Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File:                     Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier:          EqjJrAqdasAvUtG0tCKYeeRI1RH9/Zu6SURwlk9u0pc=
Subject key identifier:   04:06:56:EB:84:F2:C3:BA:88:EA:6D:83:3A:89:6E:81:2F:54:DB:2F
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       05F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number:          05D9
Signing time:             Sun 02 Nov 2025 22:59:31 +0000
Manifest this update:     Sun 02 Nov 2025 22:59:30 +0000
Manifest next update:     Sun 09 Nov 2025 22:59:30 +0000
Files and hashes:         1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: phcTYSGAROI49ZtmeaT9lIjY7QjbN6oLXqGJMcyMWsA=)
                          2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: uAy+EH0oOVAkqikgbCloC8mmcK5Ft+q4cyTNy5UrDyI=)
                          3: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: NE5i1McZ5sD2fL9nEgN8GNUMBNGpPRPBv7rzXqPRphw=)
                          4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: SlHb/v+sm7TxxztSTjArtTh8kIfdevbbO+wHjL8M2no=)
                          5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: X0T8ND86WJAL5iAS0HvTaodSJ+abJbUeYiv8L6Sgq7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Nov  2 22:59:30 2025 GMT
            Not After : Nov  9 22:59:30 2025 GMT
        Subject: CN=6907e253-6d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:19:47:44:38:82:84:de:f8:23:a8:d5:59:
                    b7:47:d8:ba:6d:ef:64:19:70:e6:44:e0:5c:3f:9d:
                    63:30:86:72:c2:81:76:c0:74:0f:3f:87:39:3c:d9:
                    e3:9e:d9:19:b6:86:05:06:f2:5e:3a:2a:66:91:87:
                    29:c7:2d:f1:74:85:73:3a:3d:10:d8:79:89:62:f8:
                    ef:3a:46:14:09:51:43:b9:12:85:d6:aa:f9:02:fb:
                    00:e4:72:14:3e:5f:91:d8:ed:10:90:24:60:2f:98:
                    8e:4a:d5:5f:ca:46:d8:a3:d2:37:77:c5:0f:e2:42:
                    a8:a2:f8:93:8e:9c:9b:71:c7:d4:bf:ae:e7:aa:31:
                    be:73:f5:97:6d:29:5c:f8:84:a8:70:bb:8e:12:80:
                    4c:68:b6:d8:53:01:e5:65:77:0e:4c:e3:84:f9:2f:
                    2f:25:fd:b8:11:f6:7f:90:59:12:53:1c:29:4e:74:
                    b9:1a:00:1d:26:27:ef:a8:70:10:33:3e:aa:c8:ac:
                    e7:08:09:7a:12:83:95:46:de:7d:56:e3:76:5b:3c:
                    02:77:d3:dc:6a:4a:5a:7a:bf:1e:f7:88:a8:cf:ef:
                    ff:02:73:f0:30:7d:20:c7:6a:f1:2d:96:b4:f8:71:
                    31:dc:35:29:a8:e9:80:0a:e1:cd:73:5f:ec:fb:a8:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:56:EB:84:F2:C3:BA:88:EA:6D:83:3A:89:6E:81:2F:54:DB:2F
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:94:1a:65:2c:84:f3:6f:03:96:82:95:ac:a0:cf:66:05:
         12:6c:46:4a:4f:42:0d:1e:e9:1a:c4:5a:63:cc:44:1e:8c:d4:
         be:2c:10:1a:88:ce:be:db:85:7d:e4:c3:28:1a:54:3c:e0:34:
         9d:38:2b:8b:6f:2e:09:10:bd:60:2b:07:9f:ee:82:c4:a8:27:
         b2:e2:3e:0f:19:21:a2:61:ca:28:4b:b2:ab:87:ec:26:b7:5b:
         2b:b9:de:3a:fa:4e:8a:06:a9:88:7c:d3:a6:58:90:77:08:e7:
         0f:b6:20:4a:56:9b:67:f5:4c:7a:d3:b6:87:32:3b:85:f9:33:
         f9:47:07:18:86:41:53:e2:5a:64:55:b1:c7:3c:eb:9a:5e:56:
         51:15:18:45:ee:e2:e5:0a:89:0d:52:80:27:6b:81:ca:74:8d:
         e9:79:b6:98:57:27:c4:f0:b3:dd:97:51:fa:ed:82:14:17:f8:
         15:de:aa:d2:82:ba:37:5b:9c:01:7b:c5:bb:00:21:6a:88:a4:
         ec:eb:66:3b:46:0d:85:6b:27:fc:aa:fe:1d:22:d5:67:28:7a:
         24:0a:38:59:5f:14:42:16:a5:25:d7:22:95:fc:cd:ff:54:a9:
         f9:cd:d7:98:da:56:8a:4d:dd:68:c6:31:6d:e9:4e:69:f7:01:
         e2:cc:34:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF
RTVBMDFDQkYwHhcNMjUxMTAyMjI1OTMwWhcNMjUxMTA5MjI1OTMwWjAYMRYwFAYD
VQQDEw02OTA3ZTI1My02ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWoZR0Q4goTe+COo1Vm3R9i6be9kGXDmROBcP51jMIZywoF2wHQPP4c5PNnj
ntkZtoYFBvJeOipmkYcpxy3xdIVzOj0Q2HmJYvjvOkYUCVFDuRKF1qr5AvsA5HIU
Pl+R2O0QkCRgL5iOStVfykbYo9I3d8UP4kKooviTjpybccfUv67nqjG+c/WXbSlc
+ISocLuOEoBMaLbYUwHlZXcOTOOE+S8vJf24EfZ/kFkSUxwpTnS5GgAdJifvqHAQ
Mz6qyKznCAl6EoOVRt59VuN2WzwCd9Pcakpaer8e94ioz+//AnPwMH0gx2rxLZa0
+HEx3DUpqOmACuHNc1/s+6jCVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQGVuuE
8sO6iOptgzqJboEvVNsvMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3
RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0U1NC9CRjlGQ0FGMEQ3RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tF
Q3JVbW9VSzExNzN1V2dITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4oZQaZSyE828DloKVrKDPZgUSbEZKT0INHukaxFpjzEQejNS+LBAa
iM6+24V95MMoGlQ84DSdOCuLby4JEL1gKwef7oLEqCey4j4PGSGiYcooS7Krh+wm
t1srud46+k6KBqmIfNOmWJB3COcPtiBKVptn9Ux607aHMjuF+TP5RwcYhkFT4lpk
VbHHPOuaXlZRFRhF7uLlCokNUoAna4HKdI3pebaYVyfE8LPdl1H67YIUF/gV3qrS
gro3W5wBe8W7ACFqiKTs62Y7Rg2Fayf8qv4dItVnKHokCjhZXxRCFqUl1yKV/M3/
VKn5zdeY2laKTd1oxjFt6U5p9wHizDRf
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:20 2025 by rpki-client