Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
File:                     eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json)
Hash identifier:          8XQEymO16eJq5Em8Fxm3K9azaNmRBvQD9H0Ucqw97gI=
Subject key identifier:   59:29:48:64:3F:EE:1A:1F:70:6D:F3:E5:AC:D8:41:3B:4E:AC:72:C7
Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
Certificate issuer:       /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
Manifest number:          0116
Signing time:             Wed 05 Nov 2025 05:01:21 +0000
Manifest this update:     Wed 05 Nov 2025 05:01:20 +0000
Manifest next update:     Wed 12 Nov 2025 05:01:20 +0000
Files and hashes:         1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: o/+x4waZeNs3+XgkAzxJlwclEV5WVKvLcELfY1B4AIo=)
                          2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: BCuicmcvw7ww1h97rYp14idO+zun7W58fW3pvWobsAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
        Validity
            Not Before: Nov  5 05:01:20 2025 GMT
            Not After : Nov 12 05:01:20 2025 GMT
        Subject: CN=690ada20-b770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:7f:0d:e9:92:dc:b8:c6:92:ba:c3:c3:64:
                    cc:b8:75:47:a4:0c:9f:60:5c:ac:08:a1:ef:67:2f:
                    6e:f5:bf:6c:51:55:ec:37:69:9f:a1:89:47:c9:23:
                    cd:0d:12:3d:81:5e:ac:9b:20:49:17:4a:85:e1:90:
                    7b:f1:c6:fa:c8:2c:af:22:0b:46:9b:59:f6:f6:33:
                    1f:48:3b:ab:ac:34:cd:38:72:31:01:73:62:7c:f4:
                    a3:51:da:c2:20:49:d0:a4:a3:4b:12:7c:30:80:8d:
                    7f:ca:58:63:f4:10:bf:2d:6b:ea:ee:e4:b1:5f:76:
                    65:2f:7f:50:50:c9:50:ec:1f:1e:01:42:8f:e6:2b:
                    1d:d5:93:be:a4:55:4c:e6:a5:36:21:72:38:5b:c0:
                    43:c9:b4:92:9b:f1:f4:67:a0:e7:c0:9e:b3:e1:ff:
                    2d:f4:43:10:01:9d:9c:8b:c3:02:08:7e:49:12:ac:
                    85:c9:b3:96:9e:e6:cd:93:7c:e3:9a:64:96:84:d9:
                    21:59:4c:e6:eb:f8:64:f2:71:58:da:c9:50:36:55:
                    d8:6f:dd:08:8d:a8:e7:a4:aa:1a:80:f7:b0:95:fe:
                    79:5a:dc:1e:82:94:02:e5:c2:eb:25:d7:d5:47:34:
                    d2:4b:04:3c:5e:5b:19:b4:9e:99:ee:31:35:4e:99:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:29:48:64:3F:EE:1A:1F:70:6D:F3:E5:AC:D8:41:3B:4E:AC:72:C7
            X509v3 Authority Key Identifier:
                keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:11:50:14:e6:97:f3:ea:bd:71:a2:34:93:7e:4e:b0:0c:8d:
         49:49:e4:ec:7a:3e:48:df:51:f0:d1:00:43:6b:f5:cc:be:e9:
         21:61:ab:8b:58:0a:b2:8c:b3:67:ea:e2:bb:5e:1a:b6:08:db:
         13:3d:50:92:35:40:47:68:21:4d:2e:e9:58:aa:18:10:14:25:
         6a:76:5c:4f:90:69:12:db:6a:4b:49:fd:77:b7:fc:2b:f8:c7:
         42:69:21:b7:1f:54:8e:5e:7f:c5:b0:19:9b:85:8c:27:56:fd:
         55:a0:4f:eb:c9:ac:34:70:dc:96:d3:91:00:d3:a6:4c:3b:32:
         bc:3f:22:15:e5:84:47:61:74:6a:01:10:34:df:e8:18:8c:ef:
         f5:86:4c:9a:8c:36:65:c1:82:57:f7:f3:dc:de:b9:d1:c0:0b:
         dc:bf:b0:2e:c5:8a:2d:27:22:08:b1:74:1d:cd:2c:92:d5:81:
         e5:88:58:52:81:a9:cf:13:f1:7a:f8:fe:dd:67:ef:35:25:61:
         4c:91:53:b3:b6:a4:34:e6:58:d1:a5:e2:9f:f2:e3:b8:97:2c:
         23:ad:cf:78:99:90:88:d6:ed:ab:4b:1e:f3:76:bf:06:17:d4:
         8b:2e:a3:43:16:85:0b:09:9c:27:a3:c2:19:f2:f7:b6:4a:74:
         86:e2:a0:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVBOTMxMTAvBgNVBAUTKDc4MEI1QkM2Q0U1RTQ2OTgzN0FERUIzNjg1NzRFRDQ4
MzA0ODAxQ0IwHhcNMjUxMTA1MDUwMTIwWhcNMjUxMTEyMDUwMTIwWjAYMRYwFAYD
VQQDEw02OTBhZGEyMC1iNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyV/DemS3LjGkrrDw2TMuHVHpAyfYFysCKHvZy9u9b9sUVXsN2mfoYlHySPN
DRI9gV6smyBJF0qF4ZB78cb6yCyvIgtGm1n29jMfSDurrDTNOHIxAXNifPSjUdrC
IEnQpKNLEnwwgI1/ylhj9BC/LWvq7uSxX3ZlL39QUMlQ7B8eAUKP5isd1ZO+pFVM
5qU2IXI4W8BDybSSm/H0Z6DnwJ6z4f8t9EMQAZ2ci8MCCH5JEqyFybOWnubNk3zj
mmSWhNkhWUzm6/hk8nFY2slQNlXYb90IjajnpKoagPewlf55WtwegpQC5cLrJdfV
RzTSSwQ8XlsZtJ6Z7jE1TplrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkpSGQ/
7hofcG3z5azYQTtOrHLHMB8GA1UdIwQYMBaAFHgLW8bOXkaYN63rNoV07UgwSAHL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE5My9DMDFBRjVGNDE1
QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJwZzNyZXMyaFhUdFNEQklB
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VBdGJ4czVlUnBnM3JlczJoWFR0U0RCSUFjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUE5My9DMDFBRjVGNDE1QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJw
ZzNyZXMyaFhUdFNEQklBY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpEVAU5pfz6r1xojSTfk6wDI1JSeTsej5I31Hw0QBDa/XMvukhYauL
WAqyjLNn6uK7Xhq2CNsTPVCSNUBHaCFNLulYqhgQFCVqdlxPkGkS22pLSf13t/wr
+MdCaSG3H1SOXn/FsBmbhYwnVv1VoE/ryaw0cNyW05EA06ZMOzK8PyIV5YRHYXRq
ARA03+gYjO/1hkyajDZlwYJX9/Pc3rnRwAvcv7AuxYotJyIIsXQdzSyS1YHliFhS
ganPE/F6+P7dZ+81JWFMkVOztqQ05ljRpeKf8uO4lywjrc94mZCI1u2rSx7zdr8G
F9SLLqNDFoULCZwno8IZ8ve2SnSG4qBt
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:43 2025 by rpki-client