Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          7q5qlXOoWZEPbU33yVOahleLsUtIYSUPB7mqSlddTZE=
Subject key identifier:   1B:A7:EB:7D:EC:C0:0D:FE:E4:D1:FE:01:DE:1E:86:15:EA:47:11:F2
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          0127
Signing time:             Wed 05 Nov 2025 05:16:33 +0000
Manifest this update:     Wed 05 Nov 2025 05:16:32 +0000
Manifest next update:     Wed 12 Nov 2025 05:16:32 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: YaXVpDQ5ukPTtaNeFWLwj2Ht64scpwYi71wlgHXG8/k=)
                          2: 4857445643A911F0AD37044DC4F9AE02.roa (hash: WkSg+sBSiJcoCE4RbowJKmOS2e9RO49Iq4fHf9Kfe8E=)
                          3: CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa (hash: V4fGvQxawrO0GIrbZluiaRPHvMfeQYeoae8AjpWNDHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: Nov  5 05:16:32 2025 GMT
            Not After : Nov 12 05:16:32 2025 GMT
        Subject: CN=690addb0-0899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:90:19:67:5c:0a:b5:c9:f4:f3:5b:5f:ae:
                    53:9b:86:b9:1d:3d:34:11:d6:24:60:19:26:89:45:
                    57:f6:cd:eb:9e:51:d6:c7:b5:24:dc:4b:66:4e:f9:
                    1d:6e:e8:d8:04:ac:4c:01:32:02:0b:b1:64:32:29:
                    d2:0d:d3:66:c5:ab:01:b3:27:b8:20:88:91:26:f3:
                    33:6d:5b:6f:eb:43:ff:85:b3:68:f9:2b:70:8f:2e:
                    0c:47:14:ff:82:82:54:f1:ba:59:73:0f:7c:d5:5d:
                    08:e2:c5:01:41:2c:5d:e2:74:bf:da:5b:13:b7:7b:
                    46:5d:5b:c6:56:d9:62:3a:32:72:fb:cf:aa:c4:67:
                    bc:d8:f2:a1:03:4b:81:20:43:de:df:be:ad:41:4d:
                    20:35:c3:75:75:8c:46:fb:1b:f6:35:e0:3e:09:df:
                    c4:a8:88:9b:5c:cc:6d:25:14:67:d6:38:9f:2a:fb:
                    2f:1b:f5:0b:42:86:88:32:da:84:3b:25:a0:a1:0b:
                    f3:04:fb:19:0d:2a:52:3e:0c:d4:cf:5a:5d:b2:44:
                    01:2c:07:f6:d3:c7:90:bd:93:a8:7b:21:84:81:ca:
                    d7:54:78:61:e4:e7:fc:93:ba:8f:c2:a8:a3:19:3f:
                    d6:f8:cd:ff:69:4b:f5:7a:39:34:14:6a:11:a9:93:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:EB:7D:EC:C0:0D:FE:E4:D1:FE:01:DE:1E:86:15:EA:47:11:F2
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:e4:99:3e:d0:7c:a8:20:ce:e6:b6:e0:00:39:c0:54:ba:
         ba:32:14:34:29:2e:73:84:00:2c:b8:14:b8:4c:8c:45:89:d8:
         8a:c4:be:eb:18:be:5d:32:fb:12:84:d7:4a:8f:38:62:9c:88:
         28:f0:1a:24:4c:f9:6e:76:e3:a3:0b:b6:87:9d:08:c9:e3:8b:
         c8:4f:74:2d:21:d9:37:3f:69:1d:b7:80:69:3a:fe:31:d8:22:
         42:48:e0:7d:9b:b9:3b:ca:da:3a:2c:86:26:e2:f6:a7:e9:e7:
         78:70:74:4a:7a:9b:d0:36:55:52:74:65:15:a9:1a:0f:17:e3:
         af:e0:8e:66:d4:30:a6:67:ba:f6:5d:b9:90:5f:6b:12:ac:47:
         28:c2:9c:7d:29:41:5e:57:a9:8b:99:14:29:a3:c9:79:9b:2a:
         38:65:d3:2a:d4:19:99:80:6b:f5:f3:a3:85:97:8a:f7:77:c7:
         08:0a:b7:69:1e:02:90:22:48:3b:68:bc:a4:e0:67:18:08:e0:
         6c:3b:7c:27:81:c6:0d:e4:2e:89:a4:45:c6:d6:81:3b:c2:02:
         55:51:8f:78:c9:6d:15:19:d2:9f:ea:91:97:7d:6b:db:a3:0b:
         fa:f9:47:cc:1c:e4:ac:4e:a7:db:81:43:2b:10:6b:f4:7b:f3:
         f3:b6:7a:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD
MThBQkYzM0IwHhcNMjUxMTA1MDUxNjMyWhcNMjUxMTEyMDUxNjMyWjAYMRYwFAYD
VQQDEw02OTBhZGRiMC0wODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsuQGWdcCrXJ9PNbX65Tm4a5HT00EdYkYBkmiUVX9s3rnlHWx7Uk3EtmTvkd
bujYBKxMATICC7FkMinSDdNmxasBsye4IIiRJvMzbVtv60P/hbNo+Stwjy4MRxT/
goJU8bpZcw981V0I4sUBQSxd4nS/2lsTt3tGXVvGVtliOjJy+8+qxGe82PKhA0uB
IEPe376tQU0gNcN1dYxG+xv2NeA+Cd/EqIibXMxtJRRn1jifKvsvG/ULQoaIMtqE
OyWgoQvzBPsZDSpSPgzUz1pdskQBLAf208eQvZOoeyGEgcrXVHhh5Of8k7qPwqij
GT/W+M3/aUv1ejk0FGoRqZMsSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBun633s
wA3+5NH+Ad4ehhXqRxHyMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0
NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2
OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHP+SZPtB8qCDO5rbgADnAVLq6MhQ0KS5zhAAsuBS4TIxFidiKxL7r
GL5dMvsShNdKjzhinIgo8BokTPluduOjC7aHnQjJ44vIT3QtIdk3P2kdt4BpOv4x
2CJCSOB9m7k7yto6LIYm4van6ed4cHRKepvQNlVSdGUVqRoPF+Ov4I5m1DCmZ7r2
XbmQX2sSrEcowpx9KUFeV6mLmRQpo8l5myo4ZdMq1BmZgGv186OFl4r3d8cICrdp
HgKQIkg7aLyk4GcYCOBsO3wngcYN5C6JpEXG1oE7wgJVUY94yW0VGdKf6pGXfWvb
owv6+UfMHOSsTqfbgUMrEGv0e/Pztnol
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:50:14 2025 by rpki-client