Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
File:                     0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json)
Hash identifier:          aEBpnDbSseUXOdRYzVfmkGYpU7YEDCVddRokg03zqto=
Subject key identifier:   99:23:C6:58:FC:2F:9A:59:22:CA:7C:83:60:6D:3F:21:4D:65:25:40
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       0688
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
Manifest number:          0678
Signing time:             Tue 04 Nov 2025 22:35:32 +0000
Manifest this update:     Tue 04 Nov 2025 22:35:32 +0000
Manifest next update:     Tue 11 Nov 2025 22:35:32 +0000
Files and hashes:         1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: BaS3b9/WmqgwXIBrf91gXGgrD4S1FLrIAbIQW//PQEQ=)
                          2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc=)
                          3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: s1rfV8r68HE4TuansWzDnqISJzRH7RjJXWNUpk6BVJU=)
                          4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
        Validity
            Not Before: Nov  4 22:35:32 2025 GMT
            Not After : Nov 11 22:35:32 2025 GMT
        Subject: CN=690a7fb4-834f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:cd:63:2c:11:5c:01:17:cf:0a:fd:8e:bf:
                    ae:f3:10:7d:49:81:cd:47:0a:be:48:d8:9f:56:e3:
                    7f:a8:2c:f9:fe:e7:99:6e:96:b0:30:b8:68:8b:17:
                    a1:8b:8b:c5:3e:9c:02:d7:46:5e:c8:27:b1:da:d5:
                    c6:f9:e0:31:3a:1d:e3:97:52:ae:0f:70:02:da:8f:
                    6d:26:50:a1:f0:ff:4c:a5:68:46:8d:08:e2:f1:4d:
                    2d:1d:6d:11:8c:1b:92:82:9f:3d:24:e1:ef:cb:e5:
                    3d:fe:1d:f1:7e:d4:42:91:86:c2:cc:6e:f8:af:37:
                    f9:9f:51:27:7c:5e:2c:cc:2d:48:0d:66:ba:77:7e:
                    54:8f:af:12:d8:14:f4:22:5e:98:3f:11:a5:d6:67:
                    d5:84:88:bc:46:d1:82:3e:91:77:79:c8:cb:18:dd:
                    12:b9:f4:7f:5b:d1:c9:b2:49:e4:aa:66:6a:b2:3a:
                    b8:de:39:bb:57:85:b6:17:c1:f4:e7:ed:ad:50:79:
                    53:3c:ac:cc:4b:b9:af:46:51:7e:4f:64:69:cc:35:
                    41:70:a4:be:9f:f0:29:bf:0a:bd:68:8b:44:dc:14:
                    74:c2:b9:46:39:53:6d:36:56:e1:70:61:27:fc:49:
                    bd:42:6f:87:98:98:5f:65:8a:6b:e7:ac:12:8c:40:
                    0f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:C6:58:FC:2F:9A:59:22:CA:7C:83:60:6D:3F:21:4D:65:25:40
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:05:85:52:99:f5:c6:e7:6f:34:aa:07:05:d3:d2:01:04:
         25:cc:2a:f3:16:82:4d:6b:54:05:fd:cf:5d:a1:15:ee:88:9b:
         00:db:47:23:a3:fd:7f:d9:99:98:bf:3e:7a:46:a2:5c:63:c8:
         54:d8:2d:72:06:8c:14:9f:e9:5a:8b:dc:8f:64:4e:ec:d9:69:
         28:36:ca:f5:6a:e1:9f:ea:a6:7a:72:5c:3b:5a:f2:7c:28:6a:
         a5:38:a9:b8:aa:1a:4d:6a:f5:7d:45:f5:d6:5d:25:e4:4b:48:
         29:06:b4:17:64:af:c9:28:9f:a2:94:1c:6d:90:57:88:0f:f2:
         b4:8f:c2:bb:c9:57:a5:65:f4:68:12:df:ef:6c:cb:71:e7:1f:
         0c:bb:91:f5:3a:80:c9:82:3b:37:cf:9f:a1:03:3d:e3:83:dc:
         82:17:59:58:f9:3f:25:97:4f:ee:42:27:f6:ff:11:3b:39:9f:
         14:fc:21:c1:d1:5c:7f:db:12:06:5c:7d:07:f8:5f:ec:08:44:
         fe:6a:30:0c:1d:25:eb:dd:4a:5c:26:4a:ff:a1:61:95:6a:34:
         4d:d6:fe:0c:70:60:ad:68:6e:fc:ce:e2:61:98:85:27:e4:47:
         9b:b0:8d:b3:e4:9d:3a:72:e6:16:78:62:1b:a5:be:4c:c7:c7:
         ef:d9:99:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB
ODk0QTlBNzYwHhcNMjUxMTA0MjIzNTMyWhcNMjUxMTExMjIzNTMyWjAYMRYwFAYD
VQQDEw02OTBhN2ZiNC04MzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4vNYywRXAEXzwr9jr+u8xB9SYHNRwq+SNifVuN/qCz5/ueZbpawMLhoixeh
i4vFPpwC10ZeyCex2tXG+eAxOh3jl1KuD3AC2o9tJlCh8P9MpWhGjQji8U0tHW0R
jBuSgp89JOHvy+U9/h3xftRCkYbCzG74rzf5n1EnfF4szC1IDWa6d35Uj68S2BT0
Il6YPxGl1mfVhIi8RtGCPpF3ecjLGN0SufR/W9HJsknkqmZqsjq43jm7V4W2F8H0
5+2tUHlTPKzMS7mvRlF+T2RpzDVBcKS+n/Apvwq9aItE3BR0wrlGOVNtNlbhcGEn
/Em9Qm+HmJhfZYpr56wSjEAPdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkjxlj8
L5pZIsp8g2BtPyFNZSVAMB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5
MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJCRC9EM0YxMUYwRTk5MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlf
WGhoQjJzNVNldXFvbEttblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCACgWFUpn1xudvNKoHBdPSAQQlzCrzFoJNa1QF/c9doRXuiJsA20cj
o/1/2ZmYvz56RqJcY8hU2C1yBowUn+lai9yPZE7s2WkoNsr1auGf6qZ6clw7WvJ8
KGqlOKm4qhpNavV9RfXWXSXkS0gpBrQXZK/JKJ+ilBxtkFeID/K0j8K7yVelZfRo
Et/vbMtx5x8Mu5H1OoDJgjs3z5+hAz3jg9yCF1lY+T8ll0/uQif2/xE7OZ8U/CHB
0Vx/2xIGXH0H+F/sCET+ajAMHSXr3UpcJkr/oWGVajRN1v4McGCtaG78zuJhmIUn
5EebsI2z5J06cuYWeGIbpb5Mx8fv2ZkU
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:42:05 2025 by rpki-client