Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier:          /9XoMw+Luj6IVmAZg42Kr5v6NKyFhJlBBANb4qyVgpU=
Subject key identifier:   90:0D:93:F9:A2:CE:19:33:4C:BF:9E:8E:38:86:B3:E7:82:11:8A:2A
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer:       /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number:          0A9D
Signing time:             Sun 02 Nov 2025 20:12:36 +0000
Manifest this update:     Sun 02 Nov 2025 20:12:35 +0000
Manifest next update:     Sun 09 Nov 2025 20:12:35 +0000
Files and hashes:         1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: Dpb/9jqkZo9t8yfQVI4veN6Io5F5V4EebWkKvnaUn20=)
                          2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: N4gw2f/bDc4vAICNgZt17fcv5vKiGHjdnsBTX4dpjPM=)
                          3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: aZPKGOPG+1Lf391VuMHJv72RD5TC+yEcx6KaYkumZxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Validity
            Not Before: Nov  2 20:12:35 2025 GMT
            Not After : Nov  9 20:12:35 2025 GMT
        Subject: CN=6907bb34-0a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:db:76:9b:9d:56:bb:76:47:8f:40:6e:1f:
                    c3:c7:06:f9:85:bb:92:de:23:5b:bb:76:94:69:e8:
                    8f:85:c1:4c:00:d9:41:d6:9f:0a:e7:a2:4c:2b:e2:
                    8b:20:50:a3:c9:d9:bf:af:ba:56:79:8f:39:5a:63:
                    2f:df:cf:5d:36:96:14:bc:01:1c:fe:88:7b:fa:96:
                    d2:fd:a7:2e:79:31:23:ea:84:8b:78:80:05:f7:51:
                    a3:2c:23:b5:47:bd:d1:3e:c3:01:cd:81:df:45:f2:
                    56:42:f6:1b:98:ea:03:fe:27:e5:2c:ae:9a:ce:fc:
                    dd:41:7e:0f:1d:ab:b3:95:15:b0:3c:d7:d0:c2:7d:
                    ee:cb:d6:a0:74:9a:23:ce:ac:54:e0:15:05:5f:3e:
                    2e:f7:7e:60:ec:73:79:04:1f:a6:72:0e:93:c0:54:
                    20:79:bb:8f:17:a3:14:8d:f1:b3:b3:d9:5e:ec:d9:
                    f7:7d:15:47:ad:5b:06:d3:95:64:ce:90:d9:d6:63:
                    4c:8a:b9:d1:af:bc:e7:13:2d:ab:9f:03:0d:b1:a7:
                    89:16:c4:8e:61:68:00:5f:19:a0:31:2a:44:19:b9:
                    41:5b:6e:ff:8c:ee:0a:40:b4:46:49:12:67:71:11:
                    4a:92:a5:63:f1:ab:a4:63:51:c7:75:80:18:a7:e3:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:93:F9:A2:CE:19:33:4C:BF:9E:8E:38:86:B3:E7:82:11:8A:2A
            X509v3 Authority Key Identifier:
                keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:18:28:0c:29:52:af:0b:2b:95:8d:3d:f8:eb:39:08:7d:95:
         0b:ff:7c:9d:a5:f1:91:6f:c8:28:1d:f6:f7:44:b4:7f:9d:b4:
         6b:97:21:96:b4:a6:12:81:f4:4e:7d:85:1f:2a:14:8a:db:c4:
         72:7a:4e:ec:37:e4:1e:ea:e5:35:4c:18:47:6a:b0:56:25:ed:
         93:94:02:c9:cf:be:4e:1e:14:c7:1f:fd:b7:a6:5a:37:57:8b:
         eb:f4:37:f3:a0:f1:50:95:1b:3d:ed:05:b7:a2:72:2d:7a:f6:
         2b:bb:3b:f8:49:50:03:19:ff:73:78:82:df:9c:47:49:65:c9:
         87:86:5f:92:f0:04:0c:a4:b8:47:29:66:3e:fe:70:7c:c6:42:
         94:29:8e:86:47:20:a5:22:25:46:9c:02:fe:a8:fb:9f:7d:ef:
         50:c1:ee:87:ef:c7:a0:d8:73:7b:e5:b7:23:bd:74:f7:da:37:
         be:f0:1e:03:bc:5c:cf:6d:bd:64:87:a4:bd:1b:99:21:72:8c:
         0c:7e:70:d0:2c:04:1b:e1:de:7a:c5:4c:07:3a:12:21:e5:04:
         ca:c8:a5:98:bb:80:86:0e:6d:ec:52:4e:14:6d:35:90:d6:7c:
         20:71:93:56:16:c7:0e:6a:ef:86:ec:0c:60:39:8a:0c:65:b5:
         a3:1d:c8:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
N0I2ODExMC8GA1UEBRMoOUI1QTUzNjVEQTJCMjVGQTY5OEI3MDMwOTNDRkJEQzJB
MkMyM0ZDRjAeFw0yNTExMDIyMDEyMzVaFw0yNTExMDkyMDEyMzVaMBgxFjAUBgNV
BAMTDTY5MDdiYjM0LTBhMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYRtt2m51Wu3ZHj0BuH8PHBvmFu5LeI1u7dpRp6I+FwUwA2UHWnwrnokwr4osg
UKPJ2b+vulZ5jzlaYy/fz102lhS8ARz+iHv6ltL9py55MSPqhIt4gAX3UaMsI7VH
vdE+wwHNgd9F8lZC9huY6gP+J+UsrprO/N1Bfg8dq7OVFbA819DCfe7L1qB0miPO
rFTgFQVfPi73fmDsc3kEH6ZyDpPAVCB5u48XoxSN8bOz2V7s2fd9FUetWwbTlWTO
kNnWY0yKudGvvOcTLaufAw2xp4kWxI5haABfGaAxKkQZuUFbbv+M7gpAtEZJEmdx
EUqSpWPxq6RjUcd1gBin4+JfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkA2T+aLO
GTNMv56OOIaz54IRiiowHwYDVR0jBBgwFoAUm1pTZdorJfppi3Awk8+9wqLCP88w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB
NTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbTFwVFpkb3JKZnBwaTNBd2s4LTl3cUxDUDg4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3
QjY4LzUzQTdCOTJDQjBBNTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZw
cGkzQXdrOC05d3FMQ1A4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHQYKAwpUq8LK5WNPfjrOQh9lQv/fJ2l8ZFvyCgd9vdEtH+dtGuXIZa0
phKB9E59hR8qFIrbxHJ6Tuw35B7q5TVMGEdqsFYl7ZOUAsnPvk4eFMcf/bemWjdX
i+v0N/Og8VCVGz3tBbeici169iu7O/hJUAMZ/3N4gt+cR0llyYeGX5LwBAykuEcp
Zj7+cHzGQpQpjoZHIKUiJUacAv6o+59971DB7ofvx6DYc3vltyO9dPfaN77wHgO8
XM9tvWSHpL0bmSFyjAx+cNAsBBvh3nrFTAc6EiHlBMrIpZi7gIYObexSThRtNZDW
fCBxk1YWxw5q74bsDGA5igxltaMdyF0=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:11 2025 by rpki-client