Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File:                     J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier:          arlfJcp8mZvPJhxql/Bl6yp/wm4TAO6OwJgb0QlvIZA=
Subject key identifier:   53:73:CC:ED:56:6D:1E:87:E4:FE:7A:5E:5E:F2:A3:03:5D:B9:A9:56
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer:       /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial:       0AAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number:          0A9F
Signing time:             Sun 02 Nov 2025 19:30:49 +0000
Manifest this update:     Sun 02 Nov 2025 19:30:48 +0000
Manifest next update:     Sun 09 Nov 2025 19:30:48 +0000
Files and hashes:         1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: X1d3lM1o+GCu21MQ4jjMLdAAPAlKMrYo+N0nPZMblek=)
                          2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: 8qV4xNEzC9YwAyrCmGEDqkkT1vswlJKt6VLA8n7jDac=)
                          3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: nsJgzUwSSMXcZYSBnW8T1s1Gr6R7nDs7M70WL4KuFGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730 (0xaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
        Validity
            Not Before: Nov  2 19:30:48 2025 GMT
            Not After : Nov  9 19:30:48 2025 GMT
        Subject: CN=6907b169-e810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:be:d8:6d:b2:86:d1:ae:25:14:cc:0c:fc:
                    bd:6f:7d:d5:9f:36:ef:eb:f2:d3:a9:2a:c0:99:b8:
                    d3:aa:a8:d4:0d:9f:76:0a:ca:7d:19:82:78:b1:50:
                    1f:12:19:69:6c:b3:a7:bd:8c:28:3a:30:53:1c:bd:
                    3e:4a:d7:5b:fc:07:b0:98:f9:7b:f0:1e:c0:c5:f2:
                    ee:9f:35:7f:b0:a1:66:dc:48:e4:19:ec:ad:57:8f:
                    59:e7:47:2c:be:71:98:9a:13:2b:05:13:0a:a7:8d:
                    35:4b:3f:a4:a6:35:c5:e0:b0:7c:e8:c9:ea:6d:5b:
                    80:45:f1:f1:e6:4b:49:45:ae:8e:6a:a0:de:48:df:
                    11:c1:dd:6f:8d:db:79:c2:3a:9e:3d:b9:27:da:09:
                    9a:ae:69:ac:d7:7e:30:70:19:9c:9b:de:36:45:2c:
                    27:28:c3:dd:e9:62:59:1a:c3:7b:31:7b:80:3e:00:
                    65:73:e1:49:b7:62:b2:78:13:cf:87:c6:ac:78:31:
                    37:e8:3f:9c:30:8a:8e:1f:71:f2:c2:a2:6b:d0:01:
                    a5:3f:5f:8c:24:c8:5c:9b:f8:7f:65:ce:39:16:cb:
                    77:20:b5:84:30:7c:a6:83:c4:dc:92:d0:69:ce:9d:
                    f8:c8:1d:58:1c:e9:8a:ac:98:a5:d0:38:c7:ff:a9:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:CC:ED:56:6D:1E:87:E4:FE:7A:5E:5E:F2:A3:03:5D:B9:A9:56
            X509v3 Authority Key Identifier:
                keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6d:aa:88:df:4f:27:8a:5c:c5:63:d4:2c:47:18:ef:7a:59:
         dc:05:2f:b0:f5:7e:9d:e9:7c:c1:e0:c7:62:90:49:f7:cc:f2:
         73:97:fd:68:a4:5b:d0:c9:41:ab:02:47:b3:8e:a2:f3:76:42:
         6d:d8:ff:8e:ea:74:19:0a:06:9c:be:6e:06:1f:10:32:d6:32:
         21:68:d1:7c:bf:8a:00:0a:f5:e0:be:e2:4f:19:f1:44:28:05:
         c2:7b:ad:fd:df:ab:2c:d9:45:de:48:8b:da:70:ef:cd:ba:cf:
         58:b5:60:fc:f7:12:5d:96:37:ac:7d:e4:65:9f:f0:53:44:1e:
         0f:4f:66:bf:66:e3:fa:c2:e9:a3:b7:ab:92:90:e0:fc:17:9b:
         ef:c2:57:a5:e9:92:d6:e1:55:77:73:13:66:f4:fe:10:be:c8:
         b2:69:2c:5f:fb:60:09:4a:81:50:23:42:ef:98:11:f0:19:cc:
         22:52:d9:d3:79:1d:26:13:84:81:e9:93:22:9b:f5:e6:d3:94:
         67:0a:6e:a5:e6:2d:66:2b:2b:e5:f8:6d:40:ad:e4:bf:8c:5a:
         f4:0e:93:d8:82:a9:49:ed:a6:e7:61:b8:71:7a:01:20:41:5c:
         a8:c8:c7:df:66:13:c1:d3:44:57:c9:27:10:4e:2c:1b:f3:e2:
         5d:e5:11:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1
QzM4RjUxRDAwHhcNMjUxMTAyMTkzMDQ4WhcNMjUxMTA5MTkzMDQ4WjAYMRYwFAYD
VQQDEw02OTA3YjE2OS1lODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGi+2G2yhtGuJRTMDPy9b33Vnzbv6/LTqSrAmbjTqqjUDZ92Csp9GYJ4sVAf
EhlpbLOnvYwoOjBTHL0+Stdb/AewmPl78B7AxfLunzV/sKFm3EjkGeytV49Z50cs
vnGYmhMrBRMKp401Sz+kpjXF4LB86MnqbVuARfHx5ktJRa6OaqDeSN8Rwd1vjdt5
wjqePbkn2gmarmms134wcBmcm942RSwnKMPd6WJZGsN7MXuAPgBlc+FJt2KyeBPP
h8aseDE36D+cMIqOH3HywqJr0AGlP1+MJMhcm/h/Zc45Fst3ILWEMHymg8TcktBp
zp34yB1YHOmKrJil0DjH/6n2zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNzzO1W
bR6H5P56Xl7yowNdualWMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3
N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy
WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgbaqI308nilzFY9QsRxjvelncBS+w9X6d6XzB4MdikEn3zPJzl/1o
pFvQyUGrAkezjqLzdkJt2P+O6nQZCgacvm4GHxAy1jIhaNF8v4oACvXgvuJPGfFE
KAXCe63936ss2UXeSIvacO/Nus9YtWD89xJdljesfeRln/BTRB4PT2a/ZuP6wumj
t6uSkOD8F5vvwlel6ZLW4VV3cxNm9P4QvsiyaSxf+2AJSoFQI0LvmBHwGcwiUtnT
eR0mE4SB6ZMim/Xm05RnCm6l5i1mKyvl+G1AreS/jFr0DpPYgqlJ7abnYbhxegEg
QVyoyMffZhPB00RXyScQTiwb8+Jd5REQ
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:42 2025 by rpki-client