Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File:                     vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier:          cH+B7CBe5+cpLjilCyS82nVW5lRgAzlcGgLLOZsTIO8=
Subject key identifier:   DC:CB:ED:BA:DF:AF:60:B1:22:B9:70:D4:5F:30:E5:46:8B:80:8F:27
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number:          23
Signing time:             Tue 04 Nov 2025 19:45:25 +0000
Manifest this update:     Tue 04 Nov 2025 19:45:24 +0000
Manifest next update:     Tue 11 Nov 2025 19:45:24 +0000
Files and hashes:         1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: 8Pr9S/fwvSeKwK+FttmpAVJjKASqsBUjkmdmOsN0Nd8=)
                          2: C7990BE8AFF411F0B040B258C4F9AE02.roa (hash: Wq3EKlnp72r4x00pZr4LkZ0amG0X3r7k+6EpCz110VM=)
                          3: 8AE1E18AAB3411F085D6B647C4F9AE02.roa (hash: qdsQCthBC52kL8uja5Ku+St+cMj/pRlfbfhDj8D1oMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Nov  4 19:45:24 2025 GMT
            Not After : Nov 11 19:45:24 2025 GMT
        Subject: CN=690a57d5-792a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:e1:90:88:79:47:fe:b2:d8:a3:48:77:c7:
                    30:84:c5:3c:bb:d2:fe:94:8c:41:c6:97:ed:f9:38:
                    b4:bb:39:1f:38:28:cc:d1:bf:48:0e:63:8c:69:2a:
                    83:f4:25:c1:d5:14:8c:12:2e:4c:c1:95:30:52:eb:
                    90:d5:b1:68:ce:50:65:04:4f:88:6a:fa:0a:b3:df:
                    c2:8d:cb:92:a2:e2:e6:67:73:46:8d:53:a2:d7:92:
                    0d:85:be:60:8e:81:48:f0:e9:ac:27:f6:98:15:3b:
                    a8:40:3a:0e:24:ce:44:53:55:d6:ff:3b:93:e2:f5:
                    ed:98:57:10:a0:6a:56:0d:d3:87:d2:9d:e5:45:cc:
                    17:f1:af:86:0b:17:a4:cf:ca:b6:a5:c1:e6:6c:dd:
                    4b:54:ca:c6:77:82:9d:a1:f0:67:df:91:d9:8f:a2:
                    e4:c5:18:cb:63:4b:c0:20:da:c2:14:ba:b5:a6:23:
                    9e:98:eb:c4:c4:69:35:71:1c:42:b1:9e:fd:3e:5a:
                    69:af:b4:92:88:23:9f:c7:9e:63:74:ff:49:fb:3d:
                    a2:11:90:44:80:0a:ca:fa:d6:8c:ff:ed:9d:f3:83:
                    49:e7:c0:3e:d2:cb:7d:e0:a6:23:ba:bf:ca:ad:f2:
                    8e:90:c3:6b:ae:01:80:51:3e:9e:fd:3f:b3:d5:cb:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:ED:BA:DF:AF:60:B1:22:B9:70:D4:5F:30:E5:46:8B:80:8F:27
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:06:f1:af:15:0d:09:13:de:e6:6c:c7:99:32:2e:36:25:
         36:43:64:96:51:96:2d:bf:92:44:68:fb:e3:20:7a:1d:90:ee:
         2a:7b:e4:49:f3:48:5c:87:95:7b:43:56:cd:ac:08:75:c1:8f:
         dc:9a:30:e1:79:43:ad:6d:22:73:14:09:60:0d:3c:2b:9b:34:
         d4:fa:6f:57:e6:a9:c0:71:d1:ea:6d:35:62:9c:ed:34:1d:59:
         54:50:04:bc:e4:65:56:e9:6c:17:2d:bc:a3:fa:b1:0d:11:85:
         f7:a6:a3:a1:97:15:a0:24:ab:04:7b:31:cf:80:03:ee:a8:c5:
         d2:d3:27:b3:5d:0c:5f:88:52:a1:51:d6:30:80:1e:06:58:83:
         fb:4f:12:4e:87:85:65:e7:b8:0d:a8:a2:fe:cb:25:32:30:64:
         94:00:c9:17:d7:92:db:fc:3c:f8:ef:01:db:22:fa:d2:fc:02:
         20:2f:f6:ff:df:3d:c9:fa:db:c0:2b:33:3c:af:bc:7f:e4:24:
         44:98:e4:45:4b:d4:ae:ff:0b:a6:b3:3e:bb:38:34:d8:44:14:
         e4:46:c8:bf:65:02:05:50:da:5a:63:a6:36:cf:23:bf:f4:09:
         c6:ea:20:45:7a:13:f9:75:19:b1:4d:91:36:ef:21:3a:b8:bc:
         31:78:52:8f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDBCMjExMC8GA1UEBRMoQkM0MjE4OEE0OEE3QTk5Rjk2RDZBRkIyMDExRTdEQzlE
RUVFMjJBNTAeFw0yNTExMDQxOTQ1MjRaFw0yNTExMTExOTQ1MjRaMBgxFjAUBgNV
BAMTDTY5MGE1N2Q1LTc5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCccOGQiHlH/rLYo0h3xzCExTy70v6UjEHGl+35OLS7OR84KMzRv0gOY4xpKoP0
JcHVFIwSLkzBlTBS65DVsWjOUGUET4hq+gqz38KNy5Ki4uZnc0aNU6LXkg2FvmCO
gUjw6awn9pgVO6hAOg4kzkRTVdb/O5Pi9e2YVxCgalYN04fSneVFzBfxr4YLF6TP
yralweZs3UtUysZ3gp2h8GffkdmPouTFGMtjS8Ag2sIUurWmI56Y68TEaTVxHEKx
nv0+WmmvtJKII5/HnmN0/0n7PaIRkESACsr61oz/7Z3zg0nnwD7Sy33gpiO6v8qt
8o6Qw2uuAYBRPp79P7PVy6F9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3Mvtut+v
YLEiuXDUXzDlRouAjycwHwYDVR0jBBgwFoAUvEIYikinqZ+W1q+yAR59yd7uIqUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwMEIyLzcyMUYzQzlDQTYx
QjExRjBBQzk5NTgzM0M0RjlBRTAyL3ZFSVlpa2lucVotVzFxLXlBUjU5eWQ3dUlx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdkVJWWlraW5xWi1XMXEteUFSNTl5ZDd1SXFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw
MEIyLzcyMUYzQzlDQTYxQjExRjBBQzk5NTgzM0M0RjlBRTAyL3ZFSVlpa2lucVot
VzFxLXlBUjU5eWQ3dUlxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKxXBvGvFQ0JE97mbMeZMi42JTZDZJZRli2/kkRo++Mgeh2Q7ip75Enz
SFyHlXtDVs2sCHXBj9yaMOF5Q61tInMUCWANPCubNNT6b1fmqcBx0eptNWKc7TQd
WVRQBLzkZVbpbBctvKP6sQ0Rhfemo6GXFaAkqwR7Mc+AA+6oxdLTJ7NdDF+IUqFR
1jCAHgZYg/tPEk6HhWXnuA2oov7LJTIwZJQAyRfXktv8PPjvAdsi+tL8AiAv9v/f
Pcn628ArMzyvvH/kJESY5EVL1K7/C6azPrs4NNhEFORGyL9lAgVQ2lpjpjbPI7/0
CcbqIEV6E/l1GbFNkTbvITq4vDF4Uo8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:26:44 2025 by rpki-client