Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          zFmVNMmw/ak5nnifqMp6oYvt/uZXHOMIgLG0jL8UNjw=
Subject key identifier:   EB:2A:D0:5F:7E:7F:54:9B:C4:3E:E1:46:11:47:24:9C:23:6F:EA:E6
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       1208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          11E9
Signing time:             Tue 04 Nov 2025 17:15:47 +0000
Manifest this update:     Tue 04 Nov 2025 17:15:46 +0000
Manifest next update:     Tue 11 Nov 2025 17:15:46 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: iFPt2/Z5p6WAtYFIDMNdkITV67dgslzOwY0ZxJFCCfc=)
                          2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: 864v72yIGP6+fcV9ihOEtR0vSNI9KCZAgVkE2lkVzYA=)
                          3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: au9xZxCZeREaDcJouTlLj1rRcc2mSPei8Jd1icPw/ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4616 (0x1208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Nov  4 17:15:46 2025 GMT
            Not After : Nov 11 17:15:46 2025 GMT
        Subject: CN=690a34c2-3902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:ae:39:41:d8:84:1f:ba:65:2d:c1:94:e6:
                    31:61:fe:67:36:65:2f:b0:3f:ea:44:c8:1d:8f:00:
                    e9:b7:2f:1e:14:e6:2e:64:d8:1a:18:dd:7f:ab:3f:
                    73:7e:56:3c:70:83:d0:e2:6c:ec:09:f6:17:8b:9c:
                    c9:be:04:72:8a:26:03:c8:4a:dd:3d:6b:8a:ea:b6:
                    3b:1e:f9:d9:38:63:54:ec:bb:6e:4a:64:b1:5a:20:
                    58:78:ec:1e:e8:7c:b6:39:99:6e:45:aa:be:c7:47:
                    0e:a2:dc:f0:a6:a8:38:ea:65:95:03:ec:4f:23:39:
                    73:dc:85:ff:af:93:29:2b:3f:6b:df:70:37:b5:0d:
                    56:fc:2e:6d:38:64:40:c3:5f:3f:54:d7:2f:a1:b0:
                    f4:e4:0b:6d:93:d6:e0:0f:6f:4b:5d:30:e2:64:62:
                    78:84:05:6e:ee:64:90:c7:44:a7:2b:65:16:cd:1e:
                    c7:36:7d:0e:92:a3:18:5e:5b:06:cb:0f:74:25:83:
                    8e:48:3c:8f:6d:1c:24:0b:17:aa:9a:44:ea:a3:c6:
                    5e:3f:ce:1b:73:8f:eb:2e:5d:b1:21:7a:a1:ff:ec:
                    82:93:9a:00:9b:e9:22:09:a8:14:cc:6b:79:55:5d:
                    59:ef:a4:b4:04:f7:c5:e7:c3:5f:58:b6:06:57:e8:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2A:D0:5F:7E:7F:54:9B:C4:3E:E1:46:11:47:24:9C:23:6F:EA:E6
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:02:55:61:12:1b:a8:2d:44:8f:3f:43:25:b0:96:69:cf:a7:
         d7:30:9f:94:b1:12:96:16:d0:90:bf:df:06:47:2c:c9:a7:45:
         a3:d4:35:7f:20:2b:74:57:a0:44:fe:11:b4:21:4d:01:69:00:
         a8:59:9d:79:75:aa:a2:51:2a:4e:1f:6d:7d:29:4a:e7:9d:1f:
         16:14:7f:29:fa:5f:90:1c:33:0b:b6:b3:48:47:e9:a5:42:9c:
         2f:cf:e4:d6:20:a3:72:df:7f:ea:37:28:fd:2b:0c:11:a8:25:
         7d:00:d4:ee:08:e8:e9:cb:85:af:c9:c9:de:a0:33:4b:71:f1:
         ba:27:1d:03:0f:1b:0b:64:19:02:ea:b2:c4:a3:40:29:6a:45:
         87:51:05:cf:29:1e:77:b9:38:c2:22:6f:ee:b5:4d:fa:88:e6:
         07:00:7c:66:a0:1b:5e:51:ad:b6:6b:17:fa:57:f5:f1:ca:af:
         7d:b5:1b:31:0a:3b:9b:8c:d9:5d:ba:a4:c6:3f:7c:4c:87:ce:
         a0:4b:7a:20:47:85:b5:7b:c7:83:78:c3:cc:69:d5:6f:be:b1:
         45:65:ee:90:e5:67:47:4e:df:95:3a:8d:b2:64:ae:98:5e:10:
         70:bb:30:04:87:f1:7f:3b:ea:f6:ae:ba:44:21:e0:da:42:bf:
         78:11:24:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC
MjFBNDMzRUMwHhcNMjUxMTA0MTcxNTQ2WhcNMjUxMTExMTcxNTQ2WjAYMRYwFAYD
VQQDEw02OTBhMzRjMi0zOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6EKuOUHYhB+6ZS3BlOYxYf5nNmUvsD/qRMgdjwDpty8eFOYuZNgaGN1/qz9z
flY8cIPQ4mzsCfYXi5zJvgRyiiYDyErdPWuK6rY7HvnZOGNU7LtuSmSxWiBYeOwe
6Hy2OZluRaq+x0cOotzwpqg46mWVA+xPIzlz3IX/r5MpKz9r33A3tQ1W/C5tOGRA
w18/VNcvobD05Attk9bgD29LXTDiZGJ4hAVu7mSQx0SnK2UWzR7HNn0OkqMYXlsG
yw90JYOOSDyPbRwkCxeqmkTqo8ZeP84bc4/rLl2xIXqh/+yCk5oAm+kiCagUzGt5
VV1Z76S0BPfF58NfWLYGV+hKGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsq0F9+
f1SbxD7hRhFHJJwjb+rmMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD
RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy
R3RBTkVBQzRJTW15R2tNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxAlVhEhuoLUSPP0MlsJZpz6fXMJ+UsRKWFtCQv98GRyzJp0Wj1DV/
ICt0V6BE/hG0IU0BaQCoWZ15daqiUSpOH219KUrnnR8WFH8p+l+QHDMLtrNIR+ml
Qpwvz+TWIKNy33/qNyj9KwwRqCV9ANTuCOjpy4WvycneoDNLcfG6Jx0DDxsLZBkC
6rLEo0ApakWHUQXPKR53uTjCIm/utU36iOYHAHxmoBteUa22axf6V/Xxyq99tRsx
CjubjNlduqTGP3xMh86gS3ogR4W1e8eDeMPMadVvvrFFZe6Q5WdHTt+VOo2yZK6Y
XhBwuzAEh/F/O+r2rrpEIeDaQr94ESR3
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:57:03 2025 by rpki-client