Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          zN533m1JUASqcqQqwET4h74Lu/Mc625QReB0+xHuVlI=
Subject key identifier:   94:0B:73:DF:23:B2:DC:A5:C5:EC:01:CC:90:C5:93:2D:9D:94:B6:63
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       092E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          0913
Signing time:             Tue 04 Nov 2025 20:24:13 +0000
Manifest this update:     Tue 04 Nov 2025 20:24:12 +0000
Manifest next update:     Tue 11 Nov 2025 20:24:12 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: yndjIBvLMCKSgUKUSbBRAq/OejAmdzOj5luyDuEUWGA=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: S4rEl380BTJzcHGG2hyACdGlelyGvU4RyQMTlMFDOTU=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: +NWxZ4+1DLoMUKpAzUV8GXujacBHu2pkEpYyl5zFIic=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: 3jZ9nHpwySfxwNtadAmSfYTid2BMJXTKTIVS2D09msI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Nov  4 20:24:12 2025 GMT
            Not After : Nov 11 20:24:12 2025 GMT
        Subject: CN=690a60ec-c30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:e4:ad:cd:dd:ff:57:12:94:4d:ba:80:a0:
                    c5:ca:da:ce:5e:ad:3f:db:a0:98:e4:21:06:f4:e8:
                    38:81:96:d9:59:7e:a2:00:b6:41:17:48:64:18:5b:
                    97:47:75:8c:3c:0a:fa:70:0a:d1:e5:98:f8:8d:a0:
                    cf:88:24:2c:d8:2b:06:15:1e:7c:03:d1:41:60:1a:
                    39:7e:f6:7c:f4:3c:24:3b:e2:fd:48:92:95:82:5e:
                    9c:ad:eb:74:48:a0:70:5b:57:2b:12:32:46:8e:af:
                    7d:aa:ba:81:52:9d:fb:a2:1d:a4:57:09:3f:6e:70:
                    2e:b2:7c:c0:b7:4d:d1:17:a3:ed:b9:cd:f6:66:27:
                    77:dc:ff:68:f5:4b:cf:63:fd:e3:34:86:c0:05:03:
                    08:3c:66:6d:d6:12:b4:db:cd:c7:ae:67:03:af:c6:
                    91:f3:7d:23:16:10:b3:2c:8c:b6:85:33:15:c4:d3:
                    d6:b8:08:88:f6:a4:aa:1a:4a:49:d0:a7:b8:a9:5b:
                    e3:0f:8d:e4:6f:d3:24:a3:07:9d:d5:f7:92:2e:bb:
                    62:d6:61:0c:cd:22:3d:ee:03:5a:a3:9b:1e:2e:5e:
                    84:c2:ff:5f:ec:5b:ec:fa:b9:fe:a2:e4:ce:f4:61:
                    8d:04:19:d1:d5:e4:27:05:cb:bc:d0:11:57:9b:d1:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:73:DF:23:B2:DC:A5:C5:EC:01:CC:90:C5:93:2D:9D:94:B6:63
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:a3:3e:d4:ff:d6:14:dd:ae:14:04:49:78:00:26:5e:98:
         62:b2:76:a0:5a:5e:85:13:c3:e2:68:63:93:5c:b0:f4:aa:e9:
         38:5a:fd:d6:04:65:70:13:1c:1a:45:03:7d:c9:ba:a3:36:de:
         ab:7e:c9:c9:ab:5c:db:3a:97:be:22:ca:24:84:54:b8:de:f8:
         ff:18:37:f7:28:2a:e7:96:51:79:fc:0a:5f:7f:00:71:31:8a:
         fd:26:d6:7c:62:46:df:7e:86:ad:c7:55:a3:1c:e2:5e:5c:91:
         a3:24:bd:b3:85:b1:53:8d:65:50:d8:9e:5a:5d:44:04:ff:fc:
         2f:07:7b:25:f4:10:c7:77:76:5b:1d:71:77:1d:7a:20:11:cf:
         df:18:91:1f:97:d1:c2:65:2b:62:5e:8a:38:78:25:64:71:80:
         db:98:52:c7:c3:15:3a:b1:24:9e:f8:d0:ec:57:c4:d2:99:55:
         73:69:aa:29:43:ba:b8:5a:42:e1:26:da:50:54:e3:8a:5e:71:
         52:a4:c7:6f:01:ea:20:d2:f5:45:00:be:86:50:d8:b5:57:58:
         7b:d1:34:9e:b3:e9:36:bf:52:de:5e:dd:76:44:e5:8f:87:b7:
         e4:c7:02:d3:34:97:d1:52:de:60:a5:ef:bf:2b:53:51:ae:dd:
         77:b5:54:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU2M0YxMTAvBgNVBAUTKDQ4MjAxNkU1NkEwMjQxRkQyRDM1QkZENzdCQzk3MkU2
NzNDRTlGMkYwHhcNMjUxMTA0MjAyNDEyWhcNMjUxMTExMjAyNDEyWjAYMRYwFAYD
VQQDEw02OTBhNjBlYy1jMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv8zkrc3d/1cSlE26gKDFytrOXq0/26CY5CEG9Og4gZbZWX6iALZBF0hkGFuX
R3WMPAr6cArR5Zj4jaDPiCQs2CsGFR58A9FBYBo5fvZ89DwkO+L9SJKVgl6cret0
SKBwW1crEjJGjq99qrqBUp37oh2kVwk/bnAusnzAt03RF6Ptuc32Zid33P9o9UvP
Y/3jNIbABQMIPGZt1hK0283HrmcDr8aR830jFhCzLIy2hTMVxNPWuAiI9qSqGkpJ
0Ke4qVvjD43kb9Mkowed1feSLrti1mEMzSI97gNao5seLl6Ewv9f7Fvs+rn+ouTO
9GGNBBnR1eQnBcu80BFXm9F07wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQLc98j
stylxewBzJDFky2dlLZjMB8GA1UdIwQYMBaAFEggFuVqAkH9LTW/13vJcuZzzp8v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTYzRi8wQUI3NzdEQUI2
QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1FmMHROYl9YZThseTVuUE9u
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDQVc1V29DUWYwdE5iX1hlOGx5NW5QT255OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTYzRi8wQUI3NzdEQUI2QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1Fm
MHROYl9YZThseTVuUE9ueTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaCqM+1P/WFN2uFARJeAAmXphisnagWl6FE8PiaGOTXLD0quk4Wv3W
BGVwExwaRQN9ybqjNt6rfsnJq1zbOpe+IsokhFS43vj/GDf3KCrnllF5/ApffwBx
MYr9JtZ8Ykbffoatx1WjHOJeXJGjJL2zhbFTjWVQ2J5aXUQE//wvB3sl9BDHd3Zb
HXF3HXogEc/fGJEfl9HCZStiXoo4eCVkcYDbmFLHwxU6sSSe+NDsV8TSmVVzaaop
Q7q4WkLhJtpQVOOKXnFSpMdvAeog0vVFAL6GUNi1V1h70TSes+k2v1LeXt12ROWP
h7fkxwLTNJfRUt5gpe+/K1NRrt13tVT/
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:22 2025 by rpki-client