Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          ssaSJZKjQr0Vg4l/s4Ri91VAUnAnTY7b6gbcs32cHuM=
Subject key identifier:   D2:C8:7B:D4:C0:0E:9B:56:57:FE:2D:08:7A:67:7D:0A:76:F1:C0:09
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          0865
Signing time:             Sat 18 Oct 2025 21:47:18 +0000
Manifest this update:     Sat 18 Oct 2025 21:47:17 +0000
Manifest next update:     Sat 25 Oct 2025 21:47:17 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: paz0wAPwT/dpTO1z87nlcG4LiDqZwwc6brN+x57z5G0=)
                          2: A2C769FC60C811F09495960BC4F9AE02.roa (hash: OC54p/vqUJjWMYbbzspIkDIQnAMQIAOuqmuiYX4i4xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: Oct 18 21:47:17 2025 GMT
            Not After : Oct 25 21:47:17 2025 GMT
        Subject: CN=68f40ae5-8b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:62:1a:cb:d1:78:f1:78:f0:f9:f7:7a:04:
                    bf:0c:1b:53:65:62:0e:85:7b:cb:e4:dc:74:0d:4e:
                    52:8c:42:14:86:2a:0a:81:b1:69:86:23:21:7a:43:
                    e0:31:25:b2:ca:36:fb:ff:e6:0f:f1:b1:60:50:83:
                    01:bc:ee:0c:05:51:e2:92:8f:81:aa:d7:94:97:93:
                    dc:79:24:2d:48:f1:f0:3c:ea:e7:4b:0c:7e:2b:9a:
                    9d:52:b2:a2:db:7c:e1:97:bf:af:93:8d:34:d8:d2:
                    16:6e:fd:e4:6d:00:e4:73:82:61:d1:7e:7b:43:d3:
                    14:b1:4f:dd:65:61:a2:72:91:9a:76:4b:d5:f9:09:
                    22:46:1e:fb:42:c0:bb:e7:b9:e1:e0:6e:be:3d:56:
                    1e:d5:72:83:cf:27:ad:70:2a:18:19:1d:94:93:64:
                    9c:04:a9:54:e8:f0:17:7f:a4:cb:5a:f8:69:63:91:
                    e6:ca:05:ac:ec:b1:79:0d:89:df:41:b8:12:ad:41:
                    00:68:83:2c:3e:cf:9a:96:76:cb:77:ba:92:6d:df:
                    4b:36:ba:e6:7c:22:8c:08:60:bc:4b:03:23:02:13:
                    0e:62:79:f1:04:01:85:18:5c:25:c7:17:fc:5d:20:
                    f2:8c:29:04:e0:93:51:e7:aa:40:ff:3c:da:3e:e3:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C8:7B:D4:C0:0E:9B:56:57:FE:2D:08:7A:67:7D:0A:76:F1:C0:09
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d5:2d:5f:4c:fb:24:05:c9:93:99:7d:ac:77:e5:9e:b2:c4:
         81:99:27:45:5e:bf:a2:ae:cb:e4:5e:f9:93:d5:c6:d9:e4:2e:
         cf:2d:02:df:08:36:b0:c0:73:6e:81:59:cb:b1:18:6d:b5:67:
         c4:f5:22:9b:95:ac:96:b2:35:8d:14:ac:99:22:d9:70:fe:ae:
         01:a3:b8:e5:5d:2a:48:b2:e3:b8:a8:05:6c:22:4a:43:cd:7f:
         c2:89:41:a1:93:1f:f9:3e:ae:1e:83:46:eb:90:5d:86:d9:51:
         6f:df:9f:f5:25:0f:72:ef:0c:5c:c4:e0:1c:6c:3c:ae:06:ae:
         5c:47:7f:25:47:53:f2:e0:6c:79:bc:55:01:38:28:b4:60:86:
         10:d9:bf:46:52:1e:3a:9f:13:a7:23:b5:d1:6d:64:04:55:b5:
         83:d5:8e:be:bf:f9:7c:7f:17:83:48:7b:87:64:f3:89:b6:c1:
         18:d8:64:96:88:8a:10:99:a1:0b:6d:f7:9d:60:68:9b:0c:16:
         da:c3:3a:e1:37:03:5e:42:1f:eb:7d:a5:36:15:2a:3f:54:45:
         89:63:26:90:8c:7e:d9:81:84:16:70:4a:f2:bc:49:29:b2:70:
         6a:44:5a:9d:d1:4f:61:01:6e:42:4e:43:29:7d:01:54:29:9c:
         31:fe:9d:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2
NjI3NjFFNEIwHhcNMjUxMDE4MjE0NzE3WhcNMjUxMDI1MjE0NzE3WjAYMRYwFAYD
VQQDEw02OGY0MGFlNS04YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXNiGsvRePF48Pn3egS/DBtTZWIOhXvL5Nx0DU5SjEIUhioKgbFphiMhekPg
MSWyyjb7/+YP8bFgUIMBvO4MBVHiko+BqteUl5PceSQtSPHwPOrnSwx+K5qdUrKi
23zhl7+vk4002NIWbv3kbQDkc4Jh0X57Q9MUsU/dZWGicpGadkvV+QkiRh77QsC7
57nh4G6+PVYe1XKDzyetcCoYGR2Uk2ScBKlU6PAXf6TLWvhpY5HmygWs7LF5DYnf
QbgSrUEAaIMsPs+alnbLd7qSbd9LNrrmfCKMCGC8SwMjAhMOYnnxBAGFGFwlxxf8
XSDyjCkE4JNR56pA/zzaPuPrbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLIe9TA
DptWV/4tCHpnfQp28cAJMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0
RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy
YTFqMmF5SktidlZtSjJIa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+1S1fTPskBcmTmX2sd+WessSBmSdFXr+irsvkXvmT1cbZ5C7PLQLf
CDawwHNugVnLsRhttWfE9SKblayWsjWNFKyZItlw/q4Bo7jlXSpIsuO4qAVsIkpD
zX/CiUGhkx/5Pq4eg0brkF2G2VFv35/1JQ9y7wxcxOAcbDyuBq5cR38lR1Py4Gx5
vFUBOCi0YIYQ2b9GUh46nxOnI7XRbWQEVbWD1Y6+v/l8fxeDSHuHZPOJtsEY2GSW
iIoQmaELbfedYGibDBbawzrhNwNeQh/rfaU2FSo/VEWJYyaQjH7ZgYQWcEryvEkp
snBqRFqd0U9hAW5CTkMpfQFUKZwx/p2i
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:44 2025 by rpki-client