Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File:                     7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier:          6y1fz5bhYdMLnfB3XSGl9w1ea2eeGHkFOd1oxIYSw8Y=
Subject key identifier:   F7:D3:70:50:6D:D4:9A:20:41:8B:25:2A:CB:FC:94:40:C2:80:69:3E
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number:          065B
Signing time:             Sun 19 Oct 2025 00:56:20 +0000
Manifest this update:     Sun 19 Oct 2025 00:56:19 +0000
Manifest next update:     Sun 26 Oct 2025 00:56:19 +0000
Files and hashes:         1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: cZMAqVhMRmgyYKbaIGi/+OcTH0THk6/+t2Yt6vutOQA=)
                          2: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: iE6iwKcnxwEjtE9WXcQu4gGo9yNtUwjira1PGhRAUcI=)
                          3: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: RH854KQ/5YN87OjqRkRCiFr2IhqYgncWKfVpFPV13y0=)
                          4: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: mH+1wX3U3E+PwU1lGyk1jq9ZSIZ/eqIJUcTr6f/b6Xg=)
                          5: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: SLlCncO2DyPvvