Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          doiuHRFGHucFR0CDfFTCNIjTMx36DNiauBGxwRJUfeM=
Subject key identifier:   15:AA:AA:3D:FD:68:DB:25:5C:50:AD:99:CA:16:87:0B:8C:81:BD:8B
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          DD
Signing time:             Wed 05 Nov 2025 05:42:38 +0000
Manifest this update:     Wed 05 Nov 2025 05:42:37 +0000
Manifest next update:     Wed 12 Nov 2025 05:42:37 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: rJaB5ImeC9jJ98DdA4iWBbra0O2XVoVvIhjoATScXj8=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: CaDrsHhMr2SW3agEhOrGpPTbVn2zv/JRiQ35B1c4T/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: Nov  5 05:42:37 2025 GMT
            Not After : Nov 12 05:42:37 2025 GMT
        Subject: CN=690ae3cd-b9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:68:2d:08:cc:81:07:6c:eb:94:63:42:b4:
                    42:6b:fc:9f:75:b3:8f:c3:28:b4:c6:68:85:65:09:
                    f3:47:37:87:f6:54:4a:21:c6:a7:37:3f:0a:8f:17:
                    1a:58:8c:a2:93:f0:6f:53:35:66:df:a3:d3:38:d8:
                    10:fd:ea:b2:bb:52:62:06:cb:17:2b:3c:bd:ca:b8:
                    6c:92:b3:5f:ff:7f:59:a1:c4:e2:e1:dc:5c:3a:94:
                    55:0d:c0:5f:37:db:24:ea:dc:02:98:79:93:f4:43:
                    9d:7c:ac:fc:be:d0:79:c9:a8:bf:33:2c:7b:42:f5:
                    90:42:fe:74:1f:ff:14:e8:5c:7a:a1:72:0e:1a:92:
                    0d:6d:ed:b1:83:1d:22:c3:88:26:ad:5b:c4:a5:da:
                    10:0a:ab:81:70:66:0b:2a:6e:de:3f:3f:6e:04:fa:
                    20:dc:c4:70:8d:6a:40:ec:6a:fc:3f:2b:83:eb:e9:
                    3c:8d:a0:54:29:5b:4d:92:d6:5f:1e:70:4a:5d:9d:
                    f8:27:2f:5a:4b:b4:6f:19:e8:d3:1f:ff:4d:8c:2e:
                    5c:d3:81:25:bd:be:7b:40:94:66:87:84:1a:6c:e1:
                    e6:b9:f8:71:18:b0:5c:1f:38:87:89:d7:ae:0b:dd:
                    d0:87:63:9e:e4:81:ae:9d:e2:ba:a6:7c:c4:27:a4:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:AA:3D:FD:68:DB:25:5C:50:AD:99:CA:16:87:0B:8C:81:BD:8B
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:c3:54:3b:09:ce:b1:cc:59:59:22:4e:b1:4d:89:bb:94:
         08:ab:2b:f7:0f:24:2b:b5:f2:4a:b3:78:3e:ef:55:d0:0e:33:
         83:16:bc:5d:25:d5:d5:24:54:3d:d5:89:1d:03:bf:b5:86:b6:
         c4:4e:18:4f:03:59:57:02:19:36:42:4f:eb:90:09:7c:c2:13:
         e6:ed:0a:90:ab:9b:b0:6e:de:ed:60:d6:f6:c5:f5:44:87:14:
         e9:dd:61:1c:02:34:eb:3c:68:c3:7e:0e:42:cc:c8:0a:b1:ac:
         22:b2:b9:1e:24:ba:46:82:aa:5a:d5:b4:fd:03:f2:30:fc:99:
         cc:c3:7d:13:3a:06:4c:66:b8:0c:83:06:80:a4:a2:e4:c1:47:
         91:de:91:be:b6:b0:89:8d:2f:93:b4:3b:2b:10:4d:69:b5:f1:
         fd:5a:36:98:bb:36:73:a5:a2:d4:ce:f7:65:60:e7:19:8a:fd:
         6a:24:aa:77:40:4d:09:ed:4d:27:85:ba:1d:21:08:9f:fb:bf:
         df:4f:61:e0:01:cc:50:6b:5c:0b:01:51:02:f5:55:c0:d5:ea:
         d5:7e:21:7a:66:e1:1d:72:2e:42:7f:f4:16:5a:83:dc:8b:c3:
         d1:44:56:62:cf:59:35:06:eb:86:15:6e:22:7c:23:e6:12:3a:
         94:c9:0f:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy
QjFENEQzNjQwHhcNMjUxMTA1MDU0MjM3WhcNMjUxMTEyMDU0MjM3WjAYMRYwFAYD
VQQDEw02OTBhZTNjZC1iOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqL9oLQjMgQds65RjQrRCa/yfdbOPwyi0xmiFZQnzRzeH9lRKIcanNz8Kjxca
WIyik/BvUzVm36PTONgQ/eqyu1JiBssXKzy9yrhskrNf/39ZocTi4dxcOpRVDcBf
N9sk6twCmHmT9EOdfKz8vtB5yai/Myx7QvWQQv50H/8U6Fx6oXIOGpINbe2xgx0i
w4gmrVvEpdoQCquBcGYLKm7ePz9uBPog3MRwjWpA7Gr8PyuD6+k8jaBUKVtNktZf
HnBKXZ34Jy9aS7RvGejTH/9NjC5c04Elvb57QJRmh4QabOHmufhxGLBcHziHideu
C93Qh2Oe5IGuneK6pnzEJ6QzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWqqj39
aNslXFCtmcoWhwuMgb2LMB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5
MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTY5NS85NkJERjM0QTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1
a1RleE9UMUtqUG9ySFUwMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1X8NUOwnOscxZWSJOsU2Ju5QIqyv3DyQrtfJKs3g+71XQDjODFrxd
JdXVJFQ91YkdA7+1hrbEThhPA1lXAhk2Qk/rkAl8whPm7QqQq5uwbt7tYNb2xfVE
hxTp3WEcAjTrPGjDfg5CzMgKsawisrkeJLpGgqpa1bT9A/Iw/JnMw30TOgZMZrgM
gwaApKLkwUeR3pG+trCJjS+TtDsrEE1ptfH9WjaYuzZzpaLUzvdlYOcZiv1qJKp3
QE0J7U0nhbodIQif+7/fT2HgAcxQa1wLAVEC9VXA1erVfiF6ZuEdci5Cf/QWWoPc
i8PRRFZiz1k1BuuGFW4ifCPmEjqUyQ+d
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:49 2025 by rpki-client