Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier:          3r9XHBTTwxCNtbRI/jqEeoXBxL0gII93fSzUsc8irb0=
Subject key identifier:   94:90:26:24:E7:01:2E:C6:E4:62:7A:AA:F3:5B:52:5B:3C:6A:81:EF
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number:          01D3
Signing time:             Wed 29 Oct 2025 02:33:35 +0000
Manifest this update:     Wed 29 Oct 2025 02:33:34 +0000
Manifest next update:     Wed 05 Nov 2025 02:33:34 +0000
Files and hashes:         1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: 4XjKmBMKYIYzZ8kpM/B306vnJCCAQ+PjP5oGEADiLSI=)
                          2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: oCS3tdZ6gguGFimJ8+AyVEXE/8R/Gcn35NJsKRSfeUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 02:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: Oct 29 02:33:34 2025 GMT
            Not After : Nov  5 02:33:34 2025 GMT
        Subject: CN=69017cff-da15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:1c:47:c5:69:50:17:75:29:a7:66:c2:bd:
                    eb:ad:03:62:50:89:8d:83:17:0e:c6:12:22:1b:68:
                    da:0d:95:6f:73:da:0e:43:4e:06:7e:50:df:b3:22:
                    e7:d8:bc:e3:5a:e0:5c:04:7f:cc:75:b8:4b:0d:41:
                    08:ab:be:2f:8f:cc:b6:fb:3b:55:d6:45:bc:9b:3d:
                    57:68:65:0e:19:a3:8d:b6:50:9b:46:4d:93:4c:79:
                    2d:da:f2:34:7e:61:32:fd:58:9a:83:90:04:3e:91:
                    2b:eb:f3:bf:2e:5a:23:dc:f3:e5:58:e2:f6:6b:91:
                    b6:ab:f9:05:d2:43:8f:8f:5a:d1:c1:fc:c9:2a:ee:
                    95:ce:4f:bc:13:9c:34:ec:e8:a3:ab:32:19:18:04:
                    30:2a:34:b0:f5:dc:22:07:7a:9b:05:0e:b2:2c:9b:
                    90:78:a1:3c:b4:b3:be:2e:c0:28:67:a8:a6:8b:49:
                    5a:1c:13:84:df:92:1e:9e:f4:fa:33:84:41:02:1e:
                    d6:f8:14:22:00:5c:ea:03:b5:5b:40:d0:20:01:5e:
                    77:d9:a4:fb:3c:a9:aa:2e:f4:8d:ec:cc:aa:b5:03:
                    25:24:be:cc:08:6f:07:0e:b2:0b:7d:31:ef:5e:2b:
                    61:f4:f7:75:88:1b:4b:af:6f:1a:64:14:4f:d6:1a:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:90:26:24:E7:01:2E:C6:E4:62:7A:AA:F3:5B:52:5B:3C:6A:81:EF
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:97:28:05:28:6d:e6:ab:f4:95:b3:56:9b:91:28:c3:38:61:
         4e:ee:d4:db:63:11:50:d8:17:d9:24:f3:31:03:45:06:8b:71:
         a3:5f:5d:48:da:ab:99:80:d8:68:a2:97:3f:92:7c:8f:dc:a6:
         52:57:27:af:96:be:d5:a1:7e:b0:a8:ef:e6:1c:84:ab:85:fe:
         dd:f0:99:56:bb:2d:6c:12:a8:0b:43:e1:77:02:97:73:03:49:
         f3:3a:83:74:4f:af:43:e2:6b:e8:bd:b8:35:60:3a:96:2b:da:
         55:ab:6a:71:a5:87:44:c3:12:72:3b:30:65:fa:5f:e1:77:c9:
         c5:fe:e7:0a:52:f5:32:26:1d:3c:1d:98:cd:bb:2e:68:e5:e1:
         88:d5:6a:4f:82:44:21:13:d3:61:fb:00:ea:49:62:8c:45:42:
         1a:3e:ae:5d:a1:65:4c:00:cc:33:93:aa:e6:10:90:3a:0e:6e:
         66:4f:06:72:4e:b4:31:bb:be:d4:b1:88:fe:98:b6:a9:2e:fd:
         c7:b5:46:cc:c0:23:54:54:55:b3:85:3d:68:11:92:e6:da:12:
         d3:98:6a:ee:c5:32:88:01:9b:33:64:33:cb:71:3b:da:9e:3b:
         c0:4a:eb:a4:16:af:af:84:0c:41:ed:05:8b:bd:fe:88:37:99:
         d6:db:e2:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4RjAzQjlBRTY0
MTlCRjc0MTUwHhcNMjUxMDI5MDIzMzM0WhcNMjUxMTA1MDIzMzM0WjAYMRYwFAYD
VQQDEw02OTAxN2NmZi1kYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA29gcR8VpUBd1Kadmwr3rrQNiUImNgxcOxhIiG2jaDZVvc9oOQ04GflDfsyLn
2LzjWuBcBH/MdbhLDUEIq74vj8y2+ztV1kW8mz1XaGUOGaONtlCbRk2TTHkt2vI0
fmEy/Viag5AEPpEr6/O/Lloj3PPlWOL2a5G2q/kF0kOPj1rRwfzJKu6Vzk+8E5w0
7OijqzIZGAQwKjSw9dwiB3qbBQ6yLJuQeKE8tLO+LsAoZ6imi0laHBOE35IenvT6
M4RBAh7W+BQiAFzqA7VbQNAgAV532aT7PKmqLvSN7MyqtQMlJL7MCG8HDrILfTHv
Xith9Pd1iBtLr28aZBRP1hoypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSQJiTn
AS7G5GJ6qvNbUls8aoHvMB8GA1UdIwQYMBaAFDNRL5xnbDCeNfNVjwO5rmQZv3QV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2My84RjAyMUY4OEU5
QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01KNDE4MVdQQTdtdVpCbV9k
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00xRXZuR2RzTUo0MTgxV1BBN211WkJtX2RCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Qjc2My84RjAyMUY4OEU5QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01K
NDE4MVdQQTdtdVpCbV9kQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWlygFKG3mq/SVs1abkSjDOGFO7tTbYxFQ2BfZJPMxA0UGi3GjX11I
2quZgNhoopc/knyP3KZSVyevlr7VoX6wqO/mHISrhf7d8JlWuy1sEqgLQ+F3Apdz
A0nzOoN0T69D4mvovbg1YDqWK9pVq2pxpYdEwxJyOzBl+l/hd8nF/ucKUvUyJh08
HZjNuy5o5eGI1WpPgkQhE9Nh+wDqSWKMRUIaPq5doWVMAMwzk6rmEJA6Dm5mTwZy
TrQxu77UsYj+mLapLv3HtUbMwCNUVFWzhT1oEZLm2hLTmGruxTKIAZszZDPLcTva
njvASuukFq+vhAxB7QWLvf6IN5nW2+Jg
-----END CERTIFICATE-----
Generated at Thu Oct 30 17:34:12 2025 by rpki-client