Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
File:                     j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json)
Hash identifier:          aAZuEXdz64A8NfdBuZQxe7c5JxNEi0ik6+WaDfuyNoU=
Subject key identifier:   46:91:03:44:D1:E0:E2:D3:86:97:11:F3:7F:86:51:7D:5B:8B:2C:41
Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Certificate issuer:       /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Certificate serial:       0925
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
Manifest number:          0B32
Signing time:             Sun 02 Nov 2025 20:14:27 +0000
Manifest this update:     Sun 02 Nov 2025 20:14:27 +0000
Manifest next update:     Sun 09 Nov 2025 20:14:27 +0000
Files and hashes:         1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: ioyTWOezzaWkSqhG7FxF4dnvF73VuiPtzYgMCdecUm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
        Validity
            Not Before: Nov  2 20:14:27 2025 GMT
            Not After : Nov  9 20:14:27 2025 GMT
        Subject: CN=6907bba3-d515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:00:03:09:4d:b4:d2:9a:3f:18:a0:d3:25:
                    6a:a6:ce:6e:47:0e:71:2b:4c:6d:cb:b1:22:06:b7:
                    dc:bc:bd:49:7f:58:41:b2:e6:e3:4f:06:cd:0f:dd:
                    18:5a:15:2c:47:88:8c:3f:c9:ba:c6:94:ea:e6:d0:
                    87:52:4a:9e:b1:cf:da:aa:43:a1:d7:df:a5:bf:1a:
                    d3:0b:64:ec:9f:07:75:00:0a:52:be:d7:95:00:50:
                    20:28:3d:11:9a:73:82:aa:79:ea:a8:24:74:91:22:
                    e0:30:5b:dc:5f:27:e1:4a:21:7d:82:a3:b5:93:05:
                    db:8b:38:a3:75:93:ba:5e:76:95:70:4b:8d:3c:a5:
                    62:f0:6c:f3:9b:1d:d0:26:f3:10:fb:4f:09:31:9b:
                    c8:f2:d0:4a:b9:2a:fc:c7:b3:e1:28:cb:23:95:e1:
                    d2:7b:99:5c:a5:89:95:3f:6c:1c:28:b1:96:fe:f6:
                    56:42:0d:7f:4a:83:2e:2c:fa:ae:39:bf:9f:38:d1:
                    74:c2:d9:da:c2:0e:28:30:45:35:4c:0c:79:38:4a:
                    e8:5e:a9:02:4f:18:9c:dc:09:c6:df:fc:c7:70:0b:
                    ba:9a:5a:7d:8e:a0:2b:bd:15:0c:a0:eb:22:d3:e6:
                    ab:7e:99:b1:b3:71:bf:a2:15:c2:80:fa:a0:1d:bd:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:03:44:D1:E0:E2:D3:86:97:11:F3:7F:86:51:7D:5B:8B:2C:41
            X509v3 Authority Key Identifier:
                keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:62:8e:d8:3a:bd:45:57:a9:4d:30:a4:5c:5a:89:b3:6f:18:
         a6:d1:c7:fb:6e:cd:7a:87:a4:0b:b0:d8:95:7c:12:71:dd:85:
         43:4f:da:1b:35:af:d3:f9:9d:95:23:e0:f7:b4:e6:7b:45:c6:
         a3:0f:df:cf:f6:db:fa:cd:31:ad:09:7c:ba:fd:0e:1e:a0:63:
         65:74:37:81:30:b2:16:3f:70:7f:7b:40:39:8a:c6:6f:2c:51:
         38:71:59:28:5b:83:79:5f:89:22:bd:39:d6:b2:5c:66:15:e8:
         75:21:c6:c1:8c:33:4d:1e:c3:7f:37:78:4a:f9:13:e3:45:1e:
         e5:7c:e5:fb:9f:63:57:16:ab:bc:b6:19:c2:4f:1d:f5:12:e6:
         43:9d:21:df:35:ff:e1:9e:de:0b:d9:86:cc:ec:fc:cd:69:98:
         1b:21:52:69:db:14:12:ed:04:b8:aa:11:0f:3f:ae:a6:ac:2d:
         8d:53:93:ed:bf:2f:59:22:18:7d:c7:51:53:68:1f:41:8b:f7:
         bd:df:b9:ad:ed:7e:7a:d1:db:09:c6:e2:fc:b4:d7:34:07:ff:
         13:e2:42:2e:97:97:c4:6b:4a:7c:83:0f:a9:40:0d:8b:b0:64:
         3a:b7:0d:79:a7:ac:04:e5:1b:27:b9:a8:70:a6:08:93:86:09:
         a1:72:5e:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE3RTYxMTAvBgNVBAUTKDhGOEI1QUZDMkQzMzg4REREMjUxOEFFOUEwNzM5MDhG
OEZBNUEwQTUwHhcNMjUxMTAyMjAxNDI3WhcNMjUxMTA5MjAxNDI3WjAYMRYwFAYD
VQQDEw02OTA3YmJhMy1kNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzEAAwlNtNKaPxig0yVqps5uRw5xK0xty7EiBrfcvL1Jf1hBsubjTwbND90Y
WhUsR4iMP8m6xpTq5tCHUkqesc/aqkOh19+lvxrTC2Tsnwd1AApSvteVAFAgKD0R
mnOCqnnqqCR0kSLgMFvcXyfhSiF9gqO1kwXbizijdZO6XnaVcEuNPKVi8Gzzmx3Q
JvMQ+08JMZvI8tBKuSr8x7PhKMsjleHSe5lcpYmVP2wcKLGW/vZWQg1/SoMuLPqu
Ob+fONF0wtnawg4oMEU1TAx5OEroXqkCTxic3AnG3/zHcAu6mlp9jqArvRUMoOsi
0+arfpmxs3G/ohXCgPqgHb0H3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaRA0TR
4OLThpcR83+GUX1biyxBMB8GA1UdIwQYMBaAFI+LWvwtM4jd0lGK6aBzkI+PpaCl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz
QjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0MwemlOM1NVWXJwb0hPUWo0LWxv
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o0dGFfQzB6aU4zU1VZcnBvSE9RajQtbG9LVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0MwemlO
M1NVWXJwb0hPUWo0LWxvS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgYo7YOr1FV6lNMKRcWomzbxim0cf7bs16h6QLsNiVfBJx3YVDT9ob
Na/T+Z2VI+D3tOZ7RcajD9/P9tv6zTGtCXy6/Q4eoGNldDeBMLIWP3B/e0A5isZv
LFE4cVkoW4N5X4kivTnWslxmFeh1IcbBjDNNHsN/N3hK+RPjRR7lfOX7n2NXFqu8
thnCTx31EuZDnSHfNf/hnt4L2YbM7PzNaZgbIVJp2xQS7QS4qhEPP66mrC2NU5Pt
vy9ZIhh9x1FTaB9Bi/e937mt7X560dsJxuL8tNc0B/8T4kIul5fEa0p8gw+pQA2L
sGQ6tw15p6wE5RsnuahwpgiThgmhcl4g
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:03:37 2025 by rpki-client