Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
File:                     FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json)
Hash identifier:          KpeLxa1W8AOtZYZdFZk0bEL1cR0RXBJXOuQf2oJAKKk=
Subject key identifier:   23:5B:7B:E8:EE:5D:EC:67:EE:7A:24:CE:29:E1:BD:C5:2E:C9:98:71
Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03
Certificate issuer:       /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
Certificate serial:       08D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
Manifest number:          143B
Signing time:             Tue 04 Nov 2025 19:35:04 +0000
Manifest this update:     Tue 04 Nov 2025 19:35:03 +0000
Manifest next update:     Tue 11 Nov 2025 19:35:03 +0000
Files and hashes:         1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: 4TM+idRcPZnZjwOGqSc9qRbCzW4/Z2O4nt5BZYoIamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl
                          rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2262 (0x8d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
        Validity
            Not Before: Nov  4 19:35:03 2025 GMT
            Not After : Nov 11 19:35:03 2025 GMT
        Subject: CN=690a5568-55f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:88:f1:6e:ce:39:3b:8a:3d:f2:4f:87:6f:
                    6b:da:81:64:e1:58:08:ea:51:96:a2:7c:ac:c2:0d:
                    87:f5:ce:8b:b2:bf:d6:64:bd:6a:16:54:c6:d5:67:
                    ec:63:6d:4d:80:85:e6:14:39:67:b7:cb:7f:48:41:
                    09:3f:0c:a5:f3:e9:2e:24:16:0f:ad:5a:6e:4f:9e:
                    cf:b3:b4:b7:31:8a:e6:71:96:fd:46:16:6c:3f:63:
                    dc:a0:58:cf:c4:eb:b2:eb:11:ce:74:a6:1f:96:c0:
                    5b:55:45:a1:d1:e5:1e:39:03:ef:48:86:24:fd:7d:
                    8d:c0:62:64:e7:bd:8b:a8:de:79:13:06:21:08:60:
                    5d:83:d5:6d:73:ca:4f:8b:fb:ac:53:dc:eb:e6:c5:
                    de:a6:78:a4:f9:77:c7:94:3f:6c:1b:87:2b:30:ab:
                    e2:53:9c:90:46:01:0c:61:28:23:08:bf:47:69:38:
                    b2:96:66:03:b2:02:07:38:19:a2:f0:ec:68:7d:6a:
                    5b:6d:42:d7:5e:6a:f2:f9:4a:10:df:fc:dd:55:74:
                    56:20:29:35:96:0f:51:ae:53:e2:2b:67:9f:d8:c1:
                    09:36:2c:0b:f2:17:5c:d2:5a:cf:12:96:e0:08:b1:
                    f3:2f:f1:5d:00:39:7c:a1:48:98:13:8d:a3:a9:30:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:7B:E8:EE:5D:EC:67:EE:7A:24:CE:29:E1:BD:C5:2E:C9:98:71
            X509v3 Authority Key Identifier:
                keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:58:c1:67:69:9c:af:d8:06:7d:c1:a7:bd:fe:1a:fa:2a:d1:
         d9:18:69:1d:75:d1:74:c1:0a:57:91:db:b5:7c:d0:16:4d:42:
         eb:b2:b9:7b:77:1b:19:84:15:62:81:8a:19:45:8f:1d:be:b9:
         85:07:64:28:25:66:a1:6a:69:e7:ec:29:17:33:e2:ca:d5:b1:
         7c:b2:a4:0a:4a:da:61:1b:ca:e0:f5:5e:11:a3:9f:54:96:79:
         00:99:da:c9:6f:34:3e:86:f5:af:65:96:cf:e9:45:c7:dc:9b:
         aa:dd:fc:e9:5b:c0:1d:66:e7:09:e7:2a:89:62:8b:0c:08:dc:
         65:c3:3a:5e:b2:a9:0d:7c:bc:fc:2c:5d:4b:b1:d7:64:ba:94:
         bb:5b:4f:f8:f9:77:74:50:97:77:7f:47:77:87:69:75:f6:5c:
         ca:ba:66:79:b0:57:6f:90:c6:06:fc:f7:47:e3:1f:e3:c6:6c:
         87:cd:08:eb:e9:7c:f3:78:2c:0a:b9:0f:0c:a2:72:0d:f4:ad:
         b6:79:01:81:1f:72:7d:08:75:2a:ec:58:86:da:31:72:df:a1:
         e5:2f:fd:30:7f:df:75:b5:02:d2:59:3c:1d:7f:4f:77:1d:bb:
         af:bb:88:fa:45:c0:38:32:b2:c8:99:a3:95:c9:10:cf:3f:0d:
         b9:61:fe:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB
RUE0MTBEMDMwHhcNMjUxMTA0MTkzNTAzWhcNMjUxMTExMTkzNTAzWjAYMRYwFAYD
VQQDEw02OTBhNTU2OC01NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA23aI8W7OOTuKPfJPh29r2oFk4VgI6lGWonyswg2H9c6Lsr/WZL1qFlTG1Wfs
Y21NgIXmFDlnt8t/SEEJPwyl8+kuJBYPrVpuT57Ps7S3MYrmcZb9RhZsP2PcoFjP
xOuy6xHOdKYflsBbVUWh0eUeOQPvSIYk/X2NwGJk572LqN55EwYhCGBdg9Vtc8pP
i/usU9zr5sXepnik+XfHlD9sG4crMKviU5yQRgEMYSgjCL9HaTiylmYDsgIHOBmi
8OxofWpbbULXXmry+UoQ3/zdVXRWICk1lg9RrlPiK2ef2MEJNiwL8hdc0lrPEpbg
CLHzL/FdADl8oUiYE42jqTDkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNbe+ju
Xexn7nokzinhvcUuyZhxMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy
RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2
cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5WMFnaZyv2AZ9wae9/hr6KtHZGGkdddF0wQpXkdu1fNAWTULrsrl7
dxsZhBVigYoZRY8dvrmFB2QoJWahamnn7CkXM+LK1bF8sqQKStphG8rg9V4Ro59U
lnkAmdrJbzQ+hvWvZZbP6UXH3Juq3fzpW8AdZucJ5yqJYosMCNxlwzpesqkNfLz8
LF1LsddkupS7W0/4+Xd0UJd3f0d3h2l19lzKumZ5sFdvkMYG/PdH4x/jxmyHzQjr
6XzzeCwKuQ8MonIN9K22eQGBH3J9CHUq7FiG2jFy36HlL/0wf991tQLSWTwdf093
Hbuvu4j6RcA4MrLImaOVyRDPPw25Yf4n
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:25 2025 by rpki-client