Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File:                     fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier:          KqdFZaKEzoTmtOWdH3k4WQqszCXbNlCAQ9FImb3K/mg=
Subject key identifier:   AA:D1:E3:47:56:A9:5B:F8:65:59:44:E5:12:9F:71:2B:73:6C:20:2A
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer:       /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial:       07C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number:          07B8
Signing time:             Sun 02 Nov 2025 21:19:15 +0000
Manifest this update:     Sun 02 Nov 2025 21:19:14 +0000
Manifest next update:     Sun 09 Nov 2025 21:19:14 +0000
Files and hashes:         1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: B6VV3e9dz/UaA+GkWFFWHZubOkJm+KkV/7PlWP58juQ=)
                          2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: obLkt/nxUwTe3cYZEfOLwoBFErueOvXeFYCZsMGzozM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
                          rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C162D, serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
        Validity
            Not Before: Nov  2 21:19:14 2025 GMT
            Not After : Nov  9 21:19:14 2025 GMT
        Subject: CN=6907cad2-5229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:2b:69:d3:38:4e:69:c7:51:27:44:0a:df:
                    56:d2:26:78:d1:05:df:25:5b:c4:f2:3b:87:95:5e:
                    4c:35:a4:9f:a7:b6:d5:6f:08:38:da:6b:c2:db:92:
                    7c:52:c0:48:7e:65:d2:14:f3:93:35:b7:f6:3b:a1:
                    9b:79:24:7c:96:ea:fb:83:d8:5e:43:44:7d:4a:93:
                    00:12:7c:d1:40:5a:48:c8:3c:22:f3:f2:11:09:6b:
                    f6:dc:a4:20:92:bd:97:d6:73:f5:e5:cb:ab:ea:ae:
                    af:76:81:3e:02:f0:cf:3d:a4:5b:7a:7d:65:11:3e:
                    57:bd:e3:d6:f8:a9:ed:58:a7:bc:89:40:74:a4:6a:
                    e1:de:3d:6b:61:db:81:b8:75:b1:c7:9e:34:01:bb:
                    e8:61:93:98:83:fc:a6:0b:48:b0:4f:ad:61:c9:aa:
                    88:57:7a:ae:fa:69:2e:98:55:ee:da:b0:a3:ba:7f:
                    24:82:d9:4b:79:96:4b:65:90:e7:d6:e7:d4:72:b9:
                    9e:c1:ac:68:96:5c:77:19:08:a6:7f:3c:a5:66:1a:
                    8f:fe:f4:71:74:b3:41:d8:4d:57:9b:a0:71:55:c7:
                    a8:61:96:5b:47:ea:13:2e:0e:5b:c8:05:b8:80:4b:
                    8c:4e:79:e1:a3:e3:1c:cc:ac:71:0e:b7:d7:69:8e:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D1:E3:47:56:A9:5B:F8:65:59:44:E5:12:9F:71:2B:73:6C:20:2A
            X509v3 Authority Key Identifier:
                keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:7f:52:52:4f:d9:8a:43:eb:86:82:24:5a:1c:ff:04:71:
         31:d8:41:38:55:c5:e9:d6:5f:08:89:1f:64:ae:b8:49:10:17:
         75:ac:4d:55:a0:28:da:43:e9:f9:e6:97:ca:b5:af:ef:b5:7f:
         f7:42:f4:56:c6:55:67:16:1a:61:4f:ba:96:f5:70:68:61:a5:
         59:c4:7f:45:11:95:3b:30:b9:16:22:9d:53:87:5f:24:6a:bc:
         41:0a:e1:a0:6e:38:f8:1a:32:c9:86:f7:f3:d1:58:03:d4:c0:
         a1:11:ff:00:a4:69:0c:ec:1a:33:6f:15:c7:07:d9:6b:e1:70:
         25:44:1b:21:3b:75:cd:0c:94:77:7a:f0:d2:89:27:65:f7:e7:
         0a:38:bb:c6:b4:51:91:ed:54:79:9b:13:71:61:d7:ef:9f:1d:
         9e:fc:fe:71:8a:0f:01:37:56:12:de:2f:be:f2:44:42:23:f8:
         4f:db:21:5e:d9:4d:e0:ba:02:d1:4e:f6:c5:f7:c2:c8:62:b1:
         c8:9d:e8:82:24:8a:15:fe:99:c5:a8:4b:6b:cc:9e:a7:f0:04:
         8b:4c:bf:85:cc:2b:5f:28:1b:58:11:8d:68:ae:1e:3a:3b:3a:
         8e:62:ed:d6:24:91:04:74:cb:50:20:cd:d2:c8:41:d0:a7:48:
         75:f4:27:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MkQxMTAvBgNVBAUTKDdENzhBODg3MEIxRTU1NzNENjMzQzlBN0IwMDQwQTJF
RTQwNUQ5NTEwHhcNMjUxMTAyMjExOTE0WhcNMjUxMTA5MjExOTE0WjAYMRYwFAYD
VQQDEw02OTA3Y2FkMi01MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhQradM4TmnHUSdECt9W0iZ40QXfJVvE8juHlV5MNaSfp7bVbwg42mvC25J8
UsBIfmXSFPOTNbf2O6GbeSR8lur7g9heQ0R9SpMAEnzRQFpIyDwi8/IRCWv23KQg
kr2X1nP15cur6q6vdoE+AvDPPaRben1lET5XvePW+KntWKe8iUB0pGrh3j1rYduB
uHWxx540AbvoYZOYg/ymC0iwT61hyaqIV3qu+mkumFXu2rCjun8kgtlLeZZLZZDn
1ufUcrmewaxollx3GQimfzylZhqP/vRxdLNB2E1Xm6BxVceoYZZbR+oTLg5byAW4
gEuMTnnho+MczKxxDrfXaY6EjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrR40dW
qVv4ZVlE5RKfcStzbCAqMB8GA1UdIwQYMBaAFH14qIcLHlVz1jPJp7AECi7kBdlR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyRC82QTBDRkU5MDFD
MTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZYUFdNOG1uc0FRS0x1UUYy
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYaW9od3NlVlhQV004bW5zQVFLTHVRRjJWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyRC82QTBDRkU5MDFDMTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZY
UFdNOG1uc0FRS0x1UUYyVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIm39SUk/ZikPrhoIkWhz/BHEx2EE4VcXp1l8IiR9krrhJEBd1rE1V
oCjaQ+n55pfKta/vtX/3QvRWxlVnFhphT7qW9XBoYaVZxH9FEZU7MLkWIp1Th18k
arxBCuGgbjj4GjLJhvfz0VgD1MChEf8ApGkM7BozbxXHB9lr4XAlRBshO3XNDJR3
evDSiSdl9+cKOLvGtFGR7VR5mxNxYdfvnx2e/P5xig8BN1YS3i++8kRCI/hP2yFe
2U3gugLRTvbF98LIYrHIneiCJIoV/pnFqEtrzJ6n8ASLTL+FzCtfKBtYEY1orh46
OzqOYu3WJJEEdMtQIM3SyEHQp0h19CdR
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:44 2025 by rpki-client