Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File:                     S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier:          jyTl9wl6IZkGZ2dHEZQS6aytUkujTJtc3N/4YdLTIgo=
Subject key identifier:   3D:97:2A:45:27:30:CE:4C:4C:AF:FE:18:62:CA:3B:84:C4:DD:98:CB
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer:       /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial:       0735
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number:          072C
Signing time:             Tue 04 Nov 2025 21:51:31 +0000
Manifest this update:     Tue 04 Nov 2025 21:51:30 +0000
Manifest next update:     Tue 11 Nov 2025 21:51:30 +0000
Files and hashes:         1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: a91krckdyYrMTCP0Z3asQXt3atYffDc4Yf4vRcfRZqI=)
                          2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=)
                          3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
                          rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
        Validity
            Not Before: Nov  4 21:51:30 2025 GMT
            Not After : Nov 11 21:51:30 2025 GMT
        Subject: CN=690a7562-73db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:52:cb:8e:70:8a:a0:fc:cb:73:85:bb:ca:
                    64:46:15:d2:af:67:ff:5b:e0:b7:59:40:c1:4b:e2:
                    77:47:af:b7:38:cf:f3:cb:63:51:0d:19:4a:1a:ab:
                    e3:85:a1:18:3d:7c:28:a6:f6:81:a5:4c:36:6e:0c:
                    fb:fe:53:86:b5:6a:9e:f5:75:2b:28:3c:5c:3c:dc:
                    47:05:aa:a8:37:02:16:ef:9d:4f:a5:74:80:9d:02:
                    cb:56:e2:88:34:99:09:17:1d:57:06:9a:3a:2b:f7:
                    bf:0d:6c:6c:5d:2f:57:b0:fc:ce:e6:41:ed:fc:01:
                    6f:5f:d0:22:f2:45:fb:86:53:51:67:6f:b6:8c:87:
                    dc:3d:ee:95:8e:d9:84:13:34:86:e7:b4:39:25:42:
                    11:fd:58:b9:c4:21:46:30:bf:cf:13:51:cb:67:43:
                    91:62:d5:ed:3a:b7:69:07:da:6b:b0:94:1c:42:1a:
                    e1:fe:dc:39:e8:ec:19:4a:07:09:fc:c2:2b:c7:59:
                    c4:0b:ae:d6:f5:47:16:55:e7:24:4e:81:23:43:94:
                    9c:af:6a:16:8c:a6:23:88:8a:86:0c:b7:68:fc:31:
                    ef:03:f9:89:f1:97:0a:ff:4f:03:24:17:71:dd:32:
                    13:f7:3b:5e:a6:21:ba:87:af:8a:72:0c:f9:d5:31:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:97:2A:45:27:30:CE:4C:4C:AF:FE:18:62:CA:3B:84:C4:DD:98:CB
            X509v3 Authority Key Identifier:
                keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:be:8e:7f:5f:60:02:17:21:6c:f9:dc:52:59:ab:30:38:98:
         01:f8:04:de:99:fc:0c:56:5d:4d:59:d1:bc:13:1f:b5:96:ed:
         b7:ea:48:73:03:50:46:31:8a:fa:0e:cf:d4:bc:d8:2a:f8:10:
         81:dc:94:9b:d5:88:66:6e:b4:76:f9:35:c2:a3:93:ad:78:61:
         32:87:bd:e7:a2:1b:1e:81:98:1f:95:b7:fe:c3:45:5f:35:71:
         db:57:24:c4:fc:90:4d:63:13:de:73:58:81:de:9a:11:54:be:
         05:91:c2:0f:fe:f2:1e:f2:4a:47:cd:e2:3c:98:0e:05:4f:a2:
         7b:d7:26:66:09:30:ac:69:2b:2d:34:9d:d1:42:05:09:cb:1f:
         46:ba:fb:5e:45:fa:d8:73:fe:7e:09:b1:6f:a1:e0:8d:9d:35:
         3c:37:e0:e4:01:06:2e:0f:57:94:be:39:2b:58:48:8e:3d:9a:
         4d:22:14:da:f2:e7:7b:a0:bc:94:91:41:30:c4:d5:33:72:31:
         2a:66:7a:fb:e6:ca:03:07:33:72:7a:63:40:ac:53:20:90:b2:
         a7:ed:7d:2b:9b:71:db:15:d2:58:a9:29:c3:dc:ce:b8:21:03:
         84:26:08:f7:6e:56:a5:4f:f0:3b:66:03:ff:42:56:04:aa:5e:
         76:ce:22:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD
OUM3OTNCMUUwHhcNMjUxMTA0MjE1MTMwWhcNMjUxMTExMjE1MTMwWjAYMRYwFAYD
VQQDEw02OTBhNzU2Mi03M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/tSy45wiqD8y3OFu8pkRhXSr2f/W+C3WUDBS+J3R6+3OM/zy2NRDRlKGqvj
haEYPXwopvaBpUw2bgz7/lOGtWqe9XUrKDxcPNxHBaqoNwIW751PpXSAnQLLVuKI
NJkJFx1XBpo6K/e/DWxsXS9XsPzO5kHt/AFvX9Ai8kX7hlNRZ2+2jIfcPe6VjtmE
EzSG57Q5JUIR/Vi5xCFGML/PE1HLZ0ORYtXtOrdpB9prsJQcQhrh/tw56OwZSgcJ
/MIrx1nEC67W9UcWVeckToEjQ5Scr2oWjKYjiIqGDLdo/DHvA/mJ8ZcK/08DJBdx
3TIT9ztepiG6h6+Kcgz51TEZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2XKkUn
MM5MTK/+GGLKO4TE3ZjLMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz
N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm
SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAvo5/X2ACFyFs+dxSWaswOJgB+ATemfwMVl1NWdG8Ex+1lu236khz
A1BGMYr6Ds/UvNgq+BCB3JSb1YhmbrR2+TXCo5OteGEyh73nohsegZgflbf+w0Vf
NXHbVyTE/JBNYxPec1iB3poRVL4FkcIP/vIe8kpHzeI8mA4FT6J71yZmCTCsaSst
NJ3RQgUJyx9GuvteRfrYc/5+CbFvoeCNnTU8N+DkAQYuD1eUvjkrWEiOPZpNIhTa
8ud7oLyUkUEwxNUzcjEqZnr75soDBzNyemNArFMgkLKn7X0rm3HbFdJYqSnD3M64
IQOEJgj3blalT/A7ZgP/QlYEql52ziJ9
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:46 2025 by rpki-client