Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File:                     JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier:          yhJ43op1myYLL0EVbJaC+fAQ0WNsbbUkC6WdM1LiDaM=
Subject key identifier:   6F:B6:45:DA:A8:EE:D9:4B:58:53:31:63:98:F8:E9:33:A9:EC:F9:DA
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1D15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number:          1CF5
Signing time:             Tue 04 Nov 2025 16:15:06 +0000
Manifest this update:     Tue 04 Nov 2025 16:15:06 +0000
Manifest next update:     Tue 11 Nov 2025 16:15:06 +0000
Files and hashes:         1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: HXn0mIfXKkf2O3MzE4kRnbfFYVvG55I/oqtksICYLlo=)
                          2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=)
                          3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=)
                          4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=)
                          5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7445 (0x1d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Nov  4 16:15:06 2025 GMT
            Not After : Nov 11 16:15:06 2025 GMT
        Subject: CN=690a268a-5c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:b8:25:8e:90:b6:9d:d7:63:e4:30:49:17:
                    63:a7:c2:62:93:c2:43:68:8a:7c:67:9d:1d:e0:36:
                    6e:56:ad:f0:24:cf:a2:3a:fc:dc:55:cb:d4:2d:73:
                    99:9f:2b:9c:8e:79:69:f5:43:5d:ad:cc:a0:c6:69:
                    30:af:4c:50:70:cf:89:23:5a:b0:31:0d:b1:97:1e:
                    de:9f:e9:df:6f:c1:08:80:ee:4a:e3:b3:da:7f:84:
                    59:3a:86:5e:d7:55:a7:08:1d:19:d8:60:9a:5b:c5:
                    93:79:f1:f0:20:c9:6e:fe:62:c9:09:b1:1c:d5:ee:
                    29:8e:ef:d9:77:d9:40:8c:dd:81:8f:24:b5:c7:06:
                    4f:d7:60:a6:ad:18:e1:b9:02:45:d8:11:a8:12:2e:
                    aa:b4:65:6c:c5:78:49:51:3d:63:b7:c3:c2:bc:6a:
                    55:00:16:c7:68:ac:2e:6a:36:1d:4a:7e:e3:02:46:
                    75:4b:eb:e3:ab:66:89:13:cc:d9:24:73:af:40:ab:
                    a7:d8:95:80:b1:d8:bb:21:23:5b:7b:aa:1f:c2:26:
                    06:84:74:9a:d6:cb:45:a2:dd:7b:5f:7f:8e:bf:63:
                    b4:0b:ad:e8:89:4f:3b:a8:ae:73:33:b9:0a:03:76:
                    34:cd:2b:31:78:fd:5d:0d:46:ce:4c:52:a0:eb:17:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:45:DA:A8:EE:D9:4B:58:53:31:63:98:F8:E9:33:A9:EC:F9:DA
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:56:eb:45:42:98:ac:fa:a8:13:67:69:c9:b4:0c:50:a9:
         ba:18:eb:92:f5:31:10:77:cf:f8:08:3c:3a:1c:69:55:09:f6:
         aa:73:7b:af:6a:4e:89:32:5b:5a:7c:a0:15:57:ea:8c:16:8f:
         51:17:e9:60:72:3c:a8:95:ce:c9:80:70:dc:07:b6:2b:e9:b8:
         2d:b1:14:c1:5e:62:15:46:e9:cb:c6:7f:65:fd:06:3f:88:c0:
         26:3d:52:b0:db:ab:9b:a2:ea:69:24:3e:fc:8d:cf:39:60:49:
         7b:7c:ff:e0:b8:68:af:0a:03:7d:0d:8c:43:fc:9c:1c:17:fd:
         c6:06:9b:3a:85:3b:fe:18:af:52:31:24:b5:f2:24:eb:c6:66:
         2e:b3:87:b4:f2:11:b0:f7:ac:e6:ae:af:ed:5b:b4:8e:40:bb:
         26:b6:32:80:d1:06:53:fe:a9:46:17:de:91:cb:61:d0:d3:f9:
         3f:65:c0:82:cc:bc:8e:64:1f:70:07:91:75:ae:90:17:85:62:
         11:be:4c:e2:3c:53:5b:2b:15:0f:de:4f:c7:2a:70:57:3f:05:
         3a:66:66:26:66:99:2b:e5:3b:06:25:65:f9:cb:17:2e:6d:5b:
         83:7b:ec:c5:cb:ee:8c:2a:b9:9e:0f:4b:d4:c9:ed:28:b1:7e:
         c0:4f:a1:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5
QkVEQjgxQjUwHhcNMjUxMTA0MTYxNTA2WhcNMjUxMTExMTYxNTA2WjAYMRYwFAYD
VQQDEw02OTBhMjY4YS01YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA47C4JY6Qtp3XY+QwSRdjp8Jik8JDaIp8Z50d4DZuVq3wJM+iOvzcVcvULXOZ
nyucjnlp9UNdrcygxmkwr0xQcM+JI1qwMQ2xlx7en+nfb8EIgO5K47Paf4RZOoZe
11WnCB0Z2GCaW8WTefHwIMlu/mLJCbEc1e4pju/Zd9lAjN2BjyS1xwZP12CmrRjh
uQJF2BGoEi6qtGVsxXhJUT1jt8PCvGpVABbHaKwuajYdSn7jAkZ1S+vjq2aJE8zZ
JHOvQKun2JWAsdi7ISNbe6ofwiYGhHSa1stFot17X3+Ov2O0C63oiU87qK5zM7kK
A3Y0zSsxeP1dDUbOTFKg6xdiUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+2Rdqo
7tlLWFMxY5j46TOp7PnaMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF
NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx
SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGzlbrRUKYrPqoE2dpybQMUKm6GOuS9TEQd8/4CDw6HGlVCfaqc3uv
ak6JMltafKAVV+qMFo9RF+lgcjyolc7JgHDcB7Yr6bgtsRTBXmIVRunLxn9l/QY/
iMAmPVKw26ubouppJD78jc85YEl7fP/guGivCgN9DYxD/JwcF/3GBps6hTv+GK9S
MSS18iTrxmYus4e08hGw96zmrq/tW7SOQLsmtjKA0QZT/qlGF96Ry2HQ0/k/ZcCC
zLyOZB9wB5F1rpAXhWIRvkziPFNbKxUP3k/HKnBXPwU6ZmYmZpkr5TsGJWX5yxcu
bVuDe+zFy+6MKrmeD0vUye0osX7AT6Fv
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:04:59 2025 by rpki-client