Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File:                     aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier:          W6VCaWM6hs64GM7l7ThNE9NStAI02nDUE3GEPM1ADJ4=
Subject key identifier:   61:F9:DA:49:B5:D0:DE:89:2B:E1:4A:82:E2:C7:DC:CA:F6:38:8E:A5
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       03F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number:          03E7
Signing time:             Wed 05 Nov 2025 00:37:33 +0000
Manifest this update:     Wed 05 Nov 2025 00:37:32 +0000
Manifest next update:     Wed 12 Nov 2025 00:37:32 +0000
Files and hashes:         1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: u4VVld/Bi2NDmqB6lSfIlVgUZPzWgRbojv48PbZeo+0=)
                          2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=)
                          3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: Nov  5 00:37:32 2025 GMT
            Not After : Nov 12 00:37:32 2025 GMT
        Subject: CN=690a9c4d-7633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:fd:ca:f8:b2:43:43:18:3f:3a:58:eb:96:
                    00:99:9f:b8:d2:fe:4a:d9:9e:a9:d4:69:39:f7:c1:
                    64:7f:63:e0:ff:a5:6e:f5:fc:9a:49:fb:09:a3:56:
                    36:b7:7e:50:6b:e2:ab:42:30:1b:6a:e9:cb:21:e7:
                    0e:82:b0:43:e1:01:b0:d3:24:fd:64:42:8d:98:fe:
                    d2:53:c1:63:87:97:cd:a8:a1:f9:0d:79:ac:b9:d0:
                    de:86:03:2e:89:29:4c:d1:19:6c:0b:15:a0:cf:96:
                    70:10:05:8d:70:78:0c:be:65:4b:f3:1e:aa:de:21:
                    3f:3d:c7:37:17:cc:9f:c9:24:5a:0a:db:5c:5a:46:
                    80:ec:9d:ac:62:70:7c:bf:72:d7:40:ea:2f:34:9e:
                    c6:b7:91:3a:e5:72:dc:b0:85:01:a8:ac:02:17:22:
                    36:68:24:3f:09:db:c1:e2:40:ef:74:43:48:2a:57:
                    24:e0:40:25:07:a3:ba:9f:8b:6d:76:76:ad:f0:1e:
                    af:76:d3:2e:d0:3e:90:33:04:03:8e:3b:70:40:d4:
                    67:a9:4f:30:80:21:e4:0f:74:52:1a:7c:46:89:91:
                    57:e5:ed:38:45:99:21:d3:f0:27:a2:b0:c0:e9:50:
                    af:3a:f3:3d:a8:90:a2:ab:0a:de:2e:3f:37:33:c0:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F9:DA:49:B5:D0:DE:89:2B:E1:4A:82:E2:C7:DC:CA:F6:38:8E:A5
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4f:13:75:b4:c2:97:ff:08:e0:c1:99:e0:dc:ac:62:23:21:
         48:54:02:a8:af:fa:e1:67:7f:47:4b:32:9e:9f:b7:fe:1f:1c:
         51:36:b1:14:1c:b4:34:8c:e6:6f:ea:0f:cc:25:d6:35:f0:83:
         9d:70:c0:eb:48:5d:93:6e:35:e3:56:5a:f2:85:0e:90:47:be:
         ee:23:8d:12:ab:e6:32:5e:7a:61:62:db:4d:c7:ee:84:26:27:
         33:8f:21:5a:4c:3b:f6:3c:e5:6f:60:75:de:6d:c9:92:2e:74:
         ad:fa:9f:70:17:c3:be:3c:6b:77:c7:4a:e4:c0:c8:d9:75:5b:
         ac:5f:54:c2:ab:fd:a0:b0:af:24:17:49:41:b2:69:93:ff:b8:
         73:8e:f7:f3:fb:4c:f5:59:e4:cf:61:dc:04:42:1b:ac:fb:15:
         ee:b1:a8:be:5b:17:83:f3:bb:8a:f1:82:ed:30:6c:16:2f:b7:
         65:0b:4d:01:10:eb:5d:65:d3:33:b2:ea:12:df:69:17:39:57:
         c0:0c:8f:4d:c2:6f:c1:01:e4:59:7f:30:d0:6e:84:00:93:63:
         57:b4:b8:8b:38:97:6b:10:43:f5:1b:fe:38:47:ac:d6:53:28:
         22:c9:7f:9f:d1:4c:ac:fe:cb:bd:f9:69:80:36:21:9a:40:2e:
         27:36:a2:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0
OUM1N0Y1MTUwHhcNMjUxMTA1MDAzNzMyWhcNMjUxMTEyMDAzNzMyWjAYMRYwFAYD
VQQDEw02OTBhOWM0ZC03NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6HT9yviyQ0MYPzpY65YAmZ+40v5K2Z6p1Gk598Fkf2Pg/6Vu9fyaSfsJo1Y2
t35Qa+KrQjAbaunLIecOgrBD4QGw0yT9ZEKNmP7SU8Fjh5fNqKH5DXmsudDehgMu
iSlM0RlsCxWgz5ZwEAWNcHgMvmVL8x6q3iE/Pcc3F8yfySRaCttcWkaA7J2sYnB8
v3LXQOovNJ7Gt5E65XLcsIUBqKwCFyI2aCQ/CdvB4kDvdENIKlck4EAlB6O6n4tt
dnat8B6vdtMu0D6QMwQDjjtwQNRnqU8wgCHkD3RSGnxGiZFX5e04RZkh0/AnorDA
6VCvOvM9qJCiqwreLj83M8D+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH52km1
0N6JK+FKguLH3Mr2OI6lMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE
RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI
MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSTxN1tMKX/wjgwZng3KxiIyFIVAKor/rhZ39HSzKen7f+HxxRNrEU
HLQ0jOZv6g/MJdY18IOdcMDrSF2TbjXjVlryhQ6QR77uI40Sq+YyXnphYttNx+6E
JiczjyFaTDv2POVvYHXebcmSLnSt+p9wF8O+PGt3x0rkwMjZdVusX1TCq/2gsK8k
F0lBsmmT/7hzjvfz+0z1WeTPYdwEQhus+xXusai+WxeD87uK8YLtMGwWL7dlC00B
EOtdZdMzsuoS32kXOVfADI9Nwm/BAeRZfzDQboQAk2NXtLiLOJdrEEP1G/44R6zW
UygiyX+f0Uys/su9+WmANiGaQC4nNqJP
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:41:41 2025 by rpki-client