Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
File:                     A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json)
Hash identifier:          b802d8LAQVIfzUhwPlH+1Sx7dJ+OZSkyLgtA9ktKQTQ=
Subject key identifier:   4D:79:55:F2:BD:A3:50:BE:E8:57:6C:0E:1F:77:D3:0C:05:69:EC:05
Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
Certificate issuer:       /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66
Certificate serial:       0386
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
Manifest number:          037F
Signing time:             Mon 03 Nov 2025 00:47:57 +0000
Manifest this update:     Mon 03 Nov 2025 00:47:57 +0000
Manifest next update:     Mon 10 Nov 2025 00:47:57 +0000
Files and hashes:         1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: RY6y2pXgVRfd0xtVVZ0dJtgRZA0hxyPwtpoqFUdah+Q=)
                          2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: YkgVY3NySYm4wFHmOVUk89wTvIIkdJt3TNVnKoMCNEA=)
                          3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: qkNJcqJasGm5DqRK6RDLwIc76BxJl9ChsFknMyrjOEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl
                          rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66
        Validity
            Not Before: Nov  3 00:47:57 2025 GMT
            Not After : Nov 10 00:47:57 2025 GMT
        Subject: CN=6907fbbd-56df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:27:5f:c0:31:96:9a:a3:f5:93:0f:d9:e6:
                    83:03:38:96:e9:78:30:bc:c7:3f:a1:e9:0a:3b:08:
                    0f:ff:80:67:6b:fc:40:1c:76:73:39:7f:cf:f9:49:
                    8f:1a:32:9d:eb:18:d8:18:72:a2:d5:3f:16:ab:26:
                    a8:eb:a2:8c:e9:61:0e:d8:1b:8a:d3:27:de:f1:2b:
                    09:46:09:8f:1b:23:1b:e2:3f:61:54:d8:96:34:d1:
                    b7:49:fa:7b:b9:cc:e2:b2:a7:11:74:f6:ee:1a:ee:
                    1f:c2:aa:58:71:cc:20:9c:21:9e:3d:cc:5c:92:02:
                    3c:86:2b:88:9a:28:0b:e1:ef:40:83:51:19:28:2a:
                    79:b6:5c:a0:3a:27:a1:cf:1b:dc:57:8e:4a:92:34:
                    88:a6:8a:a0:65:7f:35:9a:80:3b:88:b3:18:79:98:
                    2b:14:65:3d:d9:17:30:dd:5f:1a:8a:21:f8:67:90:
                    82:d3:e3:f1:8d:75:aa:ff:33:7e:fa:2e:f1:76:cf:
                    32:e3:da:6b:e6:66:2a:48:b3:90:c8:05:dc:3a:94:
                    56:19:54:10:a7:1b:62:3c:49:06:89:a1:8a:11:b5:
                    d7:cb:f5:bf:00:7c:fc:20:e2:ac:56:e5:1c:dc:bf:
                    6e:0e:c6:43:78:70:30:ef:99:47:6a:a2:c0:1b:9b:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:55:F2:BD:A3:50:BE:E8:57:6C:0E:1F:77:D3:0C:05:69:EC:05
            X509v3 Authority Key Identifier:
                keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:35:73:6b:94:f9:16:2a:27:ac:99:2a:94:ac:56:41:9f:aa:
         2b:1e:fe:2a:6a:18:c5:3b:55:79:ac:c0:39:26:32:21:35:45:
         b2:2a:5a:63:f6:fe:75:47:ce:50:e8:ad:be:40:ce:6d:50:8a:
         51:36:5e:2f:8f:21:5b:1b:cd:dc:d7:96:1e:b6:a6:5d:c0:e9:
         44:b2:62:94:fe:73:95:07:6d:08:b3:01:d6:60:ac:dd:a9:e8:
         35:7d:20:64:c1:34:26:35:0f:f5:9f:4b:61:f0:2d:eb:76:4e:
         55:bf:05:ea:e9:b5:9b:a8:55:91:ce:aa:28:33:66:20:02:d4:
         36:12:d9:3c:08:fe:ba:dd:47:51:30:1c:5d:86:42:27:40:b0:
         bf:9f:97:2b:48:a4:bf:e7:48:3e:6c:4e:62:fd:5d:ad:b0:01:
         58:74:3c:16:bf:55:a6:00:89:82:78:8f:ca:8c:92:77:eb:60:
         b7:86:06:ad:b1:b7:f3:fd:97:ee:d1:8c:ec:48:b4:0f:da:68:
         6e:10:b1:23:d0:b0:c7:bb:16:d9:f3:ed:23:46:33:7b:e1:ec:
         97:fa:ce:0c:f2:07:6f:a5:11:e0:d5:3e:4e:75:ea:04:51:83:
         d2:b3:76:b3:45:5a:d7:73:d0:3c:12:01:97:c0:d0:0c:b6:b0:
         24:31:ab:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC
OTQ2MDRFNjYwHhcNMjUxMTAzMDA0NzU3WhcNMjUxMTEwMDA0NzU3WjAYMRYwFAYD
VQQDEw02OTA3ZmJiZC01NmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4z0nX8Axlpqj9ZMP2eaDAziW6XgwvMc/oekKOwgP/4Bna/xAHHZzOX/P+UmP
GjKd6xjYGHKi1T8Wqyao66KM6WEO2BuK0yfe8SsJRgmPGyMb4j9hVNiWNNG3Sfp7
uczisqcRdPbuGu4fwqpYccwgnCGePcxckgI8hiuImigL4e9Ag1EZKCp5tlygOieh
zxvcV45KkjSIpoqgZX81moA7iLMYeZgrFGU92Rcw3V8aiiH4Z5CC0+PxjXWq/zN+
+i7xds8y49pr5mYqSLOQyAXcOpRWGVQQpxtiPEkGiaGKEbXXy/W/AHz8IOKsVuUc
3L9uDsZDeHAw75lHaqLAG5tCMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE15VfK9
o1C+6FdsDh930wwFaewFMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2
MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG
QTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDNXNrlPkWKiesmSqUrFZBn6orHv4qahjFO1V5rMA5JjIhNUWyKlpj
9v51R85Q6K2+QM5tUIpRNl4vjyFbG83c15YetqZdwOlEsmKU/nOVB20IswHWYKzd
qeg1fSBkwTQmNQ/1n0th8C3rdk5VvwXq6bWbqFWRzqooM2YgAtQ2Etk8CP663UdR
MBxdhkInQLC/n5crSKS/50g+bE5i/V2tsAFYdDwWv1WmAImCeI/KjJJ362C3hgat
sbfz/Zfu0YzsSLQP2mhuELEj0LDHuxbZ8+0jRjN74eyX+s4M8gdvpRHg1T5OdeoE
UYPSs3azRVrXc9A8EgGXwNAMtrAkMavD
-----END CERTIFICATE-----
Generated at Tue Nov 4 02:16:54 2025 by rpki-client