Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          C2ASNlVwdW4VyjRe46zQJa0pvV9FOmj91v6FoYe6Khc=
Subject key identifier:   93:15:98:0D:96:89:D5:26:E9:B2:F7:EA:AC:D2:1A:91:F4:9A:15:62
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          055F
Signing time:             Thu 06 Nov 2025 15:58:59 +0000
Manifest this update:     Thu 06 Nov 2025 15:58:59 +0000
Manifest next update:     Thu 13 Nov 2025 15:58:59 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: RLxXNUjHJsOLUdsJy12nSzaK1JLbBpUlf/nOawRw9tU=)
                          2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: gNw6+2AtUDlZqQnfDSX/fakH8OEL/fzgw5/WC6J/FXA=)
                          3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: olSuTXg4z8rAQVRr4bLY3JWSgH6wfZWF5NWyI+YF42Y=)
                          4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: PtfkQkDsmXl3jve8vW5Bkmjd/2ESa8IcHz8xM5qInPk=)
                          5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: Xh3iMK0Ak0Tx1OewwcV+5j4ibHx4h2hLFwHOLVOVBKI=)
                          6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: aNH379FQc3LoP81plPwndyeL8gm1j9vMgI0IfOPvVJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Nov 2025 15:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Nov  6 15:58:59 2025 GMT
            Not After : Nov 13 15:58:59 2025 GMT
        Subject: CN=690cc5c3-5b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:b2:1e:60:74:e1:7b:38:5d:78:87:9a:21:
                    58:09:dd:50:4c:7b:cb:2d:4c:7c:0d:61:a4:2c:64:
                    0c:a2:8a:b6:34:ee:99:f7:4c:f2:4a:e0:2a:65:4e:
                    49:07:9c:60:a4:19:60:c7:b3:24:dd:80:1a:cb:02:
                    6a:fc:84:84:2d:6b:96:4c:4c:c8:6a:05:67:ff:4c:
                    32:ee:dd:e2:de:83:f8:79:b1:ce:59:7e:d9:b1:e2:
                    e8:bd:2c:88:c1:30:13:a0:0b:8b:66:df:94:62:a5:
                    4d:53:d6:22:07:92:c9:ee:ff:ce:aa:2f:f9:de:db:
                    fb:57:6a:bd:4f:91:b3:30:e1:e7:c0:63:ea:73:c6:
                    22:40:f7:d7:1c:dd:91:40:5f:61:2b:4a:3f:7a:79:
                    52:78:99:a2:de:fb:55:52:ce:01:bd:0f:26:0a:5e:
                    aa:e4:30:45:ed:53:f0:58:50:8d:a5:5f:e4:f1:2c:
                    cd:e1:87:9b:87:66:c2:0e:a6:20:94:c8:ab:f0:70:
                    79:e4:3b:8a:c6:4b:70:85:b5:36:4d:e6:36:d3:ef:
                    eb:96:e6:d7:70:26:95:fa:25:54:3f:3e:d9:cb:a7:
                    c1:d5:a5:47:45:ef:76:bf:87:8d:4e:28:05:a0:52:
                    fc:b4:f8:a4:ce:6f:90:1e:ba:d4:a9:d1:97:41:08:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:98:0D:96:89:D5:26:E9:B2:F7:EA:AC:D2:1A:91:F4:9A:15:62
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:bf:d2:6d:a5:45:19:63:92:db:cd:4d:41:06:96:ea:f8:
         7e:97:f1:ab:87:63:2b:c0:b8:dd:32:9c:46:8e:ce:8f:fd:c1:
         88:69:f7:0f:b4:fe:12:fd:9a:85:25:ac:db:24:cb:8f:22:67:
         32:61:b7:d0:66:02:6d:bd:78:76:3d:a2:b5:e4:56:e8:b1:d9:
         21:69:45:55:1f:d4:9b:8d:0a:84:2a:c6:dc:3f:89:fe:21:1f:
         31:d4:13:94:88:01:85:10:16:1d:56:60:b1:4f:54:3c:47:ea:
         76:9f:84:d2:b8:3c:fa:8f:72:8f:bd:8c:2d:4e:93:40:b4:bc:
         57:bd:a4:d0:e6:f1:33:f0:7e:da:62:74:34:bb:74:41:80:07:
         ef:e5:2d:ac:9b:67:9d:eb:32:99:72:ef:f8:04:2f:8c:c5:c5:
         e0:94:3d:d0:cf:84:5f:e8:e0:83:3b:25:06:ec:7c:f8:8a:32:
         46:6a:17:00:fe:39:61:81:5e:68:eb:2a:38:3e:b4:41:f4:b0:
         ee:5b:0d:ad:df:aa:02:22:15:ec:2c:0f:af:e0:94:93:ac:d0:
         82:50:40:b9:ca:95:1d:a6:b6:6f:c5:9b:00:fb:7a:a6:44:81:
         62:0e:39:e2:30:bd:4d:8a:57:c2:ae:0e:e0:a6:23:22:e7:92:
         a7:a5:a3:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD
NTUwNDUzQTQwHhcNMjUxMTA2MTU1ODU5WhcNMjUxMTEzMTU1ODU5WjAYMRYwFAYD
VQQDEw02OTBjYzVjMy01YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwx2yHmB04Xs4XXiHmiFYCd1QTHvLLUx8DWGkLGQMooq2NO6Z90zySuAqZU5J
B5xgpBlgx7Mk3YAaywJq/ISELWuWTEzIagVn/0wy7t3i3oP4ebHOWX7ZseLovSyI
wTAToAuLZt+UYqVNU9YiB5LJ7v/Oqi/53tv7V2q9T5GzMOHnwGPqc8YiQPfXHN2R
QF9hK0o/enlSeJmi3vtVUs4BvQ8mCl6q5DBF7VPwWFCNpV/k8SzN4Yebh2bCDqYg
lMir8HB55DuKxktwhbU2TeY20+/rlubXcCaV+iVUPz7Zy6fB1aVHRe92v4eNTigF
oFL8tPikzm+QHrrUqdGXQQjdXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMVmA2W
idUm6bL36qzSGpH0mhViMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx
MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1
blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVsL/SbaVFGWOS281NQQaW6vh+l/Grh2MrwLjdMpxGjs6P/cGIafcP
tP4S/ZqFJazbJMuPImcyYbfQZgJtvXh2PaK15FbosdkhaUVVH9SbjQqEKsbcP4n+
IR8x1BOUiAGFEBYdVmCxT1Q8R+p2n4TSuDz6j3KPvYwtTpNAtLxXvaTQ5vEz8H7a
YnQ0u3RBgAfv5S2sm2ed6zKZcu/4BC+MxcXglD3Qz4Rf6OCDOyUG7Hz4ijJGahcA
/jlhgV5o6yo4PrRB9LDuWw2t36oCIhXsLA+v4JSTrNCCUEC5ypUdprZvxZsA+3qm
RIFiDjniML1NilfCrg7gpiMi55KnpaO2
-----END CERTIFICATE-----
Generated at Fri Nov 7 01:08:47 2025 by rpki-client