Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
File:                     M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json)
Hash identifier:          Be6DRmvGpmEtZk+YSz2fBvpd1x9TYZ6lvu/Ea9WGoMM=
Subject key identifier:   8A:BE:90:10:FD:31:DF:59:DD:BB:E7:6E:9C:C8:FE:A9:ED:6B:E9:5C
Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A
Certificate issuer:       /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
Certificate serial:       0380
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
Manifest number:          0368
Signing time:             Wed 05 Nov 2025 01:04:14 +0000
Manifest this update:     Wed 05 Nov 2025 01:04:14 +0000
Manifest next update:     Wed 12 Nov 2025 01:04:14 +0000
Files and hashes:         1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: VOXSRvoXMmbobf3H0Ozp3L0z9qNUL+i5l56eKTqmfWw=)
                          2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: hpv7gHEkBMfI8IhiYswhvBmYC+76f/Bx92ErHlGJsZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl
                          rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
        Validity
            Not Before: Nov  5 01:04:14 2025 GMT
            Not After : Nov 12 01:04:14 2025 GMT
        Subject: CN=690aa28e-ac39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:ca:27:19:91:5d:51:b7:22:16:26:b6:bd:
                    86:53:e6:20:61:96:37:40:ec:f9:ec:56:d4:85:ba:
                    fd:37:74:57:21:fc:81:da:be:55:0e:5b:03:30:d0:
                    d9:a6:db:5a:b8:3d:49:fb:93:89:e1:a2:e9:be:fc:
                    93:e0:de:2d:1b:fe:97:f0:c1:ea:92:fa:91:70:79:
                    9b:4e:05:fd:4f:45:4d:79:b7:6d:2c:41:5c:ff:ec:
                    c7:50:73:8b:ce:d3:35:e9:5b:52:f7:e7:1c:88:e4:
                    4e:17:27:76:d0:e3:a1:3d:a5:90:6a:8f:b0:f7:5e:
                    d5:e5:4a:00:20:9b:52:63:ca:85:05:bb:a4:fe:44:
                    c4:12:bf:2a:88:a7:78:c7:85:81:43:84:70:b1:96:
                    63:4f:5a:aa:6f:4f:3e:1a:b7:13:f2:a5:47:7f:55:
                    32:84:88:3e:9d:7e:d2:0e:c5:bb:eb:a1:62:25:83:
                    6f:87:0a:9d:26:0b:88:c8:73:2d:87:53:e9:93:42:
                    4e:55:41:1d:53:88:92:2a:86:56:d8:e0:13:c3:8f:
                    19:fc:3f:09:b6:a7:b6:5a:5d:bf:f1:82:6f:82:59:
                    5b:a4:b9:36:24:54:bf:b6:a3:9b:64:3c:08:34:7e:
                    ef:88:ef:aa:37:1c:e6:60:c2:46:33:9e:4d:6a:89:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:90:10:FD:31:DF:59:DD:BB:E7:6E:9C:C8:FE:A9:ED:6B:E9:5C
            X509v3 Authority Key Identifier:
                keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:10:8f:64:c2:22:ef:35:7b:8a:5d:94:60:e0:17:d3:d4:59:
         f6:7d:e8:cc:d1:97:4c:dd:ab:b2:01:98:c7:0a:30:8c:36:1a:
         58:dc:8d:74:37:f6:a2:24:97:6a:5e:9a:c7:83:9f:e1:59:1c:
         1a:f1:01:b8:a6:38:20:92:89:73:68:b6:4a:ed:06:f6:bf:db:
         f1:da:bb:fc:62:de:5c:d8:5b:fa:26:5f:e7:40:73:4b:17:ba:
         b9:15:0b:b3:44:46:ef:d3:5e:01:a2:72:ce:10:6f:61:7a:8a:
         c8:8c:21:7b:52:83:a3:cf:19:6d:ec:a2:b8:59:32:3b:94:61:
         b5:a4:40:52:e4:00:9c:83:b8:f9:d6:7a:84:0d:bf:71:0e:ea:
         bd:06:29:21:60:03:6a:12:65:a4:fc:90:54:32:dd:82:03:73:
         8a:75:24:e6:92:66:37:f1:b7:7b:cf:cf:17:a9:49:b4:af:70:
         4c:02:40:36:41:84:75:fe:98:56:d6:cf:e8:e3:23:68:cd:96:
         3b:1f:6e:e3:6d:dc:2a:73:01:76:e2:53:29:e7:40:04:62:31:
         48:e4:69:65:e1:ca:66:38:90:5c:97:ec:f8:af:9b:a1:84:12:
         c4:f9:7e:71:d0:72:af:ae:56:5b:bc:46:28:23:2b:75:70:cb:
         20:70:0d:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2RTIxMTAvBgNVBAUTKDMzNDRBNDM5NjBEQzRBNDc3M0JCMURGMEZGMDM4REY0
MTYwRjM1N0EwHhcNMjUxMTA1MDEwNDE0WhcNMjUxMTEyMDEwNDE0WjAYMRYwFAYD
VQQDEw02OTBhYTI4ZS1hYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzbHKJxmRXVG3IhYmtr2GU+YgYZY3QOz57FbUhbr9N3RXIfyB2r5VDlsDMNDZ
pttauD1J+5OJ4aLpvvyT4N4tG/6X8MHqkvqRcHmbTgX9T0VNebdtLEFc/+zHUHOL
ztM16VtS9+cciOROFyd20OOhPaWQao+w917V5UoAIJtSY8qFBbuk/kTEEr8qiKd4
x4WBQ4RwsZZjT1qqb08+GrcT8qVHf1UyhIg+nX7SDsW766FiJYNvhwqdJguIyHMt
h1Ppk0JOVUEdU4iSKoZW2OATw48Z/D8Jtqe2Wl2/8YJvgllbpLk2JFS/tqObZDwI
NH7viO+qNxzmYMJGM55NaolLDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq+kBD9
Md9Z3bvnbpzI/qnta+lcMB8GA1UdIwQYMBaAFDNEpDlg3EpHc7sd8P8DjfQWDzV6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFMi8yMjU5QTE4NkQ4
NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1NrZHp1eDN3X3dPTjlCWVBO
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00wU2tPV0RjU2tkenV4M3dfd09OOUJZUE5Yby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzZFMi8yMjU5QTE4NkQ4NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1Nr
ZHp1eDN3X3dPTjlCWVBOWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoEI9kwiLvNXuKXZRg4BfT1Fn2fejM0ZdM3auyAZjHCjCMNhpY3I10
N/aiJJdqXprHg5/hWRwa8QG4pjggkolzaLZK7Qb2v9vx2rv8Yt5c2Fv6Jl/nQHNL
F7q5FQuzREbv014BonLOEG9heorIjCF7UoOjzxlt7KK4WTI7lGG1pEBS5ACcg7j5
1nqEDb9xDuq9BikhYANqEmWk/JBUMt2CA3OKdSTmkmY38bd7z88XqUm0r3BMAkA2
QYR1/phW1s/o4yNozZY7H27jbdwqcwF24lMp50AEYjFI5Gll4cpmOJBcl+z4r5uh
hBLE+X5x0HKvrlZbvEYoIyt1cMsgcA1c
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:58 2025 by rpki-client