Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
File:                     M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json)
Hash identifier:          H9IGV2i13dVQToBkkX2qEEop9v1D6r0ccSlg7TRFFxk=
Subject key identifier:   1B:00:A9:84:36:5D:38:1B:95:43:2E:56:6F:0C:D0:DE:A9:EA:6D:73
Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
Certificate issuer:       /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Certificate serial:       34FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
Manifest number:          34ED
Signing time:             Tue 04 Nov 2025 14:42:51 +0000
Manifest this update:     Tue 04 Nov 2025 14:42:51 +0000
Manifest next update:     Tue 11 Nov 2025 14:42:51 +0000
Files and hashes:         1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: ENfisjrEesNPpXIbhboNP/dIl3P2da4etAeZp08aInI=)
                          2: A2A2D1B6573411F09F6B9016C4F9AE02.roa (hash: e1fS+JUr5OLbZbCvOqxxDH4+vhnq0CCS/TLIlGYLHhA=)
                          3: 6F58AA34687C11F08C69EA64C4F9AE02.roa (hash: lvbDAxOQ41m3fnpVcOJWBX3CzhcnEIm/Ym/qa3pTN/Q=)
                          4: 036356DC573611F08FD0E718C4F9AE02.roa (hash: dAcM+WPTq+lpF6zBrb9QFub64ROSS+oF3Dzc2JF12yY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
                          rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13567 (0x34ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
        Validity
            Not Before: Nov  4 14:42:51 2025 GMT
            Not After : Nov 11 14:42:51 2025 GMT
        Subject: CN=690a10eb-882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:71:e3:33:89:b5:ed:63:03:3a:e3:b8:f7:
                    65:4e:9b:ca:0c:8f:95:a4:74:64:af:ec:91:7e:8b:
                    6c:20:1a:5f:cb:2e:d8:f9:74:70:a8:8d:8e:17:96:
                    c6:1a:f3:8d:cc:de:04:ad:4c:6e:e7:28:a7:35:3d:
                    25:a4:c3:49:cb:76:92:23:29:f0:90:2c:01:b2:ad:
                    29:f7:79:2c:cd:be:1b:80:72:c9:a1:7e:b8:02:97:
                    6b:4b:46:9b:0e:63:11:45:69:78:39:a8:ff:66:33:
                    52:8e:b2:c6:77:c5:b1:48:5b:3f:b9:e7:e9:53:58:
                    15:7a:8b:96:64:54:d5:80:27:f7:59:c5:12:0b:f3:
                    4b:bf:a9:9f:2b:4d:97:68:ad:e8:d7:5a:ae:37:df:
                    ce:20:2b:75:85:0b:7d:a4:ac:76:10:b5:72:40:e3:
                    40:2c:fe:49:99:ff:ca:52:a4:3f:e7:e2:40:de:6c:
                    78:67:06:e5:82:64:fe:7e:56:1e:5f:8c:72:81:38:
                    3e:1a:9e:f4:18:37:6b:35:cb:cd:2b:6c:27:5c:ff:
                    70:25:59:15:27:7d:71:c6:2d:31:9f:80:a0:86:a3:
                    1b:f6:da:22:8f:14:c3:71:82:41:22:91:f2:4d:5f:
                    ac:3b:a6:c6:f0:8b:84:9b:ed:94:07:56:37:8b:63:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:A9:84:36:5D:38:1B:95:43:2E:56:6F:0C:D0:DE:A9:EA:6D:73
            X509v3 Authority Key Identifier:
                keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:26:a2:aa:95:92:b5:5c:53:e4:d3:08:30:88:60:37:64:0d:
         50:c2:5c:aa:9f:53:89:a9:0a:61:77:6d:54:39:62:fe:50:0b:
         fd:61:bd:c3:87:72:57:55:fe:00:ac:0d:38:df:66:dc:b0:a8:
         cb:70:5d:01:47:8c:8c:e1:56:ab:37:14:51:63:ad:6d:89:ee:
         1b:8c:f1:18:04:26:5b:11:14:ab:2b:2c:53:8f:cc:9f:59:30:
         37:e2:65:65:28:52:08:a7:54:8e:03:a8:2f:6b:ef:5d:22:c6:
         cf:d5:05:7f:c8:61:b1:ff:97:6b:2f:53:9b:28:46:b9:b7:3b:
         79:41:e7:cd:6c:71:26:b3:f0:a9:cc:90:1f:ac:f2:0b:11:53:
         aa:c4:81:f7:c8:5c:46:ac:f6:a2:a5:f5:86:34:a5:0a:a7:fd:
         ee:b6:b3:ed:0d:82:61:89:02:3c:54:90:8e:76:8e:4b:d6:c9:
         a5:21:79:d5:39:24:18:7e:cc:e5:2b:38:3b:59:f3:02:bd:d4:
         74:d3:45:d8:9c:d1:75:15:6b:e8:5a:24:01:c4:fd:67:b8:90:
         31:18:11:7a:8d:7f:25:b7:80:e2:0b:36:51:f4:24:b2:17:81:
         06:50:4d:63:66:5b:82:cf:7a:87:fc:6e:0a:93:c8:6d:44:7d:
         e7:04:9d:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz
M0UzRDI0NzkwHhcNMjUxMTA0MTQ0MjUxWhcNMjUxMTExMTQ0MjUxWjAYMRYwFAYD
VQQDEw02OTBhMTBlYi04ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3+Bx4zOJte1jAzrjuPdlTpvKDI+VpHRkr+yRfotsIBpfyy7Y+XRwqI2OF5bG
GvONzN4ErUxu5yinNT0lpMNJy3aSIynwkCwBsq0p93kszb4bgHLJoX64ApdrS0ab
DmMRRWl4Oaj/ZjNSjrLGd8WxSFs/uefpU1gVeouWZFTVgCf3WcUSC/NLv6mfK02X
aK3o11quN9/OICt1hQt9pKx2ELVyQONALP5Jmf/KUqQ/5+JA3mx4ZwblgmT+flYe
X4xygTg+Gp70GDdrNcvNK2wnXP9wJVkVJ31xxi0xn4CghqMb9toijxTDcYJBIpHy
TV+sO6bG8IuEm+2UB1Y3i2PixQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsAqYQ2
XTgblUMuVm8M0N6p6m1zMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE
OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK
SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj
M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0JqKqlZK1XFPk0wgwiGA3ZA1Qwlyqn1OJqQphd21UOWL+UAv9Yb3D
h3JXVf4ArA0432bcsKjLcF0BR4yM4VarNxRRY61tie4bjPEYBCZbERSrKyxTj8yf
WTA34mVlKFIIp1SOA6gva+9dIsbP1QV/yGGx/5drL1ObKEa5tzt5QefNbHEms/Cp
zJAfrPILEVOqxIH3yFxGrPaipfWGNKUKp/3utrPtDYJhiQI8VJCOdo5L1smlIXnV
OSQYfszlKzg7WfMCvdR000XYnNF1FWvoWiQBxP1nuJAxGBF6jX8lt4DiCzZR9CSy
F4EGUE1jZluCz3qH/G4Kk8htRH3nBJ18
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:55 2025 by rpki-client