Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
File:                     3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json)
Hash identifier:          xUNmbx3mSphDF4OAeei5/6nrYRMDALjxRI4R9ggr7JA=
Subject key identifier:   9F:9D:04:1A:9D:10:A7:07:38:4B:E9:CD:A4:8F:D5:CD:54:EE:53:39
Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05
Certificate issuer:       /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
Certificate serial:       06FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
Manifest number:          06EE
Signing time:             Sun 02 Nov 2025 21:57:59 +0000
Manifest this update:     Sun 02 Nov 2025 21:57:58 +0000
Manifest next update:     Sun 09 Nov 2025 21:57:58 +0000
Files and hashes:         1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: htp+Uqvn7h6KjDdPwCFrTP330Y9HTySu7znETJRO9wk=)
                          2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: DGzXCeNwvDBe7tehCzISldKuF3rMgtSzwuNEMYEu//8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl
                          rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919910B, serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
        Validity
            Not Before: Nov  2 21:57:58 2025 GMT
            Not After : Nov  9 21:57:58 2025 GMT
        Subject: CN=6907d3e6-0021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:04:4e:50:cc:7d:6f:90:d5:7d:e1:f5:d5:
                    a9:56:be:bb:2d:fb:07:d8:79:eb:31:50:ac:34:ed:
                    5f:b8:80:00:97:dc:31:a2:3e:89:e7:b1:dc:62:c1:
                    27:d3:97:e4:15:c3:a5:ee:e2:c8:cb:0b:9e:42:9c:
                    b1:03:a5:9f:ac:78:44:5d:84:42:a9:3a:65:77:96:
                    64:66:93:ba:f3:b5:f9:8d:b8:ae:69:31:14:12:89:
                    76:5e:c1:c5:d5:89:eb:6d:5a:1d:8c:ed:8d:81:66:
                    02:5f:8b:bd:84:65:20:5d:79:5f:99:0f:3d:9d:3f:
                    8b:31:d6:fa:e8:8e:40:0b:9c:72:66:50:d6:ab:2b:
                    a0:b3:d3:d6:c9:1a:eb:17:30:00:71:58:68:a8:c1:
                    80:3e:3e:2c:54:c2:9c:0a:03:c1:fa:fe:e3:2a:3c:
                    10:ec:eb:a5:ff:e6:72:fc:ed:64:8a:d7:bb:6d:b2:
                    21:76:27:ab:fe:aa:b7:52:a5:30:43:95:78:e0:7a:
                    0b:91:82:7e:df:37:5d:e6:62:bc:c1:b7:da:d9:fe:
                    6f:20:73:d7:94:c4:9e:c0:c4:4f:93:49:0d:b5:64:
                    bc:91:6e:d0:82:6f:d0:cf:92:2f:9d:2e:47:d0:5f:
                    e2:2d:76:3e:33:91:c5:5d:7b:e3:c3:35:3f:94:09:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:04:1A:9D:10:A7:07:38:4B:E9:CD:A4:8F:D5:CD:54:EE:53:39
            X509v3 Authority Key Identifier:
                keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:4d:89:90:ef:fa:26:a2:9c:ea:ba:96:08:1d:b6:3d:3d:
         60:7b:8d:7f:ae:f9:10:2f:c4:71:f0:4d:21:e3:20:d5:e6:f5:
         dc:5f:65:85:16:8a:bd:63:d5:89:6d:0b:ce:bc:e8:80:80:c4:
         f5:f0:b0:8f:c7:73:fa:90:e2:ec:ef:fd:38:bf:b1:98:9e:51:
         b9:34:63:8c:5b:a7:be:1e:a6:6f:e0:ce:3d:99:5e:28:90:6b:
         b8:29:58:c3:13:40:c0:a0:f1:7a:22:02:f8:0c:c8:c1:b5:7d:
         7c:7c:17:4d:c4:fa:5d:f7:1a:01:0a:20:99:35:98:09:c3:42:
         cf:5e:9a:99:50:4a:16:9b:9a:72:2c:cb:bc:0a:6d:dc:40:74:
         ac:74:72:78:9a:30:32:4c:f0:61:e0:61:7f:70:ac:28:d4:14:
         2a:99:1d:52:fc:48:cc:f8:58:8a:d9:19:67:05:c1:56:17:da:
         56:47:45:bc:b8:84:f9:7f:eb:6b:d3:2a:a0:93:b6:ee:e5:be:
         21:ad:32:07:20:05:58:c6:fe:27:33:a7:84:61:63:41:be:12:
         83:e8:26:28:0a:92:28:05:95:74:29:ee:48:83:6b:6e:c6:f2:
         68:c8:47:89:f5:98:be:2c:57:ab:fd:a1:d7:47:81:8b:ca:80:
         5b:6f:b5:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxMEIxMTAvBgNVBAUTKERDOTE4NEIwNEE1M0M3QTE3MkY3Q0QyNjI1NUVCNUQ4
MDNFMzQ3MDUwHhcNMjUxMTAyMjE1NzU4WhcNMjUxMTA5MjE1NzU4WjAYMRYwFAYD
VQQDEw02OTA3ZDNlNi0wMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIUETlDMfW+Q1X3h9dWpVr67LfsH2HnrMVCsNO1fuIAAl9wxoj6J57HcYsEn
05fkFcOl7uLIywueQpyxA6WfrHhEXYRCqTpld5ZkZpO687X5jbiuaTEUEol2XsHF
1YnrbVodjO2NgWYCX4u9hGUgXXlfmQ89nT+LMdb66I5AC5xyZlDWqyugs9PWyRrr
FzAAcVhoqMGAPj4sVMKcCgPB+v7jKjwQ7Oul/+Zy/O1kite7bbIhdier/qq3UqUw
Q5V44HoLkYJ+3zdd5mK8wbfa2f5vIHPXlMSewMRPk0kNtWS8kW7Qgm/Qz5IvnS5H
0F/iLXY+M5HFXXvjwzU/lAkRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+dBBqd
EKcHOEvpzaSP1c1U7lM5MB8GA1UdIwQYMBaAFNyRhLBKU8ehcvfNJiVetdgD40cF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTEwQi82MjNEMUUwNjZG
ODUxMUVCQUM1QUM5NkNDNEY5QUUwMi8zSkdFc0VwVHg2Rnk5ODBtSlY2MTJBUGpS
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNKR0VzRXBUeDZGeTk4MG1KVjYxMkFQalJ3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTEwQi82MjNEMUUwNjZGODUxMUVCQUM1QUM5NkNDNEY5QUUwMi8zSkdFc0VwVHg2
Rnk5ODBtSlY2MTJBUGpSd1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7Yk2JkO/6JqKc6rqWCB22PT1ge41/rvkQL8Rx8E0h4yDV5vXcX2WF
Foq9Y9WJbQvOvOiAgMT18LCPx3P6kOLs7/04v7GYnlG5NGOMW6e+HqZv4M49mV4o
kGu4KVjDE0DAoPF6IgL4DMjBtX18fBdNxPpd9xoBCiCZNZgJw0LPXpqZUEoWm5py
LMu8Cm3cQHSsdHJ4mjAyTPBh4GF/cKwo1BQqmR1S/EjM+FiK2RlnBcFWF9pWR0W8
uIT5f+tr0yqgk7bu5b4hrTIHIAVYxv4nM6eEYWNBvhKD6CYoCpIoBZV0Ke5Ig2tu
xvJoyEeJ9Zi+LFer/aHXR4GLyoBbb7Vz
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:56:44 2025 by rpki-client