Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          u1o5EDfbpjTyHh+iovraJnnDHF7NvlPw/6+wxUHza4w=
Subject key identifier:   AF:3B:FA:A4:48:42:55:68:EB:D4:38:F0:44:91:BA:D1:2E:1C:E6:16
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       06CA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          06B8
Signing time:             Wed 22 Oct 2025 23:05:46 +0000
Manifest this update:     Wed 22 Oct 2025 23:05:45 +0000
Manifest next update:     Wed 29 Oct 2025 23:05:45 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: C6kDBWk/mggtIyCyFbazyE8Rj/Wq7eEaRnXQ+k1Ou10=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 23:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Oct 22 23:05:45 2025 GMT
            Not After : Oct 29 23:05:45 2025 GMT
        Subject: CN=68f9634a-bebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:3b:75:9f:f4:51:e6:d6:e1:3f:fd:68:73:
                    a4:21:85:dd:82:dc:4a:63:fc:e3:48:a9:04:8d:1c:
                    66:42:12:51:2c:b5:fe:2e:cd:88:f8:93:af:e6:39:
                    45:06:07:bd:07:17:78:de:8e:52:5b:a3:c9:47:b8:
                    eb:a6:6a:e4:a6:18:a6:59:d0:7e:89:57:cf:39:d6:
                    98:28:dd:8f:cd:46:da:97:71:a1:dd:c5:b3:3f:39:
                    2c:21:a3:37:de:c1:5c:10:69:a2:d2:7b:b2:85:23:
                    5b:c0:04:85:c8:5e:d0:8b:46:85:6d:fc:20:42:24:
                    b6:df:5c:70:1b:c7:63:f6:83:30:12:a5:c9:0e:93:
                    b5:c9:a6:fb:e2:3f:1a:10:b3:bd:fe:b1:13:a9:d4:
                    d3:ad:c8:53:a2:ff:94:dd:86:d4:f9:1c:b1:a6:93:
                    a5:33:33:e7:34:26:ca:e3:44:72:c2:07:6a:5c:8b:
                    d7:c2:5e:e1:14:42:c5:4a:e3:2d:67:af:2c:c9:b2:
                    3a:8f:07:74:2a:6c:fc:c1:d8:28:96:2f:30:e9:9e:
                    3e:a3:36:3b:1b:7b:12:de:8d:26:b3:59:0d:36:8d:
                    44:ca:62:ef:d0:cd:40:35:7e:75:aa:1e:4f:30:23:
                    28:03:32:3d:c0:36:29:61:73:dc:bf:db:2d:44:54:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:FA:A4:48:42:55:68:EB:D4:38:F0:44:91:BA:D1:2E:1C:E6:16
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:34:3d:d4:b1:28:e0:4e:ba:c2:d1:dd:ba:2a:3e:31:22:
         d7:13:f7:ec:27:81:0d:76:48:b8:66:ea:99:8b:e8:0a:60:fb:
         a1:06:c2:50:7c:97:41:e0:84:6d:df:8d:7a:59:32:98:e3:35:
         ed:06:3d:aa:13:ec:e3:67:8f:18:76:0f:d0:77:02:83:60:19:
         a6:a4:ea:de:23:d1:4b:75:cd:cb:47:97:67:22:56:1b:58:66:
         5d:8e:54:7e:0f:76:d4:61:14:dc:81:06:9f:76:3e:90:27:17:
         79:64:2e:65:63:2a:9a:9e:62:a1:01:56:88:d4:17:a4:12:19:
         14:6d:b2:17:1e:95:e5:0b:02:63:09:79:fc:27:ea:0d:13:2d:
         e2:da:9c:0d:57:54:19:eb:c9:59:58:77:a6:b0:f3:c3:7d:47:
         e4:88:07:53:02:e6:bd:b7:d1:27:9c:d8:41:38:25:7b:83:df:
         a4:c9:81:18:b1:df:f7:95:63:17:ae:f8:c3:0c:be:2a:7d:07:
         4e:e2:c7:21:b8:1e:e7:1d:a8:4d:77:c2:a5:ed:34:21:a4:4b:
         75:fc:94:41:dd:0b:7b:d4:2a:d0:6e:4c:e2:c7:ba:fc:39:cb:
         a6:b7:71:3b:11:69:bb:7c:4d:5b:ba:5a:07:e3:40:bd:e8:89:
         85:fe:8a:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC
NUE4QkJBNzIwHhcNMjUxMDIyMjMwNTQ1WhcNMjUxMDI5MjMwNTQ1WjAYMRYwFAYD
VQQDEw02OGY5NjM0YS1iZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoaU7dZ/0UebW4T/9aHOkIYXdgtxKY/zjSKkEjRxmQhJRLLX+Ls2I+JOv5jlF
Bge9Bxd43o5SW6PJR7jrpmrkphimWdB+iVfPOdaYKN2PzUbal3Gh3cWzPzksIaM3
3sFcEGmi0nuyhSNbwASFyF7Qi0aFbfwgQiS231xwG8dj9oMwEqXJDpO1yab74j8a
ELO9/rETqdTTrchTov+U3YbU+RyxppOlMzPnNCbK40RywgdqXIvXwl7hFELFSuMt
Z68sybI6jwd0Kmz8wdgoli8w6Z4+ozY7G3sS3o0ms1kNNo1EymLv0M1ANX51qh5P
MCMoAzI9wDYpYXPcv9stRFSajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK87+qRI
QlVo69Q48ESRutEuHOYWMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5
UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeJzQ91LEo4E66wtHduio+MSLXE/fsJ4ENdki4ZuqZi+gKYPuhBsJQ
fJdB4IRt3416WTKY4zXtBj2qE+zjZ48Ydg/QdwKDYBmmpOreI9FLdc3LR5dnIlYb
WGZdjlR+D3bUYRTcgQafdj6QJxd5ZC5lYyqanmKhAVaI1BekEhkUbbIXHpXlCwJj
CXn8J+oNEy3i2pwNV1QZ68lZWHemsPPDfUfkiAdTAua9t9EnnNhBOCV7g9+kyYEY
sd/3lWMXrvjDDL4qfQdO4schuB7nHahNd8Kl7TQhpEt1/JRB3Qt71CrQbkzix7r8
Ocumt3E7EWm7fE1buloH40C96ImF/oo9
-----END CERTIFICATE-----
Generated at Fri Oct 24 18:08:10 2025 by rpki-client