Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File:                     rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier:          5UwmDKAO4NwzwpnRQYmdDiy9I9uuOu6ncpN43rppvnM=
Subject key identifier:   8D:E3:4D:52:6B:A7:2A:7F:F6:0D:F7:A7:E2:AA:28:8B:45:D2:A8:F0
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer:       /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number:          FB
Signing time:             Mon 03 Nov 2025 05:07:33 +0000
Manifest this update:     Mon 03 Nov 2025 05:07:33 +0000
Manifest next update:     Mon 10 Nov 2025 05:07:33 +0000
Files and hashes:         1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: mpLHJ89Zg8zoX9yHV6A2sQ5qMgKAWxh1ZzZrpclJ4K0=)
                          2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
        Validity
            Not Before: Nov  3 05:07:33 2025 GMT
            Not After : Nov 10 05:07:33 2025 GMT
        Subject: CN=69083895-c1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:dd:4d:41:f5:85:99:9b:b9:01:3f:29:c5:
                    85:95:2c:c0:ca:bc:63:a2:a3:6d:b1:59:4e:2a:aa:
                    f1:cf:4e:ba:db:08:ba:90:51:a4:e1:2a:9c:e2:41:
                    4c:0d:17:fe:27:1e:db:73:5c:e2:90:16:0d:f0:3d:
                    cc:69:c9:e0:6d:7c:28:01:4d:7e:17:c4:64:50:13:
                    6d:4c:5e:24:37:6a:05:82:57:9b:fb:e2:5a:92:17:
                    a4:d1:fd:7a:bb:9b:86:95:6f:e0:17:91:f3:ce:23:
                    8e:a8:a1:71:83:a1:65:6f:b1:0d:94:c9:1b:05:ca:
                    ce:27:ed:5b:84:68:71:64:ce:fa:fd:40:24:ff:c7:
                    e6:9f:f0:f0:aa:0e:aa:05:fa:a2:52:f5:f1:d5:87:
                    33:ec:f7:0e:89:5b:a7:1e:a9:78:6a:6a:ee:7d:02:
                    90:30:c6:2c:04:ce:08:86:2d:16:54:e6:91:4a:2f:
                    0d:2f:45:7a:66:ae:0b:47:d2:54:91:39:49:cd:3d:
                    1f:22:e0:7d:5e:1f:d0:09:88:de:06:07:2a:24:00:
                    c9:38:49:10:84:73:03:a2:b2:fa:5f:df:43:cf:aa:
                    c2:c5:21:5b:33:b5:66:09:75:58:6e:93:da:51:64:
                    d9:c0:50:99:1f:58:63:2b:87:e5:1c:a5:28:f3:22:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:4D:52:6B:A7:2A:7F:F6:0D:F7:A7:E2:AA:28:8B:45:D2:A8:F0
            X509v3 Authority Key Identifier:
                keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:6d:1f:a3:83:13:ca:cf:bb:8d:49:52:e7:6e:50:7b:0f:
         82:02:f4:5b:45:0e:fe:13:84:f0:e9:32:7d:96:db:68:73:22:
         a8:8a:f4:b5:de:75:f2:df:53:a0:36:1b:d3:0b:21:72:90:f9:
         bd:99:31:2d:b4:f2:de:1f:57:9a:07:87:1b:ae:81:d2:37:1e:
         5c:b5:cf:f4:14:3e:5c:89:13:ac:18:b7:ad:dc:c2:8a:ea:ff:
         2d:60:93:aa:28:83:2b:7d:ca:cc:2f:7e:d4:64:d8:c2:00:64:
         55:6b:d5:26:a1:26:50:11:3a:63:0f:20:07:d0:ee:d0:5d:d1:
         36:d5:cd:d9:0a:e5:81:a9:8d:c1:d5:38:f2:85:ae:4f:8b:f2:
         91:92:ce:0c:78:91:31:03:82:e4:2f:15:b6:95:94:45:79:43:
         4b:e7:42:d9:59:86:82:2a:c9:38:89:8f:61:d3:ac:51:da:38:
         86:14:bf:7a:d5:05:b2:9c:fd:e4:ef:c3:e1:4c:44:1b:9c:bb:
         62:60:b8:c4:9f:71:1e:a1:2b:42:43:ac:cd:35:4f:79:7e:9e:
         1e:91:fe:09:96:41:51:4a:70:78:c0:64:28:0c:e8:c1:0a:fc:
         72:6f:e2:c3:6f:c8:e7:77:99:88:d6:04:b9:30:91:60:22:cf:
         64:b0:01:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3
RTM3ODMzQkQwHhcNMjUxMTAzMDUwNzMzWhcNMjUxMTEwMDUwNzMzWjAYMRYwFAYD
VQQDEw02OTA4Mzg5NS1jMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2+jdTUH1hZmbuQE/KcWFlSzAyrxjoqNtsVlOKqrxz0662wi6kFGk4Sqc4kFM
DRf+Jx7bc1zikBYN8D3MacngbXwoAU1+F8RkUBNtTF4kN2oFgleb++Jakhek0f16
u5uGlW/gF5HzziOOqKFxg6Flb7ENlMkbBcrOJ+1bhGhxZM76/UAk/8fmn/Dwqg6q
BfqiUvXx1Ycz7PcOiVunHql4amrufQKQMMYsBM4Ihi0WVOaRSi8NL0V6Zq4LR9JU
kTlJzT0fIuB9Xh/QCYjeBgcqJADJOEkQhHMDorL6X99Dz6rCxSFbM7VmCXVYbpPa
UWTZwFCZH1hjK4flHKUo8yI+mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3jTVJr
pyp/9g33p+KqKItF0qjwMB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3
RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G
YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdqG0fo4MTys+7jUlS525Qew+CAvRbRQ7+E4Tw6TJ9lttocyKoivS1
3nXy31OgNhvTCyFykPm9mTEttPLeH1eaB4cbroHSNx5ctc/0FD5ciROsGLet3MKK
6v8tYJOqKIMrfcrML37UZNjCAGRVa9UmoSZQETpjDyAH0O7QXdE21c3ZCuWBqY3B
1Tjyha5Pi/KRks4MeJExA4LkLxW2lZRFeUNL50LZWYaCKsk4iY9h06xR2jiGFL96
1QWynP3k78PhTEQbnLtiYLjEn3EeoStCQ6zNNU95fp4ekf4JlkFRSnB4wGQoDOjB
Cvxyb+LDb8jnd5mI1gS5MJFgIs9ksAGn
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:22 2025 by rpki-client