Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
File:                     dEeyg16suIrEhyfLcmu4e5e6d4o.mft (raw, json)
Hash identifier:          OrErbEVn024DwKKeU3+TJmecZEQhoTHbxorJVza+6SM=
Subject key identifier:   74:DB:30:32:D2:94:8B:1B:1E:52:DB:91:E0:CB:A6:83:C7:73:CF:EB
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Certificate issuer:       /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial:       0824
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
Manifest number:          0814
Signing time:             Sun 02 Nov 2025 20:52:53 +0000
Manifest this update:     Sun 02 Nov 2025 20:52:53 +0000
Manifest next update:     Sun 09 Nov 2025 20:52:53 +0000
Files and hashes:         1: dEeyg16suIrEhyfLcmu4e5e6d4o.crl (hash: XqTnM38B+avysGu7ZxbFkD8KPt6Joox1kCSdOzdFFSA=)
                          2: 5B196FD80A4611ECAE818D54C4F9AE02.roa (hash: WyH0ZPwbZvNsL+0AKk2f+JuP3I7jSQdqDW08OMuOOTM=)
                          3: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (hash: x40FMjyhrIBfTk8/yc4c2wF8kybpgUwEO3HTguXSoZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
        Validity
            Not Before: Nov  2 20:52:53 2025 GMT
            Not After : Nov  9 20:52:53 2025 GMT
        Subject: CN=6907c4a5-faf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:17:e8:71:1f:13:c8:50:45:dd:81:f1:0a:
                    51:9d:72:d7:90:6f:a5:9e:33:fd:e2:69:c7:68:63:
                    51:7a:f2:85:dd:f1:21:8e:a0:a2:39:a7:7e:af:18:
                    5a:83:59:36:f7:71:6e:53:49:9f:05:dc:32:d1:85:
                    df:30:42:a9:bc:37:ee:be:89:24:88:c8:c0:5d:0f:
                    46:48:a1:26:db:3c:00:e8:c4:b8:ed:c0:59:e6:cc:
                    b7:b3:61:4d:2e:72:ca:d9:69:c3:1e:18:ee:24:9b:
                    16:09:b4:a8:51:51:b4:6d:f6:e1:eb:de:2e:80:cb:
                    6f:78:61:96:fd:01:4a:42:14:3f:78:9d:f5:1b:95:
                    49:84:b4:3c:79:cb:ea:cb:ff:2c:4e:84:45:71:c0:
                    05:8b:61:82:98:ef:1d:04:4d:ea:15:f9:eb:3f:e5:
                    c2:d7:11:fa:2a:41:5f:ad:0b:aa:bc:87:20:3a:72:
                    3c:1b:c4:79:5c:3c:0d:34:d9:7e:62:5d:9d:4b:19:
                    19:8c:32:42:61:30:18:8e:2f:ab:bd:70:5f:4e:ae:
                    31:44:19:42:2d:7b:56:77:9a:0c:af:b7:14:7b:bc:
                    db:e0:9c:21:af:b5:f9:52:a1:4c:f8:5c:41:62:a8:
                    30:6a:b2:a7:f9:d0:da:90:3b:1a:c7:1d:8b:e6:43:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DB:30:32:D2:94:8B:1B:1E:52:DB:91:E0:CB:A6:83:C7:73:CF:EB
            X509v3 Authority Key Identifier:
                keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:b9:0c:70:07:96:22:45:0a:47:b6:c3:cf:7f:aa:2a:8b:
         4b:ab:bb:f9:f4:9c:8b:d1:02:07:f7:c0:34:58:28:dc:f7:e7:
         0f:94:0c:b9:f2:3e:b1:ae:9c:5c:81:b1:d0:72:ac:24:45:65:
         9a:38:78:46:ea:50:c9:a2:ea:d7:05:33:e9:12:8e:77:5b:aa:
         f7:1e:1c:41:7e:f7:8d:54:79:f4:ca:64:e8:c8:c9:dc:c0:ce:
         78:98:8e:47:17:5f:f5:60:e1:60:f7:86:4f:a3:51:54:d1:ba:
         bb:7b:bf:50:e3:62:97:9d:99:41:48:d9:18:59:2b:82:4b:b5:
         be:43:22:d7:79:99:59:34:87:ea:0b:f5:85:e0:f1:98:7d:0e:
         81:9d:22:a0:03:64:2a:0b:26:6d:30:a4:64:e7:60:6e:ea:f1:
         3b:30:18:b1:d3:97:93:6a:e3:e5:96:16:4f:82:d4:1a:04:55:
         d5:fd:d4:27:f9:8b:27:ed:cf:f8:2c:18:6f:8d:52:e2:d2:c8:
         80:de:67:73:72:5e:06:2c:bd:20:37:b4:0f:61:01:47:de:d5:
         2f:76:11:9d:0d:85:b5:62:ae:bb:b5:31:69:ba:58:2d:da:b5:
         12:80:ec:2c:f9:b8:85:b1:f6:2d:39:54:48:85:e7:b7:99:1d:
         d3:4c:7d:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVGODIxMTAvBgNVBAUTKDc0NDdCMjgzNUVBQ0I4OEFDNDg3MjdDQjcyNkJCODdC
OTdCQTc3OEEwHhcNMjUxMTAyMjA1MjUzWhcNMjUxMTA5MjA1MjUzWjAYMRYwFAYD
VQQDEw02OTA3YzRhNS1mYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2e0X6HEfE8hQRd2B8QpRnXLXkG+lnjP94mnHaGNRevKF3fEhjqCiOad+rxha
g1k293FuU0mfBdwy0YXfMEKpvDfuvokkiMjAXQ9GSKEm2zwA6MS47cBZ5sy3s2FN
LnLK2WnDHhjuJJsWCbSoUVG0bfbh694ugMtveGGW/QFKQhQ/eJ31G5VJhLQ8ecvq
y/8sToRFccAFi2GCmO8dBE3qFfnrP+XC1xH6KkFfrQuqvIcgOnI8G8R5XDwNNNl+
Yl2dSxkZjDJCYTAYji+rvXBfTq4xRBlCLXtWd5oMr7cUe7zb4Jwhr7X5UqFM+FxB
YqgwarKn+dDakDsaxx2L5kPqZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTbMDLS
lIsbHlLbkeDLpoPHc8/rMB8GA1UdIwQYMBaAFHRHsoNerLiKxIcny3JruHuXuneK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUY4Mi8zMTA3QjNFQ0Y3
QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJckVoeWZMY211NGU1ZTZk
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFZXlnMTZzdUlyRWh5ZkxjbXU0ZTVlNmQ0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUY4Mi8zMTA3QjNFQ0Y3QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJ
ckVoeWZMY211NGU1ZTZkNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzvbkMcAeWIkUKR7bDz3+qKotLq7v59JyL0QIH98A0WCjc9+cPlAy5
8j6xrpxcgbHQcqwkRWWaOHhG6lDJourXBTPpEo53W6r3HhxBfveNVHn0ymToyMnc
wM54mI5HF1/1YOFg94ZPo1FU0bq7e79Q42KXnZlBSNkYWSuCS7W+QyLXeZlZNIfq
C/WF4PGYfQ6BnSKgA2QqCyZtMKRk52Bu6vE7MBix05eTauPllhZPgtQaBFXV/dQn
+Ysn7c/4LBhvjVLi0siA3mdzcl4GLL0gN7QPYQFH3tUvdhGdDYW1Yq67tTFpulgt
2rUSgOws+biFsfYtOVRIhee3mR3TTH0T
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:44 2025 by rpki-client