Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          dTGENp+cT5ePFiyg9Aivcx6Tk4Yuhc+y6KDCUFDVaQU=
Subject key identifier:   EA:39:8F:7D:6D:A8:64:6F:0D:08:CB:69:04:5A:35:F1:10:40:45:86
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       0FD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          0FC2
Signing time:             Tue 04 Nov 2025 17:35:29 +0000
Manifest this update:     Tue 04 Nov 2025 17:35:29 +0000
Manifest next update:     Tue 11 Nov 2025 17:35:29 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: xIpMGwYdflWLdYAtNggfU6Og0PXkNBcbcCqac91N2gM=)
                          2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: E66SV6WNRD5ULWCmhiJGOhN+NZfmVirzyRoB4Hy/u4Q=)
                          3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: i8fQntshSNYD8zDT2wDiHtaQKzGJtDGb0egHvcZuXHs=)
                          4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: UGdOvww/zqYEiJCbgpSOvpp5LjsG3mU+jjIktHieTx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4056 (0xfd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Nov  4 17:35:29 2025 GMT
            Not After : Nov 11 17:35:29 2025 GMT
        Subject: CN=690a3961-bae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:e8:d7:08:aa:ea:43:e7:d6:f6:29:1e:9c:
                    b6:23:eb:81:e6:4d:b3:f3:08:88:30:fc:d5:76:d6:
                    3c:de:25:38:47:ae:78:41:d5:fe:56:1d:07:15:24:
                    e2:dc:65:8d:0d:af:9b:18:4d:b7:29:a8:63:64:fb:
                    25:e6:30:b2:9e:c2:3c:4f:79:bd:01:94:65:74:a8:
                    0c:fd:20:ee:7a:85:c0:ba:45:36:64:47:02:3a:9a:
                    c9:c0:84:46:4f:89:28:fe:52:c1:75:04:c0:99:c3:
                    c3:fc:aa:9f:b6:71:f7:ad:a2:6e:56:7a:66:dd:37:
                    9d:af:0d:8f:b9:1f:38:0c:4a:ee:fe:7a:b7:f9:82:
                    ff:f0:d7:0c:88:83:ec:43:00:6b:23:fe:bd:c5:ef:
                    3f:a9:aa:34:79:2b:f8:2d:eb:ad:61:ea:14:bd:20:
                    23:d2:e6:42:22:0d:a3:df:9e:a5:12:ed:8a:88:46:
                    e8:34:e4:d8:c8:e0:d5:b1:d8:9e:20:77:74:85:47:
                    17:7b:b6:61:fe:a0:38:f3:3c:b5:d5:c6:d1:21:6c:
                    0f:37:4c:88:ea:fe:69:43:13:be:ba:4c:84:e1:3a:
                    a1:e0:f9:27:60:51:51:9f:95:c5:13:0e:6e:c7:80:
                    5e:33:65:5c:be:76:86:9e:65:16:dd:07:49:62:2f:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:8F:7D:6D:A8:64:6F:0D:08:CB:69:04:5A:35:F1:10:40:45:86
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:29:31:50:f3:52:89:2f:2c:09:14:88:8d:a6:7e:92:aa:
         66:16:7a:8d:b1:58:ee:d4:eb:08:5b:f8:64:56:1b:60:09:58:
         ad:0d:87:8d:1c:2b:20:75:2f:c0:b5:75:27:4d:c3:2a:fc:7e:
         6c:ba:41:f2:5f:fa:7a:23:34:c2:72:68:a4:88:69:f7:5c:97:
         0b:f6:8e:42:f4:f4:0e:11:6c:93:af:9f:6b:76:03:b8:89:21:
         27:25:db:63:59:62:36:64:0b:69:84:0c:fb:45:4c:40:16:91:
         0d:70:6b:49:05:c7:61:cb:38:8d:ee:47:66:06:9b:c8:6d:3c:
         59:7f:da:11:b7:04:aa:1d:e7:59:46:92:6d:a6:9f:34:db:52:
         58:3d:d5:74:2d:e1:bf:1a:31:e4:29:ff:66:ba:55:96:71:49:
         89:01:db:4e:6f:4b:97:68:e6:14:56:99:8b:bd:a2:a5:30:c1:
         1a:d5:95:d1:e1:a5:c9:3c:b4:25:95:d4:69:6f:2f:b1:5c:7b:
         02:76:65:32:57:fb:db:c6:6d:11:a4:4a:40:1c:9a:e9:1a:8c:
         df:06:01:c4:d6:6b:9c:3b:22:b8:b8:0f:70:ff:90:37:fc:94:
         1c:f7:49:65:bc:b4:ad:57:82:3d:28:6d:62:7a:1e:3c:a0:d7:
         f9:a5:0e:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjUxMTA0MTczNTI5WhcNMjUxMTExMTczNTI5WjAYMRYwFAYD
VQQDEw02OTBhMzk2MS1iYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzvzo1wiq6kPn1vYpHpy2I+uB5k2z8wiIMPzVdtY83iU4R654QdX+Vh0HFSTi
3GWNDa+bGE23KahjZPsl5jCynsI8T3m9AZRldKgM/SDueoXAukU2ZEcCOprJwIRG
T4ko/lLBdQTAmcPD/KqftnH3raJuVnpm3Tedrw2PuR84DEru/nq3+YL/8NcMiIPs
QwBrI/69xe8/qao0eSv4LeutYeoUvSAj0uZCIg2j356lEu2KiEboNOTYyODVsdie
IHd0hUcXe7Zh/qA48zy11cbRIWwPN0yI6v5pQxO+ukyE4Tqh4PknYFFRn5XFEw5u
x4BeM2VcvnaGnmUW3QdJYi80dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOo5j31t
qGRvDQjLaQRaNfEQQEWGMB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1
MHhlSVZzZTJMcHdXaUxLM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtGCkxUPNSiS8sCRSIjaZ+kqpmFnqNsVju1OsIW/hkVhtgCVitDYeN
HCsgdS/AtXUnTcMq/H5sukHyX/p6IzTCcmikiGn3XJcL9o5C9PQOEWyTr59rdgO4
iSEnJdtjWWI2ZAtphAz7RUxAFpENcGtJBcdhyziN7kdmBpvIbTxZf9oRtwSqHedZ
RpJtpp8021JYPdV0LeG/GjHkKf9mulWWcUmJAdtOb0uXaOYUVpmLvaKlMMEa1ZXR
4aXJPLQlldRpby+xXHsCdmUyV/vbxm0RpEpAHJrpGozfBgHE1mucOyK4uA9w/5A3
/JQc90llvLStV4I9KG1ieh48oNf5pQ7G
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:55 2025 by rpki-client