Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
File:                     DVAomGo1a2m0r30vZknWu9y-i-0.mft (raw, json)
Hash identifier:          uf2cNSo8S46JBoAjdxMv1i3VDShK24CsV1Nw2HxM7vo=
Subject key identifier:   91:96:C1:98:92:D2:CF:8F:9D:73:5E:2C:6F:62:A2:97:63:51:AC:1A
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Certificate issuer:       /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial:       06A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
Manifest number:          0681
Signing time:             Tue 04 Nov 2025 22:38:27 +0000
Manifest this update:     Tue 04 Nov 2025 22:38:27 +0000
Manifest next update:     Tue 11 Nov 2025 22:38:27 +0000
Files and hashes:         1: DVAomGo1a2m0r30vZknWu9y-i-0.crl (hash: 8efdfMnzaDeu9YF6gPxEqRvimvF9QzNieOswDVGV7so=)
                          2: 2A44713C67EE11F0BC703D32C4F9AE02.roa (hash: BpDeUNsAVXhQcFIvYpQWRoffbAEHqNSC31GWxr+1Y+s=)
                          3: F3ABAB8E67B811F0976F6A50C4F9AE02.roa (hash: uRR/m+p39oHAi/sHNgk1sFfUujjCt9edvKbA8+8v5fk=)
                          4: 288F0B4A67EE11F0BC703D32C4F9AE02.roa (hash: naiZaIG3326aGab3zoF2f9J2xFvwxuYgd3e4+MUeJA0=)
                          5: 17FCD734563A11EE89046132C4F9AE02.roa (hash: nBLvVbNoZBHwgAUG7CrVbHtaE204SRQMJIPFLqxYQG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D4, serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
        Validity
            Not Before: Nov  4 22:38:27 2025 GMT
            Not After : Nov 11 22:38:27 2025 GMT
        Subject: CN=690a8063-3355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:43:b4:0e:a7:51:f3:62:c4:49:c1:7c:8c:
                    bf:49:b3:0b:c7:1f:80:8a:6d:f2:22:16:cd:f2:60:
                    07:e8:9a:3d:cd:9a:8f:89:be:f7:43:15:2e:45:c3:
                    4e:8d:26:db:cb:9b:96:91:27:d7:e6:98:e8:2a:da:
                    65:62:9a:fe:3b:ec:02:24:0d:9a:d0:ed:7b:b6:0e:
                    df:f5:48:86:3c:91:11:f1:1f:40:4d:d8:46:6b:76:
                    c4:70:eb:c3:9f:54:1a:ac:71:f2:f0:00:fe:78:5a:
                    d2:da:a4:ae:75:1c:6f:ac:58:47:40:eb:39:83:34:
                    77:96:8e:89:b1:0d:e7:9b:3c:79:7f:bb:88:3f:d3:
                    74:1e:90:09:ad:07:21:89:87:eb:2c:60:c5:4b:ae:
                    29:6a:81:ba:eb:07:0f:1e:7f:88:49:06:64:a9:d5:
                    53:3b:4c:62:51:34:c2:db:f7:38:da:39:b3:44:ac:
                    95:e0:aa:ee:85:51:64:aa:ac:2c:92:70:f7:7f:63:
                    4d:fe:35:29:37:cb:fe:65:6e:a6:43:ce:a8:e7:16:
                    61:6e:a0:1d:d6:90:b3:7b:be:f6:1b:a1:53:10:a3:
                    6a:ab:1c:40:81:5c:b4:64:87:f7:06:85:82:93:c1:
