Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
File:                     J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json)
Hash identifier:          y1CH6Hb2Q83NeXfv3lNjwsk+sMQq3DSl16cj/O3yBgI=
Subject key identifier:   92:1E:12:7E:FD:03:BD:B9:0B:1E:36:5F:5D:3D:77:31:1C:97:C1:26
Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73
Certificate issuer:       /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
Certificate serial:       055E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
Manifest number:          0558
Signing time:             Tue 04 Nov 2025 23:29:14 +0000
Manifest this update:     Tue 04 Nov 2025 23:29:14 +0000
Manifest next update:     Tue 11 Nov 2025 23:29:14 +0000
Files and hashes:         1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: +y+gpXFv/5W/gMbOIzKQw5hw2vSGabxuq/Ea23XpX6k=)
                          2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: 9CLl3VckXKdY+8htHptItIp5TJ4KGFHvVrwInC8Y8hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl
                          rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
        Validity
            Not Before: Nov  4 23:29:14 2025 GMT
            Not After : Nov 11 23:29:14 2025 GMT
        Subject: CN=690a8c4a-0149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:9f:f1:78:b4:fd:05:8c:a5:9a:22:93:11:
                    d8:cd:10:21:56:88:25:39:a6:21:e0:e2:e1:88:f7:
                    fd:8e:dc:39:31:5c:a2:26:24:73:d0:5c:3d:43:08:
                    7c:50:67:36:8d:43:66:a8:52:e8:e4:b1:bd:76:9c:
                    ee:db:f1:12:dd:6d:49:82:06:e7:56:ad:95:39:99:
                    93:d0:c1:58:7f:99:61:91:69:c7:ad:6d:c0:c2:a3:
                    42:66:bf:a2:b1:cc:57:28:46:f0:75:b5:50:08:46:
                    e2:1a:7a:44:c4:53:e3:aa:a7:09:db:22:5d:e1:11:
                    c8:ee:f0:18:72:d7:c9:81:86:76:e7:38:8f:fa:fe:
                    43:79:9e:77:5a:59:f6:cc:af:fc:1f:d9:77:e8:73:
                    a9:53:a3:43:4e:73:9a:7c:b7:eb:43:1a:34:dd:2b:
                    69:bf:07:a5:aa:c1:47:4c:40:64:b3:6d:9c:7b:9d:
                    0e:ed:1e:84:72:32:ec:73:68:70:78:73:b7:06:17:
                    41:f9:68:ae:1d:30:8f:d2:26:b6:dc:83:48:d8:b0:
                    65:a7:28:7d:91:ea:10:27:b8:a3:9f:2d:e6:62:8c:
                    84:25:3d:2f:39:5c:3d:97:59:61:cf:64:03:56:86:
                    ba:c5:9a:00:7d:4d:cb:49:6b:06:17:d5:df:cf:cf:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1E:12:7E:FD:03:BD:B9:0B:1E:36:5F:5D:3D:77:31:1C:97:C1:26
            X509v3 Authority Key Identifier:
                keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:0a:e9:3b:76:29:2c:c4:5d:c3:cd:f5:34:cd:b8:a0:31:
         0b:24:4a:d3:26:f1:86:26:93:85:07:9d:06:1f:9d:37:f5:d6:
         89:47:12:55:15:76:91:74:a7:b3:f7:23:b0:5d:81:04:e0:4f:
         69:c2:3d:a8:56:65:ce:a2:f2:c8:92:4e:88:29:9b:29:05:2e:
         ad:e0:a9:90:29:b6:c8:63:ba:61:61:b6:8b:0e:9e:6f:00:d4:
         96:4e:40:bc:8a:85:07:a8:1f:70:60:b1:a1:e4:23:9f:57:27:
         ea:ee:4d:33:c5:40:e9:03:7f:b4:a8:c2:b4:d2:2a:eb:84:d9:
         b8:5d:28:bb:1a:85:4c:f5:1a:66:db:3f:58:45:13:21:34:67:
         65:7d:08:05:12:08:d2:e4:ac:0b:b8:25:f9:7d:c7:9d:47:d7:
         a1:04:cd:9a:09:d1:b9:72:06:42:e3:35:20:25:22:84:3f:2f:
         68:6f:29:0a:5f:ec:e7:c5:80:de:ab:0f:32:58:8d:78:d6:36:
         91:65:1b:3e:6c:25:e5:40:38:65:b7:b0:79:fb:54:25:5c:f3:
         d2:77:ae:bd:21:89:79:a0:5d:6c:e7:c8:b6:ff:5c:19:6b:84:
         0e:70:2d:d0:ed:d7:8f:8c:84:c9:0b:a5:9a:c7:57:45:8c:8f:
         61:4c:43:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG
RjM1Mzc4NzMwHhcNMjUxMTA0MjMyOTE0WhcNMjUxMTExMjMyOTE0WjAYMRYwFAYD
VQQDEw02OTBhOGM0YS0wMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwTyf8Xi0/QWMpZoikxHYzRAhVoglOaYh4OLhiPf9jtw5MVyiJiRz0Fw9Qwh8
UGc2jUNmqFLo5LG9dpzu2/ES3W1JggbnVq2VOZmT0MFYf5lhkWnHrW3AwqNCZr+i
scxXKEbwdbVQCEbiGnpExFPjqqcJ2yJd4RHI7vAYctfJgYZ25ziP+v5DeZ53Wln2
zK/8H9l36HOpU6NDTnOafLfrQxo03StpvwelqsFHTEBks22ce50O7R6EcjLsc2hw
eHO3BhdB+WiuHTCP0ia23INI2LBlpyh9keoQJ7ijny3mYoyEJT0vOVw9l1lhz2QD
Voa6xZoAfU3LSWsGF9Xfz899hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIeEn79
A725Cx42X109dzEcl8EmMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD
NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL
Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAB9QrpO3YpLMRdw831NM24oDELJErTJvGGJpOFB50GH5039daJRxJV
FXaRdKez9yOwXYEE4E9pwj2oVmXOovLIkk6IKZspBS6t4KmQKbbIY7phYbaLDp5v
ANSWTkC8ioUHqB9wYLGh5COfVyfq7k0zxUDpA3+0qMK00irrhNm4XSi7GoVM9Rpm
2z9YRRMhNGdlfQgFEgjS5KwLuCX5fcedR9ehBM2aCdG5cgZC4zUgJSKEPy9obykK
X+znxYDeqw8yWI141jaRZRs+bCXlQDhlt7B5+1QlXPPSd669IYl5oF1s58i2/1wZ
a4QOcC3Q7dePjITJC6Wax1dFjI9hTEPx
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:36 2025 by rpki-client