Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          pOIxRJS8AOp4hxqy2hSH0NHDy9drkCTvLzgSFg+Ab/s=
Subject key identifier:   F4:BE:69:93:4D:74:41:F1:69:F4:58:58:16:5F:F9:F9:A9:AE:5B:68
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          7F
Signing time:             Tue 07 Oct 2025 06:59:43 +0000
Manifest this update:     Tue 07 Oct 2025 06:59:42 +0000
Manifest next update:     Tue 14 Oct 2025 06:59:42 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: gf2CG8mU7yBtI1bGho7igWWwscKVNRZ22Ns4t13NSmU=)
                          2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=)
                          4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: LBvJJ/XeKAW7YpPt8QijWt6ARJJn+Uyg1XhvCYuwjks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 06:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Oct  7 06:59:42 2025 GMT
            Not After : Oct 14 06:59:42 2025 GMT
        Subject: CN=68e4ba5e-9beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:a7:20:89:6f:98:75:2b:11:f6:75:2d:87:
                    22:88:40:6e:17:47:f0:50:ea:a7:60:92:9d:13:30:
                    23:f9:fe:9c:d5:bc:bc:0c:f1:7e:40:95:1d:4b:02:
                    ad:45:7c:9c:5f:45:05:33:3e:08:76:f1:2f:a1:25:
                    25:cd:c1:7d:ea:21:43:a0:9d:58:50:6b:bd:6e:88:
                    ed:d8:14:e4:d0:06:c7:11:5e:54:0a:0b:dc:88:d4:
                    f8:c5:f2:88:de:8f:d1:98:19:f8:c3:6f:5c:13:0e:
                    da:7a:e2:6c:94:ec:5c:4e:6c:1b:ac:01:38:3f:46:
                    77:90:5e:48:a3:6c:e9:cf:45:a7:28:cd:6f:70:b8:
                    31:17:ad:d9:e6:7e:7f:30:58:5a:18:4f:85:ae:98:
                    d3:63:e7:21:df:3d:eb:d8:38:b8:86:fd:e9:3a:50:
                    36:16:f2:59:68:81:51:bb:f6:5f:54:4b:45:af:2b:
                    bd:36:00:73:a1:44:74:48:ba:44:54:e7:12:bd:c2:
                    87:67:10:bb:1a:71:e5:db:27:16:b4:80:27:41:81:
                    25:62:ad:bd:7b:d8:72:ac:49:b7:d1:c8:cc:8d:af:
                    70:31:1b:ed:bc:92:25:8d:e1:f0:d1:48:7a:4c:34:
                    bf:83:1d:e5:ca:3f:e3:6a:c5:fb:2e:56:e8:78:b9:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BE:69:93:4D:74:41:F1:69:F4:58:58:16:5F:F9:F9:A9:AE:5B:68
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:27:5b:50:01:0b:6e:ce:af:52:fd:e4:d8:09:d8:7e:85:
         fb:3e:3e:1c:e6:1d:e7:a2:1a:d4:bc:44:f0:56:51:86:de:57:
         66:a9:09:64:d0:f0:e4:d9:b6:15:7b:5f:3c:63:b2:b4:95:bd:
         84:f8:b9:f1:76:49:d4:36:61:4c:b6:a3:e4:f0:9c:9c:60:96:
         ca:7e:27:db:a5:33:34:6c:23:c5:4a:72:73:b4:f6:d2:c5:0e:
         e1:b3:b1:35:35:40:e8:34:9f:41:f3:de:e4:44:94:57:45:cc:
         91:97:56:fb:78:42:36:57:e2:21:6c:71:8f:4a:f8:ee:18:b5:
         0d:66:02:9c:47:93:41:cc:46:18:6f:e9:1a:36:06:82:bb:23:
         a9:93:48:bb:b5:72:b4:1a:82:d2:a0:92:68:40:b2:09:67:a1:
         ae:fc:cc:14:cb:e3:f6:31:d7:50:12:ea:3c:73:cd:62:55:16:
         4b:d3:12:b3:d6:2f:25:98:07:56:fb:2f:ac:94:ca:62:9d:0d:
         10:7a:33:49:11:a4:2a:82:17:b7:10:2d:94:bf:2f:88:54:49:
         4b:b3:ca:03:d6:55:95:1b:69:9f:06:20:46:b9:ee:5c:c0:8e:
         b1:23:ea:42:d3:7f:fa:73:d2:fc:d3:27:86:90:16:de:2a:d8:
         7a:90:12:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4RkExMTAvBgNVBAUTKDBCOTIzN0UzQjA4NkI1OEMzQ0Q5Q0U2RkQ0OUFDMjYx
RjdENTI1QTMwHhcNMjUxMDA3MDY1OTQyWhcNMjUxMDE0MDY1OTQyWjAYMRYwFAYD
VQQDEw02OGU0YmE1ZS05YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHinIIlvmHUrEfZ1LYciiEBuF0fwUOqnYJKdEzAj+f6c1by8DPF+QJUdSwKt
RXycX0UFMz4IdvEvoSUlzcF96iFDoJ1YUGu9bojt2BTk0AbHEV5UCgvciNT4xfKI
3o/RmBn4w29cEw7aeuJslOxcTmwbrAE4P0Z3kF5Io2zpz0WnKM1vcLgxF63Z5n5/
MFhaGE+FrpjTY+ch3z3r2Di4hv3pOlA2FvJZaIFRu/ZfVEtFryu9NgBzoUR0SLpE
VOcSvcKHZxC7GnHl2ycWtIAnQYElYq29e9hyrEm30cjMja9wMRvtvJIljeHw0Uh6
TDS/gx3lyj/jasX7LlboeLm0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS+aZNN
dEHxafRYWBZf+fmprltoMB8GA1UdIwQYMBaAFAuSN+OwhrWMPNnOb9SawmH31SWj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhGQS9EMzdGNjI1Q0U3
M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZdzgyYzV2MUpyQ1lmZlZK
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkphTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDhGQS9EMzdGNjI1Q0U3M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZ
dzgyYzV2MUpyQ1lmZlZKYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwrSdbUAELbs6vUv3k2AnYfoX7Pj4c5h3nohrUvETwVlGG3ldmqQlk
0PDk2bYVe188Y7K0lb2E+LnxdknUNmFMtqPk8JycYJbKfifbpTM0bCPFSnJztPbS
xQ7hs7E1NUDoNJ9B897kRJRXRcyRl1b7eEI2V+IhbHGPSvjuGLUNZgKcR5NBzEYY
b+kaNgaCuyOpk0i7tXK0GoLSoJJoQLIJZ6Gu/MwUy+P2MddQEuo8c81iVRZL0xKz
1i8lmAdW+y+slMpinQ0QejNJEaQqghe3EC2Uvy+IVElLs8oD1lWVG2mfBiBGue5c
wI6xI+pC03/6c9L80yeGkBbeKth6kBKN
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:21 2025 by rpki-client