Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          5TUh1qhMIGmjR3ZQtvhhqZDl0VrIH5+TP8AcKKan1MY=
Subject key identifier:   61:53:07:98:AE:73:E4:57:A9:B3:30:22:CB:16:2E:A3:B2:4E:8E:C4
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C02
Signing time:             Tue 04 Nov 2025 18:54:25 +0000
Manifest this update:     Tue 04 Nov 2025 18:54:25 +0000
Manifest next update:     Tue 11 Nov 2025 18:54:25 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: 5uwvIRNNXUgw13HDqrLdmpRNs8DPHX/Ukg4IgD4pGvE=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3081 (0xc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Nov  4 18:54:25 2025 GMT
            Not After : Nov 11 18:54:25 2025 GMT
        Subject: CN=690a4be1-0376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:b9:79:71:7d:f6:2d:e4:37:cf:91:1e:fd:
                    00:c0:b6:c4:6b:55:3d:f2:a1:7d:9d:b2:e8:35:55:
                    1a:d1:b1:2b:3e:d2:56:d7:d6:41:56:9b:b2:ac:87:
                    e4:39:e4:98:f8:8c:a7:03:27:35:fc:7f:e4:8c:cf:
                    f9:7d:74:a5:9f:05:24:3c:3f:67:cc:ea:00:3d:3d:
                    3c:46:cf:3a:14:4f:ad:73:c8:d4:27:42:64:e3:33:
                    0b:46:a3:c0:77:0f:03:e3:72:93:4d:81:fc:1b:54:
                    91:ec:be:6e:7b:1c:47:9e:df:9d:2e:d5:ef:a3:9c:
                    c8:6d:31:95:67:b5:25:10:f9:39:f2:88:49:e5:f3:
                    8f:ef:dd:7f:35:db:ac:0c:db:47:ef:7f:8a:59:89:
                    17:24:9f:fa:4c:33:2b:ce:67:8a:ec:b9:fa:d8:5c:
                    ed:a4:a0:e4:11:4c:1b:b9:95:06:0b:ba:69:61:f9:
                    e1:28:60:e9:e8:55:6d:af:44:f4:23:34:87:18:5f:
                    4d:9e:1d:ab:d9:a5:21:9b:76:f7:d3:11:08:57:93:
                    0e:1a:5e:1b:00:11:c5:ab:7d:e2:aa:13:b8:ad:12:
                    e8:40:7a:24:08:a7:2e:bb:a2:c8:82:f5:d4:ec:79:
                    d0:c3:75:53:12:03:27:39:e9:9a:f0:e5:a5:d7:18:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:53:07:98:AE:73:E4:57:A9:B3:30:22:CB:16:2E:A3:B2:4E:8E:C4
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:f8:e8:8e:87:8e:0a:43:16:68:f7:4c:9b:a8:45:b8:19:
         43:18:25:09:96:12:98:6f:c3:11:e7:83:8d:9b:b0:ea:84:ef:
         54:ce:4d:87:0b:cb:e2:c1:3c:ef:c4:be:bf:45:95:45:99:61:
         23:02:7d:b6:0b:c2:96:ab:b6:b2:26:05:39:aa:f1:00:41:9b:
         25:55:67:ba:38:4f:59:05:cb:ce:c2:15:da:9c:df:c7:f1:58:
         f9:0c:37:37:80:bd:66:46:64:9b:dc:1a:87:6b:00:1a:d8:d1:
         13:d6:c7:1e:9e:24:a8:f0:a5:07:48:fc:4e:35:00:75:6f:76:
         f2:03:03:d2:81:9b:36:7b:26:b0:57:b5:13:c9:7b:46:a3:c0:
         63:7a:c0:fe:73:4e:a6:03:42:ce:2a:34:55:cd:e6:29:06:b2:
         47:32:c1:02:a5:75:fc:e9:b9:39:b9:e8:8c:95:1d:b4:9b:11:
         b9:c2:4e:0c:aa:31:aa:86:40:93:ea:96:32:ee:b8:6e:5c:c6:
         69:a8:20:cc:30:0e:cc:5f:c7:5d:bd:31:d5:d1:ab:5b:fb:f8:
         f1:3b:a7:a8:7e:79:8d:d0:47:87:aa:d3:8a:63:11:45:8e:cf:
         88:ad:67:2a:ab:05:9d:a2:bc:50:72:9f:62:2b:2f:53:21:19:
         85:36:49:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3
NzU4MzAwRjkwHhcNMjUxMTA0MTg1NDI1WhcNMjUxMTExMTg1NDI1WjAYMRYwFAYD
VQQDEw02OTBhNGJlMS0wMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupe5eXF99i3kN8+RHv0AwLbEa1U98qF9nbLoNVUa0bErPtJW19ZBVpuyrIfk
OeSY+IynAyc1/H/kjM/5fXSlnwUkPD9nzOoAPT08Rs86FE+tc8jUJ0Jk4zMLRqPA
dw8D43KTTYH8G1SR7L5uexxHnt+dLtXvo5zIbTGVZ7UlEPk58ohJ5fOP791/Ndus
DNtH73+KWYkXJJ/6TDMrzmeK7Ln62FztpKDkEUwbuZUGC7ppYfnhKGDp6FVtr0T0
IzSHGF9Nnh2r2aUhm3b30xEIV5MOGl4bABHFq33iqhO4rRLoQHokCKcuu6LIgvXU
7HnQw3VTEgMnOema8OWl1xgyhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFTB5iu
c+RXqbMwIssWLqOyTo7EMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx
MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF
YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSwfjojoeOCkMWaPdMm6hFuBlDGCUJlhKYb8MR54ONm7DqhO9Uzk2H
C8viwTzvxL6/RZVFmWEjAn22C8KWq7ayJgU5qvEAQZslVWe6OE9ZBcvOwhXanN/H
8Vj5DDc3gL1mRmSb3BqHawAa2NET1sceniSo8KUHSPxONQB1b3byAwPSgZs2eyaw
V7UTyXtGo8BjesD+c06mA0LOKjRVzeYpBrJHMsECpXX86bk5ueiMlR20mxG5wk4M
qjGqhkCT6pYy7rhuXMZpqCDMMA7MX8ddvTHV0atb+/jxO6eofnmN0EeHqtOKYxFF
js+IrWcqqwWdorxQcp9iKy9TIRmFNkk8
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:58 2025 by rpki-client