Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
File:                     0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft (raw, json)
Hash identifier:          RK+HivwlgOQczz0UVHW+tpxMwcfftxkQw+V5nTYWSqY=
Subject key identifier:   1A:95:E9:3F:94:FB:BC:C2:02:8B:92:7C:92:A9:8B:FC:E7:8F:6C:87
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Certificate issuer:       /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial:       0713
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
Manifest number:          070E
Signing time:             Sat 18 Oct 2025 23:17:15 +0000
Manifest this update:     Sat 18 Oct 2025 23:17:14 +0000
Manifest next update:     Sat 25 Oct 2025 23:17:14 +0000
Files and hashes:         1: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl (hash: zILH24o3i7SLp3jZhnb5rXKyA9eNVuR90T+0EuUNfwI=)
                          2: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (hash: 8i4ad6LrRcxPKcbznzNvi2BM6i3jnmiOquYCkcN8Y1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
                          rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913397F, serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
        Validity
            Not Before: Oct 18 23:17:14 2025 GMT
            Not After : Oct 25 23:17:14 2025 GMT
        Subject: CN=68f41ffb-305d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:ff:55:c2:3e:c1:ba:5a:d4:75:8d:00:1f:
                    21:ea:78:67:e3:ae:c9:31:dd:fa:92:1a:bc:96:33:
                    e1:54:19:29:63:32:9c:f2:12:96:7b:2c:37:4d:bf:
                    9a:7d:ba:8a:e5:f0:d6:33:cb:dc:24:55:29:3e:da:
                    bd:24:bb:6f:83:6c:ff:00:39:37:c5:22:ad:1a:fc:
                    d5:6b:aa:2f:68:93:36:88:a2:be:f4:cd:18:e3:fe:
                    92:1a:ae:5e:ba:d9:72:18:39:c8:45:4b:9b:af:3a:
                    e1:63:df:12:c9:bd:fc:5c:0a:43:0e:a6:98:a6:87:
                    09:ae:71:12:25:0a:c9:73:73:00:7b:c5:88:5f:8a:
                    bb:0e:de:e3:cf:11:fb:25:b3:3f:f0:79:63:22:05:
                    30:b4:9e:8f:92:ca:a0:77:45:ba:5c:36:e8:8c:04:
                    99:ab:13:94:63:14:d9:35:da:01:49:d2:a1:c3:e3:
                    ac:f4:98:a4:c8:cf:83:0c:a5:68:cb:c7:c1:a2:83:
                    86:c4:28:9e:f4:80:bd:8d:14:82:e3:f1:15:a3:97:
                    42:53:1b:a7:ed:27:f2:a2:70:d1:2d:2c:f9:c6:38:
                    3f:21:90:68:a7:ed:ec:e1:dd:df:88:c0:ae:28:8e:
                    f8:63:ad:45:66:11:18:6f:96:5f:f0:32:70:9d:18:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:95:E9:3F:94:FB:BC:C2:02:8B:92:7C:92:A9:8B:FC:E7:8F:6C:87
            X509v3 Authority Key Identifier:
                keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:81:cf:ce:1a:68:2e:11:7f:c9:1b:48:be:20:40:a6:ad:f3:
         af:20:e2:d6:0e:17:ee:a3:b4:bb:5b:b9:82:93:36:c8:7b:04:
         8f:78:1a:4e:c7:4b:74:be:6c:ac:41:35:af:a9:fa:11:29:04:
         bc:a5:d7:96:f1:06:28:31:72:b6:cb:43:a7:0c:40:0c:ff:6f:
         a6:a9:fe:d9:dd:ad:df:18:e5:3c:71:fd:d0:48:35:26:e4:96:
         f3:9c:49:ee:8a:a9:14:c3:5f:78:12:a9:67:c5:b4:a2:3d:21:
         3b:f8:75:48:f6:a7:5b:0a:81:e3:9c:9c:36:cb:cc:9f:fc:cd:
         fd:c3:a4:71:b9:b1:56:4f:98:db:11:6e:95:31:b7:64:b2:5e:
         85:c3:79:9b:82:65:13:6c:bb:a3:e4:3d:5a:a9:3d:c8:2f:bb:
         c3:dd:42:eb:cb:80:50:f9:59:7f:79:c3:56:c8:57:79:52:fb:
         23:e9:d8:12:72:41:1c:d8:90:c0:ac:36:9e:42:cb:bc:54:f0:
         36:17:5d:a9:fb:b1:1d:f7:f5:63:4f:a0:01:49:b8:1a:77:53:
         6d:75:b4:a9:58:ad:ba:c1:3b:c8:0b:24:b2:76:93:53:b9:c8:
         ec:ed:39:7c:81:dd:8b:f4:f3:e2:cf:f0:3b:56:62:c6:61:06:
         33:d9:ca:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM5N0YxMTAvBgNVBAUTKEQyMzNCQjg4QjA4ODlCNjRGMTRGNTMxNUQ3MTYxM0FB
MTY3NEQwMDcwHhcNMjUxMDE4MjMxNzE0WhcNMjUxMDI1MjMxNzE0WjAYMRYwFAYD
VQQDEw02OGY0MWZmYi0zMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwx//VcI+wbpa1HWNAB8h6nhn467JMd36khq8ljPhVBkpYzKc8hKWeyw3Tb+a
fbqK5fDWM8vcJFUpPtq9JLtvg2z/ADk3xSKtGvzVa6ovaJM2iKK+9M0Y4/6SGq5e
utlyGDnIRUubrzrhY98Syb38XApDDqaYpocJrnESJQrJc3MAe8WIX4q7Dt7jzxH7
JbM/8HljIgUwtJ6Pksqgd0W6XDbojASZqxOUYxTZNdoBSdKhw+Os9JikyM+DDKVo
y8fBooOGxCie9IC9jRSC4/EVo5dCUxun7SfyonDRLSz5xjg/IZBop+3s4d3fiMCu
KI74Y61FZhEYb5Zf8DJwnRio4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqV6T+U
+7zCAouSfJKpi/znj2yHMB8GA1UdIwQYMBaAFNIzu4iwiJtk8U9TFdcWE6oWdNAH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk3Ri9GRjk4RDY4QTVB
NDYxMUVCQTAyNkRFMjNDNEY5QUUwMi8wak83aUxDSW0yVHhUMU1WMXhZVHFoWjAw
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBqTzdpTENJbTJUeFQxTVYxeFlUcWhaMDBBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mzk3Ri9GRjk4RDY4QTVBNDYxMUVCQTAyNkRFMjNDNEY5QUUwMi8wak83aUxDSW0y
VHhUMU1WMXhZVHFoWjAwQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDPgc/OGmguEX/JG0i+IECmrfOvIOLWDhfuo7S7W7mCkzbIewSPeBpO
x0t0vmysQTWvqfoRKQS8pdeW8QYoMXK2y0OnDEAM/2+mqf7Z3a3fGOU8cf3QSDUm
5JbznEnuiqkUw194EqlnxbSiPSE7+HVI9qdbCoHjnJw2y8yf/M39w6RxubFWT5jb
EW6VMbdksl6Fw3mbgmUTbLuj5D1aqT3IL7vD3ULry4BQ+Vl/ecNWyFd5Uvsj6dgS
ckEc2JDArDaeQsu8VPA2F12p+7Ed9/VjT6ABSbgad1NtdbSpWK26wTvICySydpNT
ucjs7Tl8gd2L9PPiz/A7VmLGYQYz2cpI
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:49 2025 by rpki-client