Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File:                     hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier:          tGAGMB30DqJwizmFpMbJOkWLEpsF1TwY90RzBRAGK3M=
Subject key identifier:   74:5B:64:B2:ED:33:77:E4:FA:B1:99:BB:10:A0:9D:AB:D2:37:4F:8E
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer:       /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number:          0369
Signing time:             Mon 03 Nov 2025 00:53:52 +0000
Manifest this update:     Mon 03 Nov 2025 00:53:52 +0000
Manifest next update:     Mon 10 Nov 2025 00:53:52 +0000
Files and hashes:         1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: YN2v3dFLSqVHWaUe9LsTmM3iU+6caHksWpcEO2d8oMs=)
                          2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
        Validity
            Not Before: Nov  3 00:53:52 2025 GMT
            Not After : Nov 10 00:53:52 2025 GMT
        Subject: CN=6907fd20-f5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:d5:45:b3:8f:6d:3d:28:92:f5:87:39:d4:
                    72:df:5d:3b:5f:89:11:ca:30:9e:b2:ff:7e:dd:c8:
                    b3:e6:b4:9a:86:93:5f:39:f4:ae:bd:5b:6e:5d:41:
                    74:37:5c:36:11:3e:45:f6:92:22:35:67:7f:8a:fa:
                    d6:bc:e1:3c:23:12:0b:02:37:17:8f:19:dc:a3:fe:
                    a8:56:04:35:3c:35:72:bb:5e:c3:04:bc:56:55:84:
                    ef:ca:22:73:2d:f6:84:67:3f:c7:71:b2:02:fe:34:
                    76:16:30:fe:71:99:d5:8d:61:83:26:02:e4:94:a9:
                    04:01:7d:a6:a6:93:8e:f8:46:bf:f3:68:e6:4d:0f:
                    be:74:33:fe:6c:b6:ff:0f:7b:41:e0:03:2d:f0:b2:
                    5c:2a:6e:ac:34:00:7e:88:c3:e1:65:a2:16:b9:42:
                    3e:8b:34:c8:e9:68:af:35:85:68:dc:37:0c:d4:c7:
                    98:38:da:91:61:14:26:36:22:42:56:47:b6:f6:15:
                    2c:fc:de:4f:6a:c1:e7:14:84:60:b6:3b:5c:33:51:
                    a8:fb:4a:bb:d5:9f:db:4d:40:1c:65:b0:71:13:1e:
                    da:29:c7:05:13:5e:8c:2d:5b:1d:bf:62:6b:84:c1:
                    5d:5a:37:96:7e:82:a6:6a:de:38:53:43:bf:ff:d2:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:64:B2:ED:33:77:E4:FA:B1:99:BB:10:A0:9D:AB:D2:37:4F:8E
            X509v3 Authority Key Identifier:
                keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ae:6b:30:58:7c:f9:f0:14:88:54:b4:b4:d2:1c:eb:66:78:
         ec:3d:c5:60:75:47:45:62:6c:a0:f5:2a:ea:b2:a8:46:a2:6b:
         08:b5:97:65:44:b3:54:e2:88:57:d5:5d:b1:83:52:cb:04:4c:
         46:14:56:64:ef:c1:16:52:8a:fa:4a:87:6d:99:a2:3f:98:e2:
         5b:85:a8:1f:69:bc:d4:3c:0a:18:8f:ff:ea:f9:99:a3:aa:da:
         8b:1c:5b:b9:ed:89:79:db:4d:8a:1f:3e:c9:b5:64:20:f9:d2:
         cc:d7:88:17:bb:a9:6d:9d:9f:57:e6:cf:52:1c:93:27:50:52:
         c5:1a:39:87:8a:98:cc:41:56:e8:38:7f:3d:e7:40:73:8e:9e:
         c9:1b:e8:a6:11:e8:b0:84:cc:6b:2b:15:50:e8:32:0a:1c:ad:
         df:71:c7:86:8f:53:6a:34:42:c7:15:f3:19:56:e7:1a:c5:58:
         09:42:8c:4b:f9:d0:eb:3c:2c:05:c6:d1:a6:a5:17:59:ef:a3:
         0f:a1:d2:f4:c7:1d:a2:a8:fc:9c:04:b5:90:47:cc:fe:ed:32:
         07:9e:a7:59:44:6f:7c:0a:3d:f8:cc:d0:32:ad:72:6b:b2:3f:
         43:89:32:b0:0b:ef:da:28:4d:dd:84:ef:66:c8:69:51:32:54:
         cd:03:6f:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3
QjdEOUYxQzEwHhcNMjUxMTAzMDA1MzUyWhcNMjUxMTEwMDA1MzUyWjAYMRYwFAYD
VQQDEw02OTA3ZmQyMC1mNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvH/VRbOPbT0okvWHOdRy3107X4kRyjCesv9+3ciz5rSahpNfOfSuvVtuXUF0
N1w2ET5F9pIiNWd/ivrWvOE8IxILAjcXjxnco/6oVgQ1PDVyu17DBLxWVYTvyiJz
LfaEZz/HcbIC/jR2FjD+cZnVjWGDJgLklKkEAX2mppOO+Ea/82jmTQ++dDP+bLb/
D3tB4AMt8LJcKm6sNAB+iMPhZaIWuUI+izTI6WivNYVo3DcM1MeYONqRYRQmNiJC
Vke29hUs/N5PasHnFIRgtjtcM1Go+0q71Z/bTUAcZbBxEx7aKccFE16MLVsdv2Jr
hMFdWjeWfoKmat44U0O//9KVPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRbZLLt
M3fk+rGZuxCgnavSN0+OMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw
RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0
LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMrmswWHz58BSIVLS00hzrZnjsPcVgdUdFYmyg9SrqsqhGomsItZdl
RLNU4ohX1V2xg1LLBExGFFZk78EWUor6SodtmaI/mOJbhagfabzUPAoYj//q+Zmj
qtqLHFu57Yl5202KHz7JtWQg+dLM14gXu6ltnZ9X5s9SHJMnUFLFGjmHipjMQVbo
OH8950Bzjp7JG+imEeiwhMxrKxVQ6DIKHK3fcceGj1NqNELHFfMZVucaxVgJQoxL
+dDrPCwFxtGmpRdZ76MPodL0xx2iqPycBLWQR8z+7TIHnqdZRG98Cj34zNAyrXJr
sj9DiTKwC+/aKE3dhO9myGlRMlTNA2+C
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:21:15 2025 by rpki-client