Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File:                     FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier:          k029r8y+3yH5cFWmNeyMs3CvnpxbpAgfawlwgsFNXyw=
Subject key identifier:   D7:F5:B1:B4:F0:96:70:5E:BF:E1:95:07:0C:11:2C:A4:4B:04:13:1B
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer:       /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number:          F1
Signing time:             Wed 05 Nov 2025 05:27:37 +0000
Manifest this update:     Wed 05 Nov 2025 05:27:36 +0000
Manifest next update:     Wed 12 Nov 2025 05:27:36 +0000
Files and hashes:         1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: z6fK4y4tbFUUJ5z5E5H4LOJq1N/M+9VetJIqdD3Ql8Y=)
                          2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
        Validity
            Not Before: Nov  5 05:27:36 2025 GMT
            Not After : Nov 12 05:27:36 2025 GMT
        Subject: CN=690ae048-56fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:a8:9d:f7:ca:22:b1:2c:5b:18:ce:4e:1f:
                    18:50:d9:74:9c:67:3d:29:f5:4c:67:4b:52:9b:4c:
                    df:28:bf:98:51:54:65:30:d6:1f:29:08:04:c0:13:
                    10:67:32:e7:5c:8e:5b:91:81:06:3c:d4:e2:2d:1d:
                    1e:60:71:49:5c:da:94:b3:4f:3c:02:bb:47:fb:3e:
                    9b:1b:d6:03:73:a0:d3:67:70:c4:b1:1a:38:08:bc:
                    7e:64:f8:f2:81:65:36:e3:96:09:03:a2:9e:b0:4d:
                    b6:20:a8:1e:3c:a6:7d:56:17:cf:89:85:2e:77:66:
                    f4:1f:6b:9e:ec:68:e5:01:50:28:9b:5e:bf:47:34:
                    83:a5:3c:1c:ad:b7:25:a0:0c:60:ea:ce:e0:da:ac:
                    11:63:ef:c4:0c:18:e8:f5:28:ee:1d:cb:f6:56:06:
                    f1:7c:7f:83:f3:c3:d7:f1:cd:c1:bf:ed:43:b3:92:
                    1d:24:b5:a5:f8:80:6d:b9:0b:d4:86:2e:ea:f2:3f:
                    e4:4b:f7:de:b9:66:d1:4d:78:3e:92:4e:2a:c0:f8:
                    0b:e4:89:30:f2:ef:5d:76:e4:d4:90:ac:27:78:f3:
                    c4:55:9d:b0:79:59:2f:e6:d8:f3:9a:19:90:e2:0a:
                    25:fc:55:8d:3f:3b:3e:82:78:a0:05:68:bd:d4:7c:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:B1:B4:F0:96:70:5E:BF:E1:95:07:0C:11:2C:A4:4B:04:13:1B
            X509v3 Authority Key Identifier:
                keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:16:e2:eb:43:a8:14:1c:8a:42:40:fb:ad:cb:e0:06:9c:
         69:83:29:ea:1d:5a:95:c7:9f:2e:c9:ef:b3:7b:47:07:5d:11:
         c8:21:d3:c6:b4:93:db:5f:d6:62:57:a8:1c:4b:86:19:aa:3e:
         b6:51:30:cd:20:c7:e1:c3:85:68:83:1d:cd:a4:c0:33:bd:2b:
         57:0b:65:a5:e3:3f:0b:aa:4b:bf:0f:59:17:60:ce:18:4e:67:
         2e:fd:ed:2b:e4:fc:33:79:c7:43:c8:8e:c7:0f:b2:35:0b:c9:
         60:46:0f:a7:88:47:e9:d7:9d:8e:91:aa:50:79:2f:a7:e1:ff:
         b7:29:07:9d:df:a1:fc:14:00:3b:87:19:b9:a9:43:ac:89:f2:
         47:7d:07:8b:f6:dc:5f:b5:95:48:d4:74:82:69:13:ee:e5:c8:
         ff:6c:25:35:6e:ff:04:2b:e1:73:ab:9e:7c:c3:3a:1d:52:fc:
         07:85:0d:c5:e4:ea:ea:3c:da:0b:9f:ad:7a:71:58:2f:b8:2a:
         8a:1b:08:d4:8a:3b:ee:46:99:01:1d:b1:d3:e2:89:a2:b1:49:
         ae:f5:60:15:5d:58:24:21:e3:dd:22:da:4e:4e:67:10:de:56:
         16:4f:73:4a:af:3c:dc:db:5e:fb:de:55:38:ab:b5:e5:e9:b5:
         4a:a7:6e:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0
MDlBMkI2RDcwHhcNMjUxMTA1MDUyNzM2WhcNMjUxMTEyMDUyNzM2WjAYMRYwFAYD
VQQDEw02OTBhZTA0OC01NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxf+onffKIrEsWxjOTh8YUNl0nGc9KfVMZ0tSm0zfKL+YUVRlMNYfKQgEwBMQ
ZzLnXI5bkYEGPNTiLR0eYHFJXNqUs088ArtH+z6bG9YDc6DTZ3DEsRo4CLx+ZPjy
gWU245YJA6KesE22IKgePKZ9VhfPiYUud2b0H2ue7GjlAVAom16/RzSDpTwcrbcl
oAxg6s7g2qwRY+/EDBjo9SjuHcv2VgbxfH+D88PX8c3Bv+1Ds5IdJLWl+IBtuQvU
hi7q8j/kS/feuWbRTXg+kk4qwPgL5Ikw8u9dduTUkKwnePPEVZ2weVkv5tjzmhmQ
4gol/FWNPzs+gnigBWi91HzBbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf1sbTw
lnBev+GVBwwRLKRLBBMbMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5
NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj
cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzPxbi60OoFByKQkD7rcvgBpxpgynqHVqVx58uye+ze0cHXRHIIdPG
tJPbX9ZiV6gcS4YZqj62UTDNIMfhw4Vogx3NpMAzvStXC2Wl4z8Lqku/D1kXYM4Y
Tmcu/e0r5PwzecdDyI7HD7I1C8lgRg+niEfp152OkapQeS+n4f+3KQed36H8FAA7
hxm5qUOsifJHfQeL9txftZVI1HSCaRPu5cj/bCU1bv8EK+Fzq558wzodUvwHhQ3F
5OrqPNoLn616cVgvuCqKGwjUijvuRpkBHbHT4omisUmu9WAVXVgkIePdItpOTmcQ
3lYWT3NKrzzc21773lU4q7Xl6bVKp274
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:44:49 2025 by rpki-client