Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier:          xcIH3Lmml29FOqWcfGEyubqo754B7ik3b6aWoRnxiSE=
Subject key identifier:   14:E3:7C:52:53:AD:6B:65:5A:CF:98:62:C2:2B:C6:6D:50:FC:E4:58
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer:       /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number:          0AA0
Signing time:             Tue 04 Nov 2025 20:20:40 +0000
Manifest this update:     Tue 04 Nov 2025 20:20:39 +0000
Manifest next update:     Tue 11 Nov 2025 20:20:39 +0000
Files and hashes:         1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: l7c8Ppp2MfVqRqax1oj20nnnOmZJYA7Y+ffXmS+SP6I=)
                          2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: N4gw2f/bDc4vAICNgZt17fcv5vKiGHjdnsBTX4dpjPM=)
                          3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: aZPKGOPG+1Lf391VuMHJv72RD5TC+yEcx6KaYkumZxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Validity
            Not Before: Nov  4 20:20:39 2025 GMT
            Not After : Nov 11 20:20:39 2025 GMT
        Subject: CN=690a6017-b969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:53:bf:03:ff:cb:bf:a5:be:45:db:a2:67:
                    af:37:1d:d0:ab:7d:e6:64:a7:09:09:1c:0d:25:ad:
                    c6:62:c8:8e:c3:74:99:0e:18:84:ae:f6:92:7a:d8:
                    65:48:04:53:77:dc:49:b6:63:ce:b5:aa:5c:bd:f9:
                    e3:de:58:af:4b:5a:f4:19:94:4c:dc:14:82:f2:df:
                    5d:cd:05:ac:5d:18:6b:97:82:cb:69:24:f5:c7:a2:
                    95:27:6a:ae:fc:de:59:5d:98:4e:9c:cf:4b:52:c3:
                    0d:2a:19:61:7a:cb:cc:c5:81:52:5c:92:72:c0:68:
                    c3:c8:e0:4d:52:66:af:3b:e5:ac:d5:38:8d:9d:84:
                    21:20:3b:d5:25:09:49:c1:38:2d:8d:e3:ee:70:0c:
                    64:33:15:90:4b:ae:90:3d:a6:f2:bd:2e:6a:27:26:
                    6e:94:27:70:10:e2:fe:48:35:11:97:38:a6:7a:85:
                    05:10:e2:2f:e8:99:b9:18:9f:36:61:f0:b8:3c:87:
                    d5:b1:da:27:a3:49:80:87:dd:28:66:42:bf:6f:16:
                    79:3c:c6:68:0b:50:54:32:d9:3b:23:a4:03:01:fa:
                    a4:59:aa:3e:61:da:49:ce:3f:04:85:b7:a5:37:b7:
                    29:33:5d:c8:bc:13:a6:2b:9d:38:c4:0e:10:e2:51:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E3:7C:52:53:AD:6B:65:5A:CF:98:62:C2:2B:C6:6D:50:FC:E4:58
            X509v3 Authority Key Identifier:
                keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:ea:f4:53:af:c8:6d:7b:49:30:27:04:20:d3:12:b4:ab:
         bb:58:e7:87:11:15:b9:9f:64:1e:dd:91:1d:bb:55:ab:35:41:
         4f:db:e4:d8:48:ce:7f:5b:60:95:9b:91:96:32:c9:71:2d:74:
         62:8f:d5:16:7b:45:1d:55:6a:4b:fe:84:52:cb:fc:fb:14:be:
         58:74:f4:53:cd:f0:31:0e:43:f2:e3:c5:93:2c:d1:35:34:70:
         24:93:91:0f:94:94:d3:f8:98:fe:79:7f:88:71:b3:2c:2e:54:
         b3:61:67:f7:8e:94:17:b9:93:4e:89:fc:3a:6a:f8:25:5c:a5:
         a8:0b:79:db:05:38:90:47:9f:2d:31:f5:df:3e:0f:a2:37:44:
         33:8d:c3:a6:36:5b:37:b5:ab:0d:58:43:2f:c4:f8:32:c2:47:
         09:8d:60:3e:bf:72:92:ba:62:33:4e:ad:d9:75:d2:1a:e3:da:
         10:29:67:e7:b9:a6:70:67:e2:38:8e:72:90:a3:4e:7b:8d:1e:
         84:0a:72:59:27:6f:14:eb:a6:8d:a7:45:f8:2f:1d:6f:88:1e:
         2f:6e:90:c0:2f:f4:21:70:2b:c0:f8:83:05:21:30:9a:7b:f4:
         dc:d0:4b:57:1d:c6:76:a6:10:39:4b:32:71:9e:cb:dc:9d:a9:
         79:e2:9c:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
N0I2ODExMC8GA1UEBRMoOUI1QTUzNjVEQTJCMjVGQTY5OEI3MDMwOTNDRkJEQzJB
MkMyM0ZDRjAeFw0yNTExMDQyMDIwMzlaFw0yNTExMTEyMDIwMzlaMBgxFjAUBgNV
BAMTDTY5MGE2MDE3LWI5NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+q1O/A//Lv6W+RduiZ683HdCrfeZkpwkJHA0lrcZiyI7DdJkOGISu9pJ62GVI
BFN33Em2Y861qly9+ePeWK9LWvQZlEzcFILy313NBaxdGGuXgstpJPXHopUnaq78
3lldmE6cz0tSww0qGWF6y8zFgVJcknLAaMPI4E1SZq875azVOI2dhCEgO9UlCUnB
OC2N4+5wDGQzFZBLrpA9pvK9LmonJm6UJ3AQ4v5INRGXOKZ6hQUQ4i/ombkYnzZh
8Lg8h9Wx2iejSYCH3ShmQr9vFnk8xmgLUFQy2TsjpAMB+qRZqj5h2knOPwSFt6U3
tykzXci8E6YrnTjEDhDiUbVbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFON8UlOt
a2Vaz5hiwivGbVD85FgwHwYDVR0jBBgwFoAUm1pTZdorJfppi3Awk8+9wqLCP88w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB
NTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbTFwVFpkb3JKZnBwaTNBd2s4LTl3cUxDUDg4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3
QjY4LzUzQTdCOTJDQjBBNTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZw
cGkzQXdrOC05d3FMQ1A4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFwi6vRTr8hte0kwJwQg0xK0q7tY54cRFbmfZB7dkR27Vas1QU/b5NhI
zn9bYJWbkZYyyXEtdGKP1RZ7RR1Vakv+hFLL/PsUvlh09FPN8DEOQ/LjxZMs0TU0
cCSTkQ+UlNP4mP55f4hxsywuVLNhZ/eOlBe5k06J/Dpq+CVcpagLedsFOJBHny0x
9d8+D6I3RDONw6Y2Wze1qw1YQy/E+DLCRwmNYD6/cpK6YjNOrdl10hrj2hApZ+e5
pnBn4jiOcpCjTnuNHoQKclknbxTrpo2nRfgvHW+IHi9ukMAv9CFwK8D4gwUhMJp7
9NzQS1cdxnamEDlLMnGey9ydqXninMQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:11 2025 by rpki-client