:d0:0c:db:22:40:a6:
         b1:3a:78:29:47:1e:52:22:5f:a4:8f:d5:af:be:70:45:88:d3:
         cf:d1:01:4c:8f:96:70:a8:62:1f:4e:ef:41:62:85:94:0a:0d:
         51:26:ac:af:40:c1:9d:6d:22:a8:c5:ca:34:1d:53:1e:53:7d:
         fb:3c:63:d1:73:c4:26:06:f9:55:04:25:d5:e0:fe:b6:db:d6:
         c0:5d:bb:ed:04:25:c0:6a:3e:be:8f:fc:d0:3e:6d:5d:30:3f:
         3f:7d:40:f9:31:f2:bf:cd:95:72:82:11:fe:57:63:74:91:e5:
         0b:29:1a:2a:95:aa:ab:3e:ad:16:70:b8:44:58:5d:5d:ac:7b:
         cf:cd:9f:4a:18:8a:51:8b:29:3c:9d:64:10:ba:94:eb:76:18:
         14:a1:9a:1b:b3:d7:22:99:12:d1:f0:7b:ce:9b:67:88:ac:b0:
         0a:96:fb:ed:d3:69:09:15:28:99:48:9c:c6:b9:30:61:83:ed:
         ed:b5:ab:53:ad:43:f7:2f:ba:90:20:70:63:b5:ee:c9:7a:a0:
         03:ab:c2:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw
NDdEQUE1QTQwHhcNMjUxMTAzMDUwNjU5WhcNMjUxMTEwMDUwNjU5WjAYMRYwFAYD
VQQDEw02OTA4Mzg3NC1mYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJF6tidRiJltaLkmDEfrFAwxJfnnW3n7+BZvVZoxSAVCmmOA6llTqtZ1gBQ5
Z8Zw1v3NoHwK5iUs1dKRjdix94qThDzmVQPkxdslVl8ag2LlW9Pzeak0Mu776e6w
XVRr0ZXCIMAxi7JTvWanG7SGfkoqW/j8PYL+pfaTf8lfeN8DMks+K8Fnzo6XRwvL
+eJ5AautfA4meAFp5S5SqSo9NR7TqUd5ZSQOMvpSKzB6y4z2FSOWwCpwHvyplkYz
o9f9i0dXHQSWxevVRs2VKeVnBFeS8kvz2Dn0vhLwb36iMhnGMf12USWWrgibUhp+
tlAZ67h4YsYIdYEONEXd9DeRowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL7yumL
EuIB3WUemXzaUKQwsq3EMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3
NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1
eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlytT7ppagkorQx6pMRVhzXb40pZk/Xu6uBAzPxyjuF/wSESX0uPbP
sq9yatNr4/TQDNsiQKaxOngpRx5SIl+kj9WvvnBFiNPP0QFMj5ZwqGIfTu9BYoWU
Cg1RJqyvQMGdbSKoxco0HVMeU337PGPRc8QmBvlVBCXV4P6229bAXbvtBCXAaj6+
j/zQPm1dMD8/fUD5MfK/zZVyghH+V2N0keULKRoqlaqrPq0WcLhEWF1drHvPzZ9K
GIpRiyk8nWQQupTrdhgUoZobs9cimRLR8HvOm2eIrLAKlvvt02kJFSiZSJzGuTBh
g+3ttatTrUP3L7qQIHBjte7JeqADq8JD
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:56 2025 by rpki-client