Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          MsdgTu+M7cbItDjYI8mWbefj4OeKVvs13YvxwRcN4Jg=
Subject key identifier:   D9:BA:86:17:81:AA:3F:AF:E1:55:A7:64:77:C6:2D:3C:CA:5E:A9:96
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          07EF
Signing time:             Sun 02 Nov 2025 21:06:40 +0000
Manifest this update:     Sun 02 Nov 2025 21:06:40 +0000
Manifest next update:     Sun 09 Nov 2025 21:06:40 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: 5uYJpGCfZLGHWe7wFLbhGwKovwfkgmxYWCHcTPuQmc0=)
                          2: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: RU8kIBK1Vw0uGfLmOnL1T+Qo1FjWkAA2fxz13lNIa7Q=)
                          3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=)
                          4: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: XoTEfZcPGEmQD9zyshNP1dQKGN6V62H/HYhndKM8Qg0=)
                          5: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: +h6xoSjaSieb5+QzRvElQx3KoFeScEm/KsqPu0uGEQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Nov  2 21:06:40 2025 GMT
            Not After : Nov  9 21:06:40 2025 GMT
        Subject: CN=6907c7e0-7665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:ee:fc:7a:11:e4:f6:19:f1:15:09:c5:21:
                    24:b9:20:09:b6:74:e8:a5:bb:aa:ba:2b:19:29:c1:
                    38:20:92:0c:a3:1f:9a:59:76:63:27:45:2d:45:60:
                    8b:b9:9f:b8:ea:a5:6d:c2:28:b3:0d:ce:d7:e6:e8:
                    90:0f:fe:20:19:b7:80:51:70:03:60:e9:3a:f2:0a:
                    a0:f5:78:d7:8f:7f:77:5a:0e:96:8b:46:04:03:9d:
                    66:9d:89:44:c4:b6:55:50:76:38:6c:cb:25:b6:7f:
                    87:ed:e4:90:10:ec:fe:12:86:78:6c:34:25:b3:22:
                    5d:61:6e:d0:23:8f:4c:ac:90:be:49:c2:ef:db:fe:
                    55:fd:4c:4d:8f:e2:47:7d:92:dd:9c:87:32:28:90:
                    43:a9:09:5b:0b:a8:df:6b:02:7c:ba:39:80:41:df:
                    40:4e:56:c3:34:92:2c:31:18:30:7e:23:8e:a4:a7:
                    6c:52:11:9e:46:df:75:04:4e:c0:df:90:4b:ef:17:
                    64:a5:de:49:d0:a9:93:f2:5d:9d:32:9a:b6:6f:e0:
                    20:fd:f3:b0:dd:4b:85:87:c4:4a:8d:71:db:a8:bd:
                    8b:6c:ad:98:51:fb:b0:90:ef:4a:31:35:50:a2:f5:
                    14:fd:a9:9d:55:4b:1f:c6:cb:24:a6:1c:94:10:f0:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BA:86:17:81:AA:3F:AF:E1:55:A7:64:77:C6:2D:3C:CA:5E:A9:96
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:71:06:a7:c3:80:28:f6:50:26:35:4b:d5:1b:b2:b5:19:d4:
         63:4d:78:35:91:ea:f1:e5:82:0b:99:b8:a8:3c:01:ed:b3:ce:
         18:90:ae:f8:38:f7:e5:9e:67:ae:bd:1c:9b:49:ca:6d:9c:ce:
         f7:1e:33:87:2c:f6:c5:cd:0c:36:f9:4d:bf:d0:1d:d9:a1:dd:
         6a:1f:3d:1c:ba:c4:cb:99:a9:c9:3a:c9:e8:db:69:86:18:55:
         36:22:09:82:f4:bd:93:1c:9d:7d:af:f2:fb:5d:8b:e6:36:54:
         7f:29:58:33:bf:b3:2c:73:4b:ac:3c:1e:06:99:84:48:5c:aa:
         c2:ed:53:ca:19:f7:51:c6:2e:c9:ae:f3:68:50:c9:d2:9a:0a:
         dd:91:d4:32:dd:65:e9:1f:39:fc:a7:e5:6d:df:b8:73:bd:57:
         85:26:0d:82:8c:43:da:ab:56:10:8f:da:ee:06:97:fb:c6:4c:
         c8:b9:c9:56:91:86:5e:3f:a2:2d:8c:f3:7a:14:3b:96:c1:17:
         f2:0e:74:98:8b:e7:3e:fe:cb:e5:fb:98:f3:ff:c4:df:d3:1a:
         7a:c2:7a:c3:a0:26:de:73:32:3a:01:4f:97:2d:98:94:83:bd:
         b8:25:7f:19:4f:11:c7:3f:1f:9d:39:b7:23:23:a7:c2:1f:db:
         97:4e:b2:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjUxMTAyMjEwNjQwWhcNMjUxMTA5MjEwNjQwWjAYMRYwFAYD
VQQDEw02OTA3YzdlMC03NjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUju/HoR5PYZ8RUJxSEkuSAJtnTopbuquisZKcE4IJIMox+aWXZjJ0UtRWCL
uZ+46qVtwiizDc7X5uiQD/4gGbeAUXADYOk68gqg9XjXj393Wg6Wi0YEA51mnYlE
xLZVUHY4bMsltn+H7eSQEOz+EoZ4bDQlsyJdYW7QI49MrJC+ScLv2/5V/UxNj+JH
fZLdnIcyKJBDqQlbC6jfawJ8ujmAQd9ATlbDNJIsMRgwfiOOpKdsUhGeRt91BE7A
35BL7xdkpd5J0KmT8l2dMpq2b+Ag/fOw3UuFh8RKjXHbqL2LbK2YUfuwkO9KMTVQ
ovUU/amdVUsfxsskphyUEPCJsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm6hheB
qj+v4VWnZHfGLTzKXqmWMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu
YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/cQanw4Ao9lAmNUvVG7K1GdRjTXg1kerx5YILmbioPAHts84YkK74
OPflnmeuvRybScptnM73HjOHLPbFzQw2+U2/0B3Zod1qHz0cusTLmanJOsno22mG
GFU2IgmC9L2THJ19r/L7XYvmNlR/KVgzv7Msc0usPB4GmYRIXKrC7VPKGfdRxi7J
rvNoUMnSmgrdkdQy3WXpHzn8p+Vt37hzvVeFJg2CjEPaq1YQj9ruBpf7xkzIuclW
kYZeP6ItjPN6FDuWwRfyDnSYi+c+/svl+5jz/8Tf0xp6wnrDoCbeczI6AU+XLZiU
g724JX8ZTxHHPx+dObcjI6fCH9uXTrII
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:32 2025 by rpki-client