Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
File:                     5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json)
Hash identifier:          tlDH/LnGSUJ8wMmurzEiXNNSeQ+1vu4/Kz91Ud9xJQ0=
Subject key identifier:   8B:E8:26:98:02:80:E1:8E:13:00:1D:C2:CF:3D:C0:3F:69:7A:9D:0D
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Certificate issuer:       /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
Manifest number:          06CD
Signing time:             Sat 18 Oct 2025 23:31:54 +0000
Manifest this update:     Sat 18 Oct 2025 23:31:54 +0000
Manifest next update:     Sat 25 Oct 2025 23:31:54 +0000
Files and hashes:         1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: 5HKce1eWkNhAAZIYyAQmOkcgo1OiIZcW7xhO+FOp+As=)
                          2: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: MxKWutQC0EcuRji5odYG9UP8P1SDvkoxib+Ch43rjh0=)
                          3: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: 1pVbnf50ph3sVf6UCkoKWrOgrUMC2r6DGZa8ts6UopE=)
                          4: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: yWCloSXl0jHUU4lKP4fqhekgcparm2OxTeAAa5K4mZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
                          rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
        Validity
            Not Before: Oct 18 23:31:54 2025 GMT
            Not After : Oct 25 23:31:54 2025 GMT
        Subject: CN=68f4236a-652c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:d5:1c:69:14:8a:71:e2:df:ce:d5:ff:fc:
                    7a:00:ff:a9:9d:97:d4:09:07:98:74:bc:5e:91:2a:
                    7d:4a:d3:bf:68:2e:f9:a4:8f:60:44:4a:15:4c:f4:
                    07:9d:4e:2a:be:d6:f6:0b:0a:fe:34:b4:ba:ff:42:
                    44:a8:7a:42:5e:42:43:68:78:28:a6:07:88:1a:74:
                    04:fa:5a:02:bf:78:af:5d:6d:d4:f2:bc:18:4a:22:
                    6b:0b:3f:b4:1e:7b:c5:77:17:5e:1d:a8:aa:1a:75:
                    08:1f:05:26:8d:61:20:4f:ac:17:50:5c:84:24:3a:
                    32:5c:67:c0:02:8f:9f:25:72:7e:bc:80:cb:96:20:
                    11:43:9d:28:05:20:13:0f:aa:40:99:20:78:b3:cb:
                    8b:8d:d7:88:b5:d0:24:18:f0:5a:2f:06:9e:ce:8b:
                    1a:33:3d:75:fe:25:a5:b0:39:92:f0:54:17:9a:57:
                    ed:8f:be:69:9b:03:fc:77:a1:09:e1:8c:5b:83:b7:
                    cf:ca:92:56:7e:75:a4:c0:ea:66:93:f7:bd:65:5d:
                    1f:45:0a:63:4a:9c:38:1e:15:0c:ec:c5:3c:22:92:
                    55:51:79:77:66:ea:c6:31:a0:aa:d2:74:0b:28:dc:
                    c1:98:4b:2d:22:fe:bc:d7:d0:e2:ce:50:7e:23:ea:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:26:98:02:80:E1:8E:13:00:1D:C2:CF:3D:C0:3F:69:7A:9D:0D
            X509v3 Authority Key Identifier:
                keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:25:6c:fd:70:6d:ca:84:45:0f:53:2a:4a:b2:02:d7:62:
         04:43:dc:d8:3f:7c:f3:e5:6d:e8:6c:e0:21:37:bb:93:ff:86:
         e5:92:4f:83:86:24:60:6c:dc:cf:1d:1d:d4:96:12:16:08:d7:
         ba:b0:98:cf:68:7f:b1:e8:c3:53:58:3f:0a:08:00:a2:71:b9:
         b0:77:79:53:ae:28:c5:9e:4f:de:36:dc:96:68:c7:72:87:2a:
         93:ca:67:1f:39:e4:a8:24:c7:04:d9:b9:57:96:1b:31:e7:80:
         f6:a8:4e:6e:a6:57:53:86:ab:9a:47:53:3c:28:d5:af:b6:53:
         d0:bd:21:89:ec:ea:d8:70:e3:15:c4:d5:f6:2e:a1:65:e2:75:
         a7:00:9b:6f:79:5a:a8:47:38:10:f1:17:57:12:d7:11:05:0a:
         b7:86:fc:11:78:75:70:8b:75:53:26:a8:02:b4:af:c2:cc:24:
         4e:76:a1:79:a2:38:dd:fa:87:dc:65:b5:94:09:be:52:57:fb:
         a2:71:dd:be:d8:ce:b8:38:bc:1e:ed:f0:dd:a3:69:9e:c8:4a:
         77:2b:98:72:6b:88:c1:59:ba:38:1d:41:c8:54:52:de:85:a2:
         07:64:64:8e:b3:ea:a3:c7:35:44:42:69:81:86:d3:dd:b1:b2:
         ff:12:eb:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5RkMxMTAvBgNVBAUTKEU0NThFQTMwNDAwOTg3M0M4ODg0QUY4OUFBOTMxRDQ4
QkE4NTlDRDAwHhcNMjUxMDE4MjMzMTU0WhcNMjUxMDI1MjMzMTU0WjAYMRYwFAYD
VQQDEw02OGY0MjM2YS02NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmPbVHGkUinHi387V//x6AP+pnZfUCQeYdLxekSp9StO/aC75pI9gREoVTPQH
nU4qvtb2Cwr+NLS6/0JEqHpCXkJDaHgopgeIGnQE+loCv3ivXW3U8rwYSiJrCz+0
HnvFdxdeHaiqGnUIHwUmjWEgT6wXUFyEJDoyXGfAAo+fJXJ+vIDLliARQ50oBSAT
D6pAmSB4s8uLjdeItdAkGPBaLwaezosaMz11/iWlsDmS8FQXmlftj75pmwP8d6EJ
4Yxbg7fPypJWfnWkwOpmk/e9ZV0fRQpjSpw4HhUM7MU8IpJVUXl3ZurGMaCq0nQL
KNzBmEstIv6819DizlB+I+q12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvoJpgC
gOGOEwAdws89wD9pep0NMB8GA1UdIwQYMBaAFORY6jBACYc8iISviaqTHUi6hZzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlGQy9ENjlGNzRCODc3
RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6eUloSy1KcXBNZFNMcUZu
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVGanFNRUFKaHp5SWhLLUpxcE1kU0xxRm5OQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjlGQy9ENjlGNzRCODc3RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6
eUloSy1KcXBNZFNMcUZuTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRwyVs/XBtyoRFD1MqSrIC12IEQ9zYP3zz5W3obOAhN7uT/4blkk+D
hiRgbNzPHR3UlhIWCNe6sJjPaH+x6MNTWD8KCACicbmwd3lTrijFnk/eNtyWaMdy
hyqTymcfOeSoJMcE2blXlhsx54D2qE5upldThquaR1M8KNWvtlPQvSGJ7OrYcOMV
xNX2LqFl4nWnAJtveVqoRzgQ8RdXEtcRBQq3hvwReHVwi3VTJqgCtK/CzCROdqF5
ojjd+ofcZbWUCb5SV/uicd2+2M64OLwe7fDdo2meyEp3K5hya4jBWbo4HUHIVFLe
haIHZGSOs+qjxzVEQmmBhtPdsbL/EutJ
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:04 2025 by rpki-client