                    a1:ff:a4:69:21:f6:15:c4:1c:2c:d2:fa:3e:e6:47:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:C1:98:92:D2:CF:8F:9D:73:5E:2C:6F:62:A2:97:63:51:AC:1A
            X509v3 Authority Key Identifier:
                keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:33:e2:bf:3a:47:39:55:32:dd:76:a7:31:74:2c:34:5b:90:
         62:49:a7:57:dd:62:cc:7c:51:99:1d:3d:3a:33:05:01:58:79:
         0c:2c:d8:9c:3d:68:8a:14:c0:c9:c1:f3:d8:f6:9f:17:76:9c:
         2d:6c:87:ae:f4:e8:25:5c:c6:71:69:f4:6a:75:4f:a5:06:c0:
         ec:eb:f8:dd:07:df:b0:c2:08:2c:f7:8b:27:90:65:63:31:4e:
         a8:21:63:1c:88:19:96:d4:fe:70:31:4e:07:15:32:ba:21:7b:
         85:2c:6a:78:0c:dd:74:7d:d2:4d:51:79:65:17:10:f8:6e:be:
         9e:91:29:3f:34:b4:73:d2:13:4b:01:37:88:52:52:40:fc:24:
         3c:50:3d:02:ea:e8:d3:bc:d0:9f:0d:81:6f:af:52:05:73:8e:
         c6:f6:d8:ee:da:87:27:9a:ad:fd:6d:0a:97:f0:80:0a:16:78:
         46:28:ba:29:69:ed:3a:37:6e:ec:e0:a5:a7:c5:45:33:f9:f1:
         49:2e:9c:91:44:17:0c:36:c1:52:09:ff:d0:d4:4a:86:9a:0b:
         9a:89:4b:0f:15:8f:f7:20:fd:22:36:52:cd:96:fa:eb:ef:8d:
         4c:24:d2:8e:a7:17:15:2c:9a:24:c5:d5:12:6b:f9:34:c2:21:
         17:9d:dc:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I2RDQxMTAvBgNVBAUTKDBENTAyODk4NkEzNTZCNjlCNEFGN0QyRjY2NDlENkJC
RENCRThCRUQwHhcNMjUxMTA0MjIzODI3WhcNMjUxMTExMjIzODI3WjAYMRYwFAYD
VQQDEw02OTBhODA2My0zMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IxDtA6nUfNixEnBfIy/SbMLxx+Aim3yIhbN8mAH6Jo9zZqPib73QxUuRcNO
jSbby5uWkSfX5pjoKtplYpr+O+wCJA2a0O17tg7f9UiGPJER8R9ATdhGa3bEcOvD
n1QarHHy8AD+eFrS2qSudRxvrFhHQOs5gzR3lo6JsQ3nmzx5f7uIP9N0HpAJrQch
iYfrLGDFS64paoG66wcPHn+ISQZkqdVTO0xiUTTC2/c42jmzRKyV4KruhVFkqqws
knD3f2NN/jUpN8v+ZW6mQ86o5xZhbqAd1pCze772G6FTEKNqqxxAgVy0ZIf3BoWC
k8Gh/6RpIfYVxBws0vo+5kdruwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGWwZiS
0s+PnXNeLG9iopdjUawaMB8GA1UdIwQYMBaAFA1QKJhqNWtptK99L2ZJ1rvcvovt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENC85NTcyNTM2ODlF
NzkxMUVCOEY3QTQ0ODdDNEY5QUUwMi9EVkFvbUdvMWEybTByMzB2WmtuV3U5eS1p
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RWQW9tR28xYTJtMHIzMHZaa25XdTl5LWktMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjZENC85NTcyNTM2ODlFNzkxMUVCOEY3QTQ0ODdDNEY5QUUwMi9EVkFvbUdvMWEy
bTByMzB2WmtuV3U5eS1pLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlM+K/Okc5VTLddqcxdCw0W5BiSadX3WLMfFGZHT06MwUBWHkMLNic
PWiKFMDJwfPY9p8XdpwtbIeu9OglXMZxafRqdU+lBsDs6/jdB9+wwggs94snkGVj
MU6oIWMciBmW1P5wMU4HFTK6IXuFLGp4DN10fdJNUXllFxD4br6ekSk/NLRz0hNL
ATeIUlJA/CQ8UD0C6ujTvNCfDYFvr1IFc47G9tju2ocnmq39bQqX8IAKFnhGKLop
ae06N27s4KWnxUUz+fFJLpyRRBcMNsFSCf/Q1EqGmguaiUsPFY/3IP0iNlLNlvrr
741MJNKOpxcVLJokxdUSa/k0wiEXndxv
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:19 2025 by rpki-client