Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          KUA7639m3gZdcHbBwC7t7TPsIsDi4rhum82233ojQAg=
Subject key identifier:   99:1A:D3:96:C2:09:DD:F7:C9:26:D9:D7:45:11:38:56:75:32:CE:C4
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       03AE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          03AE
Signing time:             Tue 04 Nov 2025 20:51:03 +0000
Manifest this update:     Tue 04 Nov 2025 20:51:03 +0000
Manifest next update:     Tue 11 Nov 2025 20:51:03 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: Mn5XVX2BDXK/WUyKzNFvHdapp5ET/wLaYG0CRCedQF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: Nov  4 20:51:03 2025 GMT
            Not After : Nov 11 20:51:03 2025 GMT
        Subject: CN=690a6737-c39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:52:65:07:31:b9:49:2a:f3:58:98:a6:be:
                    59:f0:50:0a:2f:c6:ea:5c:cc:d5:7f:a9:64:46:be:
                    2b:e4:af:54:86:a1:46:2d:b0:8e:1e:78:65:34:c1:
                    b3:e6:56:a1:cf:c8:5a:89:c3:c5:9d:66:b8:e9:bf:
                    06:9c:2b:4b:7c:62:52:5d:28:75:d1:5f:8b:2a:df:
                    ef:73:7d:92:30:5d:c3:55:fd:15:fc:d3:f4:0e:10:
                    a9:28:26:5f:69:d0:a7:21:ae:93:9b:78:50:7c:47:
                    b5:f2:9c:dc:e3:2d:8e:1c:93:53:bb:01:a4:56:1f:
                    1f:80:a3:b4:e2:b9:6a:95:6b:01:08:13:c1:22:1e:
                    32:38:cd:85:6b:c0:01:28:dc:07:c0:0f:8c:8f:42:
                    4a:63:8f:c5:b9:94:3a:b7:da:79:d0:8e:46:47:7a:
                    80:b6:f3:0e:ab:bc:af:08:1f:d9:8b:4a:05:1b:1d:
                    38:4b:02:68:de:ab:8d:ce:ef:6d:9d:3e:5e:aa:1c:
                    f6:00:77:39:c3:2d:9b:28:f8:12:7e:23:db:9a:cf:
                    0d:cb:ba:cc:99:37:59:ef:a5:ad:c2:1c:7b:d8:86:
                    75:0f:f8:b3:2b:3c:4a:90:d0:16:fc:34:7a:ab:d2:
                    d8:bf:0b:79:a9:aa:50:d8:a1:65:2c:df:5d:03:47:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:D3:96:C2:09:DD:F7:C9:26:D9:D7:45:11:38:56:75:32:CE:C4
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:e0:73:52:e4:0d:c4:43:d5:73:e0:c0:6c:03:73:c5:06:
         22:d5:8a:c0:c1:b6:90:b5:5d:2f:29:a2:65:e1:d5:a1:f8:08:
         4f:27:4f:d8:67:86:ca:45:10:c2:90:fd:2f:c1:52:18:14:c4:
         3f:0f:2b:b0:c2:0b:89:b0:78:55:ad:f5:0e:e8:0a:aa:ba:eb:
         e1:c3:ca:b5:2b:56:fc:6e:57:10:ef:70:8b:4f:5d:b9:06:1a:
         89:2d:e2:48:44:fd:33:5a:43:8d:c6:f8:d5:4c:b5:45:42:51:
         ad:24:c0:b4:82:b1:22:df:99:a0:ce:ba:54:69:11:93:83:2d:
         1e:3c:b8:21:a6:c0:28:53:b7:22:5b:8f:cd:5e:ba:2d:36:52:
         fb:bc:05:53:cc:6c:77:a2:32:41:a2:08:ba:aa:97:00:c2:ed:
         e3:08:17:49:3b:de:f9:c5:7c:bd:0a:ad:a2:e0:50:52:61:d5:
         80:91:c4:7f:65:1b:3c:76:5b:a4:5e:cf:9e:c8:25:79:ef:b0:
         96:5d:e0:e1:3e:fc:75:01:b9:f1:c3:e1:2c:12:36:5d:12:d8:
         48:77:44:5a:75:79:d7:c8:f8:42:28:e3:a1:95:78:91:9a:8a:
         19:99:e1:36:35:0b:fb:c4:71:59:8d:70:d4:0a:52:f8:d6:60:
         b6:5c:36:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1
OUZCQkQ1NzQwHhcNMjUxMTA0MjA1MTAzWhcNMjUxMTExMjA1MTAzWjAYMRYwFAYD
VQQDEw02OTBhNjczNy1jMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIBSZQcxuUkq81iYpr5Z8FAKL8bqXMzVf6lkRr4r5K9UhqFGLbCOHnhlNMGz
5lahz8haicPFnWa46b8GnCtLfGJSXSh10V+LKt/vc32SMF3DVf0V/NP0DhCpKCZf
adCnIa6Tm3hQfEe18pzc4y2OHJNTuwGkVh8fgKO04rlqlWsBCBPBIh4yOM2Fa8AB
KNwHwA+Mj0JKY4/FuZQ6t9p50I5GR3qAtvMOq7yvCB/Zi0oFGx04SwJo3quNzu9t
nT5eqhz2AHc5wy2bKPgSfiPbms8Ny7rMmTdZ76Wtwhx72IZ1D/izKzxKkNAW/DR6
q9LYvwt5qapQ2KFlLN9dA0fTLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJka05bC
Cd33ySbZ10UROFZ1Ms7EMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz
RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx
WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP
bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9eeBzUuQNxEPVc+DAbANzxQYi1YrAwbaQtV0vKaJl4dWh+AhPJ0/Y
Z4bKRRDCkP0vwVIYFMQ/DyuwwguJsHhVrfUO6Aqquuvhw8q1K1b8blcQ73CLT125
BhqJLeJIRP0zWkONxvjVTLVFQlGtJMC0grEi35mgzrpUaRGTgy0ePLghpsAoU7ci
W4/NXrotNlL7vAVTzGx3ojJBogi6qpcAwu3jCBdJO975xXy9Cq2i4FBSYdWAkcR/
ZRs8dlukXs+eyCV577CWXeDhPvx1Abnxw+EsEjZdEthId0RadXnXyPhCKOOhlXiR
mooZmeE2NQv7xHFZjXDUClL41mC2XDbv
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:36:56 2025 by rpki-client