Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File:                     Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier:          H+x148pVy6BhwjcitVFpJbpoXCLNqn8WLR6wHNfOC4I=
Subject key identifier:   DE:9C:2A:34:E3:49:18:FB:A7:6B:6D:23:32:E5:56:03:A0:93:A1:5B
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer:       /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial:       0504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number:          04D7
Signing time:             Sun 02 Nov 2025 23:55:21 +0000
Manifest this update:     Sun 02 Nov 2025 23:55:21 +0000
Manifest next update:     Sun 09 Nov 2025 23:55:21 +0000
Files and hashes:         1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: p3HLv/D3EolP1OCq5b/1DMvZzaE/WgJjPEd8Yp6/BZc=)
                          2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=)
                          3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: jhSTY2DYnMEsMBx0x/zPRVJM0gPx3FVGm0Ptw4y3rcw=)
                          4: 213E93FE8E0B11F088E57287C4F9AE02.roa (hash: XvQlmCL/lUe7ZYDky8HxuV3wqFx2+yxYoZ/we9Jj4bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
        Validity
            Not Before: Nov  2 23:55:21 2025 GMT
            Not After : Nov  9 23:55:21 2025 GMT
        Subject: CN=6907ef69-8f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:28:71:ca:d1:a7:3e:69:dc:bc:d8:af:0f:
                    03:13:5d:fc:14:29:cd:f7:b3:44:41:dc:bc:3a:c6:
                    73:6c:e8:c4:89:72:a0:16:07:1d:10:5a:17:5f:c7:
                    bb:2e:1b:72:1e:73:e2:41:b1:72:62:fe:40:44:92:
                    67:e3:68:e8:9b:c4:29:82:6d:d6:2b:85:7c:e7:83:
                    b2:2d:b1:94:ca:5c:3d:6e:df:41:e0:0c:9d:b2:9f:
                    23:a0:9a:10:18:5c:25:db:5c:2a:7b:62:1b:bc:95:
                    b7:8b:da:b7:a8:6e:25:1a:88:06:3a:8f:b8:24:b5:
                    9b:4e:0f:dd:75:c9:9c:ce:f1:8d:66:89:ae:aa:27:
                    7a:aa:57:50:66:1d:b8:9c:25:84:a7:f2:58:c7:fc:
                    4e:a3:2a:f6:85:ce:c4:06:d9:ae:44:40:67:e4:49:
                    71:8e:bc:6c:1d:3b:d3:19:a6:db:13:3e:b6:a1:b9:
                    9d:bf:5c:0b:06:08:22:cd:16:90:eb:28:b5:b8:19:
                    79:89:15:7c:2e:c6:80:d9:f6:42:87:3d:13:15:96:
                    26:da:14:ed:8d:34:5b:18:b6:32:74:d9:6c:54:9c:
                    70:4a:b7:95:9f:db:57:31:ae:f7:f2:f1:d7:72:60:
                    14:10:0a:cd:49:11:16:7d:06:bc:8b:9b:ce:b0:60:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9C:2A:34:E3:49:18:FB:A7:6B:6D:23:32:E5:56:03:A0:93:A1:5B
            X509v3 Authority Key Identifier:
                keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5b:76:38:9a:fa:b0:7e:8e:25:45:69:6c:e3:ac:43:d7:11:
         dc:3c:41:bc:e8:a5:47:66:a3:bc:93:aa:3d:6b:cd:9f:c3:f6:
         cd:a3:9b:1e:ec:57:af:5e:91:99:ee:f9:58:71:7c:ee:9b:20:
         27:df:83:a0:de:e6:28:ab:f8:84:5b:8b:e3:cb:0a:c9:ad:9c:
         0b:47:c2:b2:a6:3b:80:3f:73:af:06:c4:3e:fa:12:b3:8c:85:
         40:d5:7e:98:28:45:b0:ad:0a:14:82:c8:4d:bd:44:9b:fe:2c:
         6a:a0:73:4d:d2:fa:41:0a:77:78:b8:44:8b:af:f7:16:08:8e:
         c6:9c:14:2e:6b:24:7b:42:46:81:e8:13:2f:59:d0:11:3f:05:
         66:a1:78:34:7b:39:a7:de:06:94:4a:e6:1b:23:1e:ab:35:64:
         53:69:b8:df:33:3e:79:f8:8b:e7:d8:cf:53:04:bb:c0:28:bd:
         13:bd:e5:2c:0e:7b:87:eb:ce:c0:7f:01:17:cc:6f:39:a9:5f:
         f1:26:49:03:c7:a4:79:f0:42:71:f6:33:58:b0:43:63:c6:9e:
         1d:d2:10:58:6a:eb:76:b9:cf:9f:1c:70:2e:7f:e0:ed:19:2d:
         a9:98:e2:16:fb:73:5a:66:55:32:68:ad:cb:7b:b3:c2:09:41:
         76:76:4d:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz
QzMwNzU4NDUwHhcNMjUxMTAyMjM1NTIxWhcNMjUxMTA5MjM1NTIxWjAYMRYwFAYD
VQQDEw02OTA3ZWY2OS04ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxUoccrRpz5p3LzYrw8DE138FCnN97NEQdy8OsZzbOjEiXKgFgcdEFoXX8e7
LhtyHnPiQbFyYv5ARJJn42jom8Qpgm3WK4V854OyLbGUylw9bt9B4Aydsp8joJoQ
GFwl21wqe2IbvJW3i9q3qG4lGogGOo+4JLWbTg/ddcmczvGNZomuqid6qldQZh24
nCWEp/JYx/xOoyr2hc7EBtmuREBn5ElxjrxsHTvTGabbEz62obmdv1wLBggizRaQ
6yi1uBl5iRV8LsaA2fZChz0TFZYm2hTtjTRbGLYydNlsVJxwSreVn9tXMa738vHX
cmAUEArNSREWfQa8i5vOsGD9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6cKjTj
SRj7p2ttIzLlVgOgk6FbMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy
NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r
cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiW3Y4mvqwfo4lRWls46xD1xHcPEG86KVHZqO8k6o9a82fw/bNo5se
7FevXpGZ7vlYcXzumyAn34Og3uYoq/iEW4vjywrJrZwLR8KypjuAP3OvBsQ++hKz
jIVA1X6YKEWwrQoUgshNvUSb/ixqoHNN0vpBCnd4uESLr/cWCI7GnBQuayR7QkaB
6BMvWdARPwVmoXg0ezmn3gaUSuYbIx6rNWRTabjfMz55+Ivn2M9TBLvAKL0TveUs
DnuH687AfwEXzG85qV/xJkkDx6R58EJx9jNYsENjxp4d0hBYaut2uc+fHHAuf+Dt
GS2pmOIW+3NaZlUyaK3Le7PCCUF2dk2U
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:11:50 2025 by rpki-client