Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
File:                     5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json)
Hash identifier:          /Ep4v49kL4f4laK1dQ9jLPNhZGDTvmU2KOCNgnkwHvc=
Subject key identifier:   78:55:7B:2C:A3:CA:30:BB:CD:43:0E:02:EC:05:2F:0D:B3:34:C8:8D
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Certificate issuer:       /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
Manifest number:          06D5
Signing time:             Tue 04 Nov 2025 22:08:25 +0000
Manifest this update:     Tue 04 Nov 2025 22:08:25 +0000
Manifest next update:     Tue 11 Nov 2025 22:08:25 +0000
Files and hashes:         1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: eSaGFzyBBdEnSwH7f+FeCIVxt1qZ5zql0HhZLAdBGoA=)
                          2: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: MxKWutQC0EcuRji5odYG9UP8P1SDvkoxib+Ch43rjh0=)
                          3: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: 1pVbnf50ph3sVf6UCkoKWrOgrUMC2r6DGZa8ts6UopE=)
                          4: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: yWCloSXl0jHUU4lKP4fqhekgcparm2OxTeAAa5K4mZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
                          rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
        Validity
            Not Before: Nov  4 22:08:25 2025 GMT
            Not After : Nov 11 22:08:25 2025 GMT
        Subject: CN=690a7959-d6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:90:32:71:e5:c7:f0:26:d4:5e:e1:57:43:
                    8c:ed:d4:f7:a4:d5:56:78:c8:f9:24:10:c4:ef:96:
                    61:a9:63:e8:31:58:b5:46:88:74:7c:7c:29:df:97:
                    82:df:0a:5b:22:9b:f1:56:b3:24:9a:95:11:7a:77:
                    ba:be:5f:27:68:d3:7c:e7:20:a1:de:f1:e5:d1:c9:
                    28:fe:4b:3c:13:b1:41:86:40:58:dc:9b:06:0a:34:
                    3c:80:75:ee:11:0c:7a:de:18:af:4e:6c:30:95:42:
                    6e:70:d9:67:1e:4a:79:47:a0:f4:72:d9:ff:fd:7e:
                    de:ed:de:6b:1c:93:d4:5a:fe:15:fe:07:04:a7:5d:
                    bf:71:8e:bf:c9:de:58:e3:59:53:57:b5:20:9e:bd:
                    e2:df:1f:9b:66:98:3f:70:df:f5:9c:59:5c:fc:05:
                    76:05:6b:4e:59:77:f9:c3:84:b5:dd:ae:78:7d:1e:
                    a2:8e:2c:0d:49:d4:41:fb:f6:bd:ec:f2:77:58:6e:
                    34:c6:61:49:f9:6d:d3:4f:61:e6:ea:72:86:c3:30:
                    8d:8d:10:9a:be:d7:fc:f7:70:0a:47:ad:ab:4d:db:
                    b2:0f:0b:2b:00:bb:dd:9c:b1:77:e1:95:59:90:89:
                    15:dd:ae:57:f8:b4:54:e6:2a:4f:a1:d7:ad:7f:75:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:7B:2C:A3:CA:30:BB:CD:43:0E:02:EC:05:2F:0D:B3:34:C8:8D
            X509v3 Authority Key Identifier:
                keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:32:62:af:66:f3:2d:c3:da:01:d2:b6:ce:1b:ab:f1:d9:
         5d:3d:8f:a0:28:58:32:cd:d8:6f:17:e3:56:fd:1c:12:87:42:
         2a:23:dc:48:fd:4b:7d:31:9a:61:29:2e:2c:8d:d4:98:bb:e5:
         b3:f0:de:ea:9e:4a:f1:cf:35:a8:d6:e3:94:09:cd:38:6c:f0:
         af:18:74:e7:b3:d9:2b:0a:e7:5d:9a:13:6b:b1:35:c5:34:b1:
         6c:12:b5:7d:b1:7d:86:99:fa:5e:26:bf:3e:d8:6c:d6:1f:e0:
         8c:16:f1:ef:0b:b4:43:96:4b:06:82:8a:08:ff:25:58:2c:7b:
         18:3e:b5:e0:85:ad:fa:59:88:62:03:b0:a1:02:4c:e6:74:c3:
         17:3d:bd:53:4c:0f:8e:16:d6:ab:78:f1:72:bb:6e:03:51:b8:
         a4:c7:2e:16:28:79:ef:48:8f:89:07:fa:8c:8b:be:ef:39:91:
         89:ca:95:43:73:60:db:7e:2f:62:3f:e8:66:ab:86:70:1a:c4:
         c1:00:f6:d1:d5:53:2b:ab:31:3d:65:f1:0f:04:75:99:7f:11:
         89:28:4b:b9:14:15:f2:86:fd:d2:57:d0:e3:47:af:ee:99:40:
         d8:99:a0:d0:2f:19:c9:cf:44:b8:44:bb:50:c4:9a:59:2a:af:
         ec:37:54:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5RkMxMTAvBgNVBAUTKEU0NThFQTMwNDAwOTg3M0M4ODg0QUY4OUFBOTMxRDQ4
QkE4NTlDRDAwHhcNMjUxMTA0MjIwODI1WhcNMjUxMTExMjIwODI1WjAYMRYwFAYD
VQQDEw02OTBhNzk1OS1kNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrqQMnHlx/Am1F7hV0OM7dT3pNVWeMj5JBDE75ZhqWPoMVi1Roh0fHwp35eC
3wpbIpvxVrMkmpURene6vl8naNN85yCh3vHl0cko/ks8E7FBhkBY3JsGCjQ8gHXu
EQx63hivTmwwlUJucNlnHkp5R6D0ctn//X7e7d5rHJPUWv4V/gcEp12/cY6/yd5Y
41lTV7Ugnr3i3x+bZpg/cN/1nFlc/AV2BWtOWXf5w4S13a54fR6ijiwNSdRB+/a9
7PJ3WG40xmFJ+W3TT2Hm6nKGwzCNjRCavtf893AKR62rTduyDwsrALvdnLF34ZVZ
kIkV3a5X+LRU5ipPodetf3XkqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhVeyyj
yjC7zUMOAuwFLw2zNMiNMB8GA1UdIwQYMBaAFORY6jBACYc8iISviaqTHUi6hZzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlGQy9ENjlGNzRCODc3
RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6eUloSy1KcXBNZFNMcUZu
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVGanFNRUFKaHp5SWhLLUpxcE1kU0xxRm5OQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjlGQy9ENjlGNzRCODc3RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6
eUloSy1KcXBNZFNMcUZuTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB22TJir2bzLcPaAdK2zhur8dldPY+gKFgyzdhvF+NW/RwSh0IqI9xI
/Ut9MZphKS4sjdSYu+Wz8N7qnkrxzzWo1uOUCc04bPCvGHTns9krCuddmhNrsTXF
NLFsErV9sX2GmfpeJr8+2GzWH+CMFvHvC7RDlksGgooI/yVYLHsYPrXgha36WYhi
A7ChAkzmdMMXPb1TTA+OFtarePFyu24DUbikxy4WKHnvSI+JB/qMi77vOZGJypVD
c2Dbfi9iP+hmq4ZwGsTBAPbR1VMrqzE9ZfEPBHWZfxGJKEu5FBXyhv3SV9DjR6/u
mUDYmaDQLxnJz0S4RLtQxJpZKq/sN1Tc
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:32 2025 by rpki-client