Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          +mcc3xqkZ1yj9SHOLRjQThZjj9GrQnXvS/ucSGdTnjU=
Subject key identifier:   81:58:2C:18:6E:37:3C:5A:A9:B8:27:E7:AD:5E:99:21:C8:8A:A2:B1
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1D4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1D05
Signing time:             Tue 04 Nov 2025 16:15:14 +0000
Manifest this update:     Tue 04 Nov 2025 16:15:13 +0000
Manifest next update:     Tue 11 Nov 2025 16:15:13 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: 0rmscK2RbAgC4jOR0BmJHw0jP4Pd6lgO3ZoZZwgLFno=)
                          2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=)
                          4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7500 (0x1d4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Nov  4 16:15:13 2025 GMT
            Not After : Nov 11 16:15:13 2025 GMT
        Subject: CN=690a2691-f322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:b0:18:eb:0f:67:d3:df:99:8d:7d:46:6d:
                    07:79:6b:34:ef:8b:15:9d:d4:80:0b:7d:af:19:2c:
                    11:a9:92:ee:c9:46:a4:3f:c0:47:c9:d3:14:85:59:
                    eb:2b:ae:d0:b3:32:56:c9:93:ea:5f:bb:ed:71:d4:
                    6f:22:e3:dc:3d:a8:bc:26:fd:ca:51:02:49:d1:06:
                    45:dc:1b:2e:41:3e:3e:c6:fa:b9:f5:bf:13:06:48:
                    7e:55:e6:ae:18:73:4c:d1:05:bc:0c:f2:dc:40:d6:
                    b7:24:a2:b9:66:d0:9e:68:7a:de:48:ce:74:d8:33:
                    f2:2d:61:cc:44:2d:f0:87:56:b7:0d:95:b2:bd:e0:
                    16:c0:6c:0d:03:98:95:e4:ba:6c:f6:47:3c:dd:eb:
                    db:05:9a:70:c0:dc:d9:7c:f3:31:9e:49:bb:25:99:
                    e0:93:40:0b:8f:49:6e:53:db:a4:41:61:18:af:4d:
                    f9:d3:ae:bd:f1:6b:e1:7d:24:e7:27:be:9c:cf:e5:
                    02:61:a2:c6:36:cd:e1:56:48:8c:8c:5d:ee:5c:10:
                    1f:9b:25:d8:f4:05:21:23:58:49:70:37:54:2f:fa:
                    a0:28:0a:f1:7c:37:17:d6:cc:d3:24:2e:33:08:f4:
                    eb:de:fc:45:0c:50:81:ea:fd:97:ad:38:56:cc:be:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:2C:18:6E:37:3C:5A:A9:B8:27:E7:AD:5E:99:21:C8:8A:A2:B1
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:5b:f2:a8:b7:7c:7f:de:9c:ad:00:1a:be:64:a4:61:19:
         d5:a1:ad:90:68:5c:91:f1:0c:c2:be:b5:1f:00:e7:2b:8c:0d:
         11:b8:3b:44:1a:69:00:b9:8f:b0:88:5c:33:ce:fe:58:e3:52:
         4b:2c:d9:cd:c5:e5:c4:66:1b:0d:70:92:1e:02:bf:44:27:70:
         8f:07:64:3c:81:b0:49:68:4b:b9:c9:81:86:09:c4:d7:b1:23:
         29:7b:7e:ce:db:e9:fa:50:93:10:33:59:e9:07:f0:a1:2c:e0:
         47:70:7f:25:a0:d1:57:8d:4f:f0:e0:da:83:bc:07:e6:33:a5:
         7f:57:19:e9:0c:bc:6a:e2:81:16:de:27:d3:8b:42:0d:65:e9:
         29:f9:75:61:18:b0:f2:ce:9b:dd:c2:c7:e7:f3:25:60:9b:48:
         b7:4d:8c:88:67:96:cd:f7:ba:2a:67:d9:35:c6:de:9b:ef:e1:
         e9:2d:90:bf:31:52:a5:1d:35:10:9d:31:24:d1:6a:46:26:96:
         17:37:db:10:66:ca:c4:6c:38:d8:2f:5e:fb:7c:f4:0e:09:22:
         39:30:8e:26:0c:38:5a:36:f6:39:b3:f4:fb:e5:15:f5:cc:3c:
         dd:e8:29:f3:1b:2a:a4:3e:1f:80:18:d0:3c:3d:fb:3d:26:0c:
         80:53:31:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBEMjcxMTAvBgNVBAUTKEZGQ0QyMERDQTY4REU0MzJGMjE5MUI3QjYzMzI4NkJD
OTg3RTQyRUMwHhcNMjUxMTA0MTYxNTEzWhcNMjUxMTExMTYxNTEzWjAYMRYwFAYD
VQQDEw02OTBhMjY5MS1mMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6nKwGOsPZ9PfmY19Rm0HeWs074sVndSAC32vGSwRqZLuyUakP8BHydMUhVnr
K67QszJWyZPqX7vtcdRvIuPcPai8Jv3KUQJJ0QZF3BsuQT4+xvq59b8TBkh+Veau
GHNM0QW8DPLcQNa3JKK5ZtCeaHreSM502DPyLWHMRC3wh1a3DZWyveAWwGwNA5iV
5Lps9kc83evbBZpwwNzZfPMxnkm7JZngk0ALj0luU9ukQWEYr03506698WvhfSTn
J76cz+UCYaLGNs3hVkiMjF3uXBAfmyXY9AUhI1hJcDdUL/qgKArxfDcX1szTJC4z
CPTr3vxFDFCB6v2XrThWzL5gxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFYLBhu
Nzxaqbgn561emSHIiqKxMB8GA1UdIwQYMBaAFP/NINymjeQy8hkbe2MyhryYfkLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQyNy8yQTYxQ0E4QUQz
NTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVETHlHUnQ3WXpLR3ZKaC1R
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL184MGczS2FONURMeUdSdDdZektHdkpoLVF1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEQyNy8yQTYxQ0E4QUQzNTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVE
THlHUnQ3WXpLR3ZKaC1RdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwa1vyqLd8f96crQAavmSkYRnVoa2QaFyR8QzCvrUfAOcrjA0RuDtE
GmkAuY+wiFwzzv5Y41JLLNnNxeXEZhsNcJIeAr9EJ3CPB2Q8gbBJaEu5yYGGCcTX
sSMpe37O2+n6UJMQM1npB/ChLOBHcH8loNFXjU/w4NqDvAfmM6V/VxnpDLxq4oEW
3ifTi0INZekp+XVhGLDyzpvdwsfn8yVgm0i3TYyIZ5bN97oqZ9k1xt6b7+HpLZC/
MVKlHTUQnTEk0WpGJpYXN9sQZsrEbDjYL177fPQOCSI5MI4mDDhaNvY5s/T75RX1
zDzd6CnzGyqkPh+AGNA8Pfs9JgyAUzHm
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:43 2025 by rpki-client