Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          xdfTfDzVZ7BFS9NR9P8zIOAsjBvCYEBw08bZbjn4f90=
Subject key identifier:   96:E2:EB:47:3C:81:F0:40:11:D3:E5:EC:7E:DA:C4:4E:02:92:6D:41
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       1369
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          12EA
Signing time:             Tue 04 Nov 2025 17:10:01 +0000
Manifest this update:     Tue 04 Nov 2025 17:10:00 +0000
Manifest next update:     Tue 11 Nov 2025 17:10:00 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: wny2K9JJ0KVQ5WutyBrrTUpF6nwD7LscddNmLvz6Tcw=)
                          2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
                          3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
                          4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
                          5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
                          6: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
                          7: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: pBVdrYkFMYbMM7FXnA5NEHBFD69jZzGLSHL7ZsHrvao=)
                          8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
                          9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
                          10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
                          11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
                          12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
                          13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
                          14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
                          15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4969 (0x1369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Nov  4 17:10:00 2025 GMT
            Not After : Nov 11 17:10:00 2025 GMT
        Subject: CN=690a3369-c143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:be:9f:21:47:1f:93:10:0d:9e:7c:64:25:
                    f3:97:20:6f:f9:9f:03:dd:b6:f5:65:e3:20:76:eb:
                    df:e0:89:1e:b6:fe:1e:6b:5d:3d:46:b2:86:94:86:
                    e4:a1:78:7d:8a:f1:f6:46:56:31:ae:13:d5:1b:c0:
                    8a:28:d9:af:e9:76:11:97:9c:97:c7:67:97:76:ec:
                    03:e4:1e:f6:e2:3a:6f:56:c7:0d:e3:03:58:32:e6:
                    75:fb:61:d7:f4:f5:b0:6c:12:d7:d3:55:a4:d1:8b:
                    ff:9e:b1:0c:8c:ba:ca:e6:64:06:ed:92:74:88:fc:
                    ed:ed:4d:c0:ea:8e:a6:2c:69:b6:7c:81:96:3a:cb:
                    de:ea:c7:b7:7d:6d:07:fd:26:d8:c4:23:50:58:cd:
                    80:63:55:3b:64:48:2f:04:da:a1:79:c2:b3:42:71:
                    bd:c6:a6:66:0a:39:8e:0d:72:85:bd:65:b0:ef:4a:
                    1c:4d:e6:75:fa:c5:db:9b:58:45:d9:1c:b9:81:c0:
                    be:40:8b:8e:43:5b:29:43:a7:ce:a7:5f:9a:f8:ea:
                    31:69:cd:34:39:da:25:c3:9f:57:0f:75:f5:8e:12:
                    90:86:8a:ba:b8:53:6e:50:52:5b:37:8b:9d:93:cc:
                    cd:66:6a:43:86:34:f8:66:3b:c7:cb:d8:fb:0b:43:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E2:EB:47:3C:81:F0:40:11:D3:E5:EC:7E:DA:C4:4E:02:92:6D:41
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:0c:29:d2:01:95:db:72:56:17:eb:96:08:03:40:ab:7e:
         69:0d:52:f8:57:95:bf:1f:20:76:d3:67:a0:2b:2b:46:96:88:
         13:fa:4f:6d:6f:cb:51:d6:71:b8:26:32:b4:1e:01:e8:a5:70:
         60:56:b5:08:e2:31:d1:0f:58:ef:fe:4c:4e:21:f5:c6:b9:a7:
         29:c0:22:ab:f0:da:d5:d3:76:a5:d6:b8:76:4f:15:17:6d:dd:
         a2:51:1b:1c:99:5a:c0:a6:ad:8a:6e:7e:a8:77:26:23:c6:04:
         cd:17:2e:24:bb:ea:73:85:15:7c:21:5d:2c:ed:a4:d3:5b:6f:
         b0:bd:3f:58:af:5b:a5:93:c2:dd:d9:21:40:3c:b2:1f:2a:d4:
         ef:fc:de:b5:ca:9c:21:dd:8d:53:2d:a2:23:3a:48:10:ac:af:
         97:15:2a:73:ba:64:28:6c:7f:78:4e:c4:66:75:f9:83:08:0c:
         25:bc:b7:b4:84:fa:71:2e:95:30:33:22:48:67:b4:b4:30:77:
         ba:a0:74:55:00:e2:72:a5:4d:df:60:e6:61:9a:61:01:5e:b2:
         6a:b5:dc:f4:fe:d0:bd:50:f9:59:db:9d:9f:80:92:73:5a:63:
         0d:dd:78:8e:75:1b:d5:59:df:98:b0:e8:65:66:f4:e4:cd:c2:
         c5:9c:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:07 2025 by rpki-client