Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          2VUUWKyZNXV8mFVkXX/c7xtELfG0YAii0/WER8ZI+S8=
Subject key identifier:   DD:AB:FD:18:74:76:47:91:74:33:39:71:2A:4A:80:D5:5A:7B:6B:26
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          0158
Signing time:             Wed 05 Nov 2025 04:15:49 +0000
Manifest this update:     Wed 05 Nov 2025 04:15:48 +0000
Manifest next update:     Wed 12 Nov 2025 04:15:48 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: 3yPcP9xc/Stbw5ymi6t/epH0y4MsGmMEGLiqyQz5clo=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Nov  5 04:15:48 2025 GMT
            Not After : Nov 12 04:15:48 2025 GMT
        Subject: CN=690acf75-576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:b5:a0:4e:5a:2a:4b:05:66:09:00:2a:64:
                    67:2c:17:82:0f:f5:9a:6b:8b:11:ad:5b:21:ac:c3:
                    68:9e:25:1e:05:0d:96:38:45:85:92:fa:ef:47:0e:
                    bd:0e:5a:36:3a:b0:7e:1f:5c:db:2a:4f:07:43:ae:
                    5b:99:0d:62:2b:6b:7d:d2:86:e7:6c:14:b7:9d:11:
                    08:23:01:2d:fe:cc:06:78:6d:92:49:54:05:b9:0b:
                    d2:3a:17:c5:48:bb:dd:b5:24:f9:f7:c1:e5:d5:fb:
                    7a:3a:b4:28:4c:b9:a6:aa:87:f3:fa:cf:81:18:fe:
                    97:c5:73:16:84:a3:f5:e7:56:1e:13:ea:65:fb:d8:
                    f4:0a:7e:07:b7:2c:22:d2:f5:a5:b2:f5:10:a5:5f:
                    ea:6c:40:db:10:0f:f5:7a:b1:01:ae:a0:be:20:22:
                    10:0d:c6:4c:35:36:45:57:ab:09:4e:b2:d2:17:15:
                    33:4a:1f:b1:e1:4e:54:57:72:e3:b4:49:da:e0:b3:
                    40:20:a8:e9:a9:cc:33:fd:12:a7:4e:3d:5e:a9:61:
                    f6:38:80:60:87:54:77:93:da:d5:42:22:76:f9:46:
                    e4:41:da:32:d6:4e:89:b8:57:74:fa:49:41:eb:4c:
                    71:d3:36:32:ef:12:8b:a3:21:f4:3a:cb:07:63:21:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AB:FD:18:74:76:47:91:74:33:39:71:2A:4A:80:D5:5A:7B:6B:26
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:e7:3c:9d:84:c5:90:0c:e9:ad:72:a3:17:d5:40:0d:93:
         d2:ed:f3:32:3e:c2:90:ad:c2:30:90:f9:d7:0f:e4:b4:50:25:
         c2:49:13:bc:9e:51:34:80:41:bc:f1:cf:ca:39:fd:82:05:1d:
         9e:ad:27:3e:ad:8e:9e:6c:d2:8a:bc:ea:93:a8:cd:ff:09:77:
         50:a2:6d:2f:45:b3:df:f3:c3:67:53:f2:d1:22:53:83:4d:42:
         34:e3:bb:fd:36:94:a2:e7:dd:56:f0:5b:07:89:88:31:26:fe:
         97:1d:54:54:e4:2c:3a:77:52:9a:0e:48:ca:4e:2a:4a:d6:33:
         d1:0d:88:54:90:a1:e5:87:3f:7f:0e:19:0d:51:26:80:27:97:
         5c:c9:e3:49:17:40:d9:0b:3f:ac:08:cf:76:01:4a:14:cb:2a:
         ab:46:64:fd:a2:55:f4:60:0a:00:08:53:b2:fb:b5:bd:8f:69:
         26:1e:5c:6e:fc:33:8a:b0:2e:e2:0b:08:7c:f7:4b:0c:a6:bd:
         ab:b3:5c:c8:73:b3:6d:9a:09:ab:48:c6:be:70:db:ae:83:d5:
         70:18:2e:10:fe:54:8b:e7:13:44:80:b5:c2:b7:2c:a4:dc:84:
         e8:c9:1e:1c:e5:03:57:f4:a2:11:4e:c9:17:fb:bb:8d:88:ab:
         a5:74:67:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy
QUJEOEI5RjgwHhcNMjUxMTA1MDQxNTQ4WhcNMjUxMTEyMDQxNTQ4WjAYMRYwFAYD
VQQDEw02OTBhY2Y3NS01NzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyy1oE5aKksFZgkAKmRnLBeCD/Waa4sRrVshrMNoniUeBQ2WOEWFkvrvRw69
Dlo2OrB+H1zbKk8HQ65bmQ1iK2t90obnbBS3nREIIwEt/swGeG2SSVQFuQvSOhfF
SLvdtST598Hl1ft6OrQoTLmmqofz+s+BGP6XxXMWhKP151YeE+pl+9j0Cn4Htywi
0vWlsvUQpV/qbEDbEA/1erEBrqC+ICIQDcZMNTZFV6sJTrLSFxUzSh+x4U5UV3Lj
tEna4LNAIKjpqcwz/RKnTj1eqWH2OIBgh1R3k9rVQiJ2+UbkQdoy1k6JuFd0+klB
60xx0zYy7xKLoyH0OssHYyEIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2r/Rh0
dkeRdDM5cSpKgNVae2smMB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD
Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH
dERLYnc3UU9kdVVxdll1ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsgOc8nYTFkAzprXKjF9VADZPS7fMyPsKQrcIwkPnXD+S0UCXCSRO8
nlE0gEG88c/KOf2CBR2erSc+rY6ebNKKvOqTqM3/CXdQom0vRbPf88NnU/LRIlOD
TUI047v9NpSi591W8FsHiYgxJv6XHVRU5Cw6d1KaDkjKTipK1jPRDYhUkKHlhz9/
DhkNUSaAJ5dcyeNJF0DZCz+sCM92AUoUyyqrRmT9olX0YAoACFOy+7W9j2kmHlxu
/DOKsC7iCwh890sMpr2rs1zIc7NtmgmrSMa+cNuug9VwGC4Q/lSL5xNEgLXCtyyk
3IToyR4c5QNX9KIRTskX+7uNiKuldGdD
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:34:14 2025 by rpki-client