Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          Nms4DTnOiA6mh/+jrUM7slYff12r+weDl7JigyiEw78=
Subject key identifier:   7C:96:F5:FB:B7:1E:1A:79:9C:CC:5E:BC:63:A0:56:4E:EA:E4:63:9C
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          352C
Signing time:             Sun 02 Nov 2025 14:54:04 +0000
Manifest this update:     Sun 02 Nov 2025 14:54:04 +0000
Manifest next update:     Sun 09 Nov 2025 14:54:04 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: EOytKclEIrqMI0oEwFZqagFg+F8rsaFeZnGrv69KBB4=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 14:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Nov  2 14:54:04 2025 GMT
            Not After : Nov  9 14:54:04 2025 GMT
        Subject: CN=6907708c-8e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:a4:83:74:7a:f1:d0:07:e5:04:16:48:ca:
                    85:71:ca:58:9e:39:94:6d:5d:85:7b:ec:78:14:13:
                    47:d0:76:68:ba:5b:9b:cf:23:3f:36:e2:59:19:de:
                    3c:a1:54:c1:9f:c7:1d:55:e5:01:bd:04:e8:b5:a3:
                    43:7e:cc:20:cb:85:82:28:d0:d5:05:59:80:ba:9c:
                    8f:f0:a6:ad:c5:07:b8:ee:f8:66:ef:dd:22:18:d2:
                    f7:b1:40:e0:01:ca:5d:d3:b3:e6:0d:a4:23:12:bd:
                    fb:6b:e8:f2:ef:59:e5:42:0b:25:d6:3f:0a:c2:23:
                    24:44:02:4a:34:8d:74:cb:40:5a:98:23:73:ee:84:
                    25:fd:15:ac:5e:53:02:ca:0d:3d:26:2e:db:b6:ca:
                    11:2f:06:8d:c4:5a:4f:d4:b4:a0:da:22:62:b2:f6:
                    cf:3d:ab:71:a6:7f:7c:16:98:55:ac:e0:ca:de:7f:
                    af:70:f9:de:72:c4:4c:40:ed:9f:dd:b8:2d:fe:1d:
                    f3:8d:48:e7:fb:9a:56:64:b8:c1:71:53:0d:1e:bf:
                    f9:8f:c3:fc:6b:e5:1c:0d:2c:22:a2:0b:ae:65:c9:
                    d5:ba:91:9c:24:59:87:f3:e5:49:ce:2a:9d:a7:69:
                    f4:14:7d:fd:a8:c9:3f:95:03:7b:17:e4:d6:7a:26:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:F5:FB:B7:1E:1A:79:9C:CC:5E:BC:63:A0:56:4E:EA:E4:63:9C
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:c6:2c:00:04:4f:48:22:61:f7:c3:87:e3:89:69:0a:7a:
         e8:96:62:2b:d7:e6:44:d3:74:3c:d5:19:2b:53:01:88:6d:89:
         96:03:16:fd:45:47:14:bd:8a:a1:05:e1:3c:3a:0f:f0:6e:b9:
         12:07:22:21:fe:40:ee:60:0a:dc:d5:f0:56:1c:de:84:92:e5:
         7e:e3:0b:b9:88:e2:12:b8:63:a6:52:05:de:28:2f:7f:a1:a2:
         bd:f3:9e:fa:78:6b:9b:c0:86:97:08:dd:64:67:2e:be:c8:2c:
         0d:9a:dc:98:e8:3c:fd:39:d8:11:96:4e:e8:e8:9a:e6:28:da:
         6a:3f:57:94:e8:43:10:ed:3a:08:e2:37:b2:1c:66:21:b1:0f:
         02:b3:4b:a3:2e:f7:d0:98:23:00:b4:fc:8d:95:86:0f:a8:f9:
         81:e8:ea:de:5a:73:d0:41:a6:2c:f9:04:a6:e2:9d:cc:3b:4a:
         6e:fd:1a:a3:bf:0f:ba:4b:85:cb:06:e4:ab:f1:83:74:c9:43:
         23:b1:9c:c6:ba:44:5c:d9:d7:f3:ae:2a:fb:a6:f7:9e:d7:1b:
         0b:e8:e7:e3:e5:38:56:c4:84:bb:b2:6b:48:98:b3:3a:d5:32:
         e5:59:fc:ab:de:82:96:d4:de:90:f2:cb:5e:83:9d:7a:3f:9a:
         74:8b:28:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMyODExMTAvBgNVBAUTKDEzMTc2OEEzNkIzMDM0NkUzREJFQkVCRjg3Qjg0ODFC
QUFCRTNFRUIwHhcNMjUxMTAyMTQ1NDA0WhcNMjUxMTA5MTQ1NDA0WjAYMRYwFAYD
VQQDEw02OTA3NzA4Yy04ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ACkg3R68dAH5QQWSMqFccpYnjmUbV2Fe+x4FBNH0HZoulubzyM/NuJZGd48
oVTBn8cdVeUBvQTotaNDfswgy4WCKNDVBVmAupyP8KatxQe47vhm790iGNL3sUDg
Acpd07PmDaQjEr37a+jy71nlQgsl1j8KwiMkRAJKNI10y0BamCNz7oQl/RWsXlMC
yg09Ji7btsoRLwaNxFpP1LSg2iJisvbPPatxpn98FphVrODK3n+vcPnecsRMQO2f
3bgt/h3zjUjn+5pWZLjBcVMNHr/5j8P8a+UcDSwioguuZcnVupGcJFmH8+VJziqd
p2n0FH39qMk/lQN7F+TWeiZKhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyW9fu3
Hhp5nMxevGOgVk7q5GOcMB8GA1UdIwQYMBaAFBMXaKNrMDRuPb6+v4e4SBuqvj7r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI4MS8wMDIwMTM0NjFE
OTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05HNDl2cjZfaDdoSUc2cS1Q
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V4ZG9vMnN3Tkc0OXZyNl9oN2hJRzZxLVB1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzI4MS8wMDIwMTM0NjFEOTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05H
NDl2cjZfaDdoSUc2cS1QdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbmsYsAARPSCJh98OH44lpCnrolmIr1+ZE03Q81RkrUwGIbYmWAxb9
RUcUvYqhBeE8Og/wbrkSByIh/kDuYArc1fBWHN6EkuV+4wu5iOISuGOmUgXeKC9/
oaK98576eGubwIaXCN1kZy6+yCwNmtyY6Dz9OdgRlk7o6JrmKNpqP1eU6EMQ7ToI
4jeyHGYhsQ8Cs0ujLvfQmCMAtPyNlYYPqPmB6OreWnPQQaYs+QSm4p3MO0pu/Rqj
vw+6S4XLBuSr8YN0yUMjsZzGukRc2dfzrir7pvee1xsL6Ofj5ThWxIS7smtImLM6
1TLlWfyr3oKW1N6Q8steg516P5p0iyhB
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:07 2025 by rpki-client