Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
File:                     FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json)
Hash identifier:          htVjjH1S2SY00nxZA9feofc9d5dvKSe0gSHCM//Yh/Q=
Subject key identifier:   F0:A8:5C:7A:A6:55:5C:9A:D6:C0:CE:6C:49:86:79:17:5A:AD:D7:EE
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0B79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
Manifest number:          0B62
Signing time:             Sun 02 Nov 2025 19:05:12 +0000
Manifest this update:     Sun 02 Nov 2025 19:05:11 +0000
Manifest next update:     Sun 09 Nov 2025 19:05:11 +0000
Files and hashes:         1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: D+ypMqgaloSyRKFv8g1/4EP4zyKLc6xeuoN+ZDltm9Q=)
                          2: 9D999E187CA811F0AE15ED6EC4F9AE02.roa (hash: J/Y6p2/yKRXDBc4lXrVgkXTkn/NmrMfJzbfX/5O/hQo=)
                          3: B285AC807CA911F09D442F15C4F9AE02.roa (hash: UX2zMGfv+WxZ0voK+QDzKZn1ZKk782a4iAXgqqE0IQo=)
                          4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2937 (0xb79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Nov  2 19:05:11 2025 GMT
            Not After : Nov  9 19:05:11 2025 GMT
        Subject: CN=6907ab68-32a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:0e:51:79:75:97:15:6b:44:7a:ae:d1:a7:
                    d5:60:ff:db:bd:47:a7:69:3c:c8:0b:4e:37:99:1b:
                    cb:02:ff:ca:54:cf:21:ff:da:30:61:4a:5d:b1:a1:
                    17:a1:8b:23:dd:4d:81:e3:0d:96:7e:77:96:bf:da:
                    53:14:d1:99:a3:1a:ec:c3:c5:69:e1:90:6e:6b:37:
                    1e:ef:53:d0:48:6c:a7:e3:d7:65:79:23:bd:3a:fa:
                    83:76:2d:0e:61:e2:64:86:18:e9:c3:52:2b:3e:c9:
                    a8:9a:81:03:42:42:ff:f3:e1:32:5d:48:ea:6c:23:
                    6b:3a:71:75:7f:c6:d8:44:3e:24:c6:e2:47:d3:17:
                    92:62:77:3c:53:e7:83:50:3b:4a:80:36:ab:37:16:
                    cd:03:61:2e:51:92:c3:db:81:0e:a7:f3:75:58:b0:
                    b6:64:ee:5e:e9:4a:83:77:a9:98:a5:3f:84:a6:a4:
                    38:8b:68:6d:f6:43:b3:3c:05:d2:64:42:e9:fe:e7:
                    09:ab:18:7c:ab:f5:c5:aa:86:cc:b9:3b:22:65:c9:
                    1e:70:7b:3a:82:37:72:43:f8:2f:87:64:12:86:9f:
                    e9:f7:e8:3b:1c:79:c6:46:93:1d:03:56:90:57:5f:
                    de:36:5d:d0:eb:15:53:4a:93:2b:e0:3b:28:99:ae:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A8:5C:7A:A6:55:5C:9A:D6:C0:CE:6C:49:86:79:17:5A:AD:D7:EE
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:3e:05:b1:f5:bc:4c:5f:63:7f:a9:89:7c:48:c3:f3:cf:f1:
         bd:1c:26:b9:3e:27:71:ad:3c:99:81:af:f9:2b:bf:4f:fa:96:
         fc:47:fd:39:81:9a:d3:00:1f:15:37:22:95:4f:de:a6:d8:a0:
         b7:99:e8:1e:5f:f9:7f:04:04:42:c6:5d:ed:7b:ca:f3:1b:66:
         9d:05:2f:94:7c:3c:8b:7a:2a:0a:cc:15:c6:77:81:cb:15:1c:
         99:ab:de:cc:a8:2f:11:45:9f:69:dc:1c:c1:81:50:8e:96:fd:
         02:57:41:8e:16:9b:78:6a:fd:9d:13:ce:24:52:69:3f:98:68:
         b1:05:74:88:0b:d6:47:b8:5e:bb:67:bb:5e:eb:3b:42:12:fa:
         00:1a:70:ff:04:41:60:d8:f8:59:a6:da:4b:5e:25:ae:08:a2:
         26:1d:37:9b:d2:91:e7:52:73:d7:8f:67:7b:73:a9:8b:bf:e3:
         cf:91:c2:47:11:a6:e7:4c:fb:0f:38:4a:b7:b6:82:ea:db:aa:
         70:d2:39:38:f1:9a:f0:be:0d:4a:6d:bd:06:67:95:28:53:b8:
         aa:a7:c8:a8:71:47:f8:57:89:b0:93:89:b7:9f:85:73:ee:10:
         19:53:30:49:c8:38:e8:83:7d:b3:ba:fa:9e:95:ec:e3:d2:9c:
         27:63:5a:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF
M0RBRDE1NzEwHhcNMjUxMTAyMTkwNTExWhcNMjUxMTA5MTkwNTExWjAYMRYwFAYD
VQQDEw02OTA3YWI2OC0zMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwx4OUXl1lxVrRHqu0afVYP/bvUenaTzIC043mRvLAv/KVM8h/9owYUpdsaEX
oYsj3U2B4w2WfneWv9pTFNGZoxrsw8Vp4ZBuazce71PQSGyn49dleSO9OvqDdi0O
YeJkhhjpw1IrPsmomoEDQkL/8+EyXUjqbCNrOnF1f8bYRD4kxuJH0xeSYnc8U+eD
UDtKgDarNxbNA2EuUZLD24EOp/N1WLC2ZO5e6UqDd6mYpT+EpqQ4i2ht9kOzPAXS
ZELp/ucJqxh8q/XFqobMuTsiZckecHs6gjdyQ/gvh2QShp/p9+g7HHnGRpMdA1aQ
V1/eNl3Q6xVTSpMr4Dsoma4A/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCoXHqm
VVya1sDObEmGeRdardfuMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw
RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy
S3ZzSU95TV85bHJqMnRGWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDKPgWx9bxMX2N/qYl8SMPzz/G9HCa5PidxrTyZga/5K79P+pb8R/05
gZrTAB8VNyKVT96m2KC3megeX/l/BARCxl3te8rzG2adBS+UfDyLeioKzBXGd4HL
FRyZq97MqC8RRZ9p3BzBgVCOlv0CV0GOFpt4av2dE84kUmk/mGixBXSIC9ZHuF67
Z7te6ztCEvoAGnD/BEFg2PhZptpLXiWuCKImHTeb0pHnUnPXj2d7c6mLv+PPkcJH
EabnTPsPOEq3toLq26pw0jk48Zrwvg1Kbb0GZ5UoU7iqp8iocUf4V4mwk4m3n4Vz
7hAZUzBJyDjog32zuvqelezj0pwnY1ry
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:01 2025 by rpki-client