Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File:                     S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier:          pUdRRh1Twtt6BpzztgU89bvnsNox3tbUNUQDImWbJXc=
Subject key identifier:   9A:C8:4D:A6:BA:F9:48:02:7C:8A:AE:61:A5:EB:EF:D6:42:54:F7:0A
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer:       /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number:          063F
Signing time:             Tue 04 Nov 2025 22:48:34 +0000
Manifest this update:     Tue 04 Nov 2025 22:48:34 +0000
Manifest next update:     Tue 11 Nov 2025 22:48:34 +0000
Files and hashes:         1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: V/3VmDQywz3K2KgdEWR74S6wKT6y+rcfgRPvUjsTGL8=)
                          2: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: HsxGKT/AjI8jr4OZJvk0BqTrzYCNl3TOedPqlsVo7ok=)
                          3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
        Validity
            Not Before: Nov  4 22:48:34 2025 GMT
            Not After : Nov 11 22:48:34 2025 GMT
        Subject: CN=690a82c2-0814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:c6:bd:ec:47:45:20:37:6d:fe:fe:b5:4e:
                    2a:1e:4b:08:6d:f1:99:a3:ac:77:16:97:56:14:69:
                    e1:20:81:b3:34:e1:b7:95:91:77:47:bb:e4:b0:ca:
                    27:ab:2e:ec:d8:4a:e4:d2:c2:3b:5a:a9:67:14:0b:
                    c7:a4:a6:8b:44:37:3d:12:8d:77:7a:64:d9:19:57:
                    87:3a:17:94:d6:38:a0:0d:c2:50:76:eb:2b:b3:1f:
                    6e:5a:92:8d:a1:63:e6:14:36:42:c1:5a:5c:ca:f9:
                    ed:dc:44:a9:58:ac:0d:fd:3a:26:c5:f5:ff:bb:82:
                    42:8a:a8:21:60:74:a7:f6:0a:e4:63:33:30:60:e9:
                    d7:3c:01:1e:8e:d9:53:98:fe:52:2d:fd:07:11:39:
                    46:70:c6:6e:ab:10:39:86:f3:18:0d:c2:34:6a:4d:
                    91:ee:3f:7c:e7:29:a8:bb:13:c5:6c:3e:27:13:43:
                    e8:70:af:7d:ff:4a:f5:15:02:ef:7f:90:f9:ff:7b:
                    95:d0:4c:9d:01:e6:7c:08:69:93:ff:31:c9:63:54:
                    6c:4b:00:8a:f5:d5:05:e9:e1:fe:f6:dd:37:0e:ac:
                    e2:5d:31:79:e2:02:c9:f1:31:29:03:2b:5f:93:ab:
                    a4:f2:cc:b8:52:94:ea:f2:24:a3:af:59:91:90:97:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C8:4D:A6:BA:F9:48:02:7C:8A:AE:61:A5:EB:EF:D6:42:54:F7:0A
            X509v3 Authority Key Identifier:
                keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:22:89:6a:67:11:a4:5f:8e:6f:6c:b6:8c:be:aa:d6:4f:1b:
         e2:e4:be:3b:81:a7:95:d9:6b:04:6c:3e:95:1e:2d:0d:cc:57:
         9c:ee:cc:95:3e:34:20:2a:1a:f5:ab:e2:c5:f4:6e:80:61:10:
         78:45:22:1f:99:d4:71:88:e4:45:36:d5:57:da:12:6a:30:c3:
         5e:13:24:fd:69:49:e4:88:45:2a:ac:52:d7:33:e7:d7:28:c8:
         96:8e:41:a2:4f:17:30:d2:bc:fb:b3:90:eb:13:1a:64:e9:d6:
         27:f1:0d:2b:57:63:9b:d3:d8:8b:f9:3a:ec:b2:db:0e:70:6a:
         10:7c:d9:04:fc:fd:43:3e:1a:ad:b0:af:c1:96:96:28:d9:56:
         6f:00:8c:1f:b9:35:39:e5:c1:50:cd:ce:83:c3:41:d1:c7:33:
         fd:fd:49:a0:ea:1a:d7:2c:6a:c3:fd:d9:5e:c7:fa:5f:2a:15:
         f2:c7:d8:77:48:16:9f:d8:95:b4:56:25:04:20:7a:14:f6:f8:
         dc:7f:a8:88:0d:52:93:a8:f5:3d:9d:06:87:db:88:4a:e5:51:
         86:cd:96:26:dd:f9:0c:10:e5:57:cc:08:d1:03:5c:88:11:3b:
         f0:3c:0a:ac:05:8f:2c:fd:30:de:32:fb:9e:bc:0a:52:4c:42:
         2f:ed:59:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF
QzdCN0RERjIwHhcNMjUxMTA0MjI0ODM0WhcNMjUxMTExMjI0ODM0WjAYMRYwFAYD
VQQDEw02OTBhODJjMi0wODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3U/GvexHRSA3bf7+tU4qHksIbfGZo6x3FpdWFGnhIIGzNOG3lZF3R7vksMon
qy7s2Erk0sI7WqlnFAvHpKaLRDc9Eo13emTZGVeHOheU1jigDcJQdusrsx9uWpKN
oWPmFDZCwVpcyvnt3ESpWKwN/TomxfX/u4JCiqghYHSn9grkYzMwYOnXPAEejtlT
mP5SLf0HETlGcMZuqxA5hvMYDcI0ak2R7j985ymouxPFbD4nE0PocK99/0r1FQLv
f5D5/3uV0EydAeZ8CGmT/zHJY1RsSwCK9dUF6eH+9t03DqziXTF54gLJ8TEpAytf
k6uk8sy4UpTq8iSjr1mRkJeaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrITaa6
+UgCfIquYaXr79ZCVPcKMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1
QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn
SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDVIolqZxGkX45vbLaMvqrWTxvi5L47gaeV2WsEbD6VHi0NzFec7syV
PjQgKhr1q+LF9G6AYRB4RSIfmdRxiORFNtVX2hJqMMNeEyT9aUnkiEUqrFLXM+fX
KMiWjkGiTxcw0rz7s5DrExpk6dYn8Q0rV2Ob09iL+TrsstsOcGoQfNkE/P1DPhqt
sK/BlpYo2VZvAIwfuTU55cFQzc6Dw0HRxzP9/Umg6hrXLGrD/dlex/pfKhXyx9h3
SBaf2JW0ViUEIHoU9vjcf6iIDVKTqPU9nQaH24hK5VGGzZYm3fkMEOVXzAjRA1yI
ETvwPAqsBY8s/TDeMvuevApSTEIv7VkL
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:31 2025 by rpki-client