Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          W7Vv6bqKwyZVYbVTvpgikwsuJ9UaCdFn3UI+984hgHA=
Subject key identifier:   5D:22:67:A5:8F:AA:A0:2D:0D:82:F2:F3:27:49:15:A6:49:F4:8C:13
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          CB
Signing time:             Wed 05 Nov 2025 05:56:31 +0000
Manifest this update:     Wed 05 Nov 2025 05:56:31 +0000
Manifest next update:     Wed 12 Nov 2025 05:56:31 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: MRv95UQQ2O3AsDcWYKDRIY5Im5DWair1v3rISdQuFao=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Nov  5 05:56:31 2025 GMT
            Not After : Nov 12 05:56:31 2025 GMT
        Subject: CN=690ae70f-bc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:e5:8d:fa:ea:fb:54:3b:fb:3c:46:1d:bc:
                    10:d9:5d:cf:02:66:46:4e:ad:88:ff:eb:8b:b8:e1:
                    1b:e1:f8:33:cd:da:38:0c:1a:ec:7a:a6:33:2d:37:
                    61:db:db:33:98:79:8e:ec:aa:ca:eb:99:0f:c3:02:
                    dc:88:12:f8:86:67:a3:07:b9:3f:24:16:62:a5:b8:
                    d6:ed:3a:8d:ae:a1:4d:2c:2a:f6:17:f2:5d:35:f6:
                    2b:d8:50:c6:d2:3f:fd:42:66:13:bb:36:03:e4:7e:
                    94:69:e9:cc:54:8f:92:f2:23:f0:0f:8e:86:0b:af:
                    08:86:fe:79:5e:2f:65:3f:09:31:13:6b:2d:94:f5:
                    14:e9:26:58:4c:f1:5c:04:42:e2:b1:6e:8c:93:05:
                    47:ef:c0:66:dc:2e:f5:13:fe:7e:28:9b:e0:3d:17:
                    71:21:bf:f4:d3:49:93:12:26:9e:43:10:22:2a:ea:
                    c9:38:e4:d1:2f:32:11:c4:09:ae:50:53:6f:9c:ae:
                    34:8f:3c:a5:6a:62:70:f9:95:10:42:54:91:1d:ca:
                    93:c7:a5:ff:49:70:9a:1a:8d:69:61:00:ee:e4:4e:
                    06:c1:13:1e:c7:98:d9:fd:7d:23:93:e8:b3:2d:69:
                    92:06:20:c8:dd:58:27:84:85:0b:a1:1f:66:8d:85:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:22:67:A5:8F:AA:A0:2D:0D:82:F2:F3:27:49:15:A6:49:F4:8C:13
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:22:a7:41:70:29:2c:ff:12:91:8a:78:6d:0f:14:be:55:4f:
         96:9e:3b:46:04:33:49:c8:c7:64:6b:55:ef:82:f9:6b:c8:32:
         f0:4d:39:cf:c5:97:18:2b:a8:99:6d:6e:eb:af:ca:9c:9a:eb:
         60:66:b1:d4:29:bd:56:2a:f6:68:74:23:68:60:7b:5a:a2:da:
         53:0c:3d:2f:1f:b0:da:01:93:b2:a6:cb:23:a6:b7:df:de:73:
         e9:fc:82:94:d9:82:b4:15:3e:c9:8e:76:b9:83:2d:c9:d3:8d:
         f4:d7:43:69:d2:a5:8c:e3:6e:a5:c2:9d:b2:a1:7e:37:19:ee:
         3f:33:43:b9:81:72:e2:7e:7b:15:66:0f:8b:9a:5d:d8:38:2b:
         4e:b8:68:24:be:ca:dc:76:ea:8a:8d:58:fc:54:9a:f3:47:8c:
         b1:06:55:65:3e:0d:96:a8:f1:48:ae:40:d2:bd:7a:28:1e:1e:
         56:e8:b5:e3:9b:c7:be:2d:0a:71:d6:a7:16:be:16:39:d4:eb:
         71:0f:6f:be:1c:0b:1f:9d:93:a7:64:c6:6e:76:28:23:0d:74:
         ef:12:ab:98:5a:e9:a5:66:bd:d7:a9:8d:3e:c8:0e:15:fa:86:
         f7:4c:27:9d:a5:8d:62:3e:b2:79:36:0d:93:ca:f5:81:b1:09:
         1f:cd:68:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0N0YxMTAvBgNVBAUTKDM2Nzg3OUEwQjg1REQ4MzczNjM3ODgzNzkzRjU1RUVC
M0IyMjFEQ0YwHhcNMjUxMTA1MDU1NjMxWhcNMjUxMTEyMDU1NjMxWjAYMRYwFAYD
VQQDEw02OTBhZTcwZi1iYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwz3ljfrq+1Q7+zxGHbwQ2V3PAmZGTq2I/+uLuOEb4fgzzdo4DBrseqYzLTdh
29szmHmO7KrK65kPwwLciBL4hmejB7k/JBZipbjW7TqNrqFNLCr2F/JdNfYr2FDG
0j/9QmYTuzYD5H6UaenMVI+S8iPwD46GC68Ihv55Xi9lPwkxE2stlPUU6SZYTPFc
BELisW6MkwVH78Bm3C71E/5+KJvgPRdxIb/000mTEiaeQxAiKurJOOTRLzIRxAmu
UFNvnK40jzylamJw+ZUQQlSRHcqTx6X/SXCaGo1pYQDu5E4GwRMex5jZ/X0jk+iz
LWmSBiDI3VgnhIULoR9mjYVkzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0iZ6WP
qqAtDYLy8ydJFaZJ9IwTMB8GA1UdIwQYMBaAFDZ4eaC4Xdg3NjeIN5P1Xus7Ih3P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQ3Ri9DMjFDN0NGNjg2
REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Obmg1b0xoZDJEYzJONGcza19WZTZ6c2lI
YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhjOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjQ3Ri9DMjFDN0NGNjg2REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Obmg1b0xoZDJE
YzJONGcza19WZTZ6c2lIYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlIqdBcCks/xKRinhtDxS+VU+WnjtGBDNJyMdka1XvgvlryDLwTTnP
xZcYK6iZbW7rr8qcmutgZrHUKb1WKvZodCNoYHtaotpTDD0vH7DaAZOypssjprff
3nPp/IKU2YK0FT7Jjna5gy3J043010Np0qWM426lwp2yoX43Ge4/M0O5gXLifnsV
Zg+Lml3YOCtOuGgkvsrcduqKjVj8VJrzR4yxBlVlPg2WqPFIrkDSvXooHh5W6LXj
m8e+LQpx1qcWvhY51OtxD2++HAsfnZOnZMZudigjDXTvEquYWumlZr3XqY0+yA4V
+ob3TCedpY1iPrJ5Ng2TyvWBsQkfzWhC
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:37:14 2025 by rpki-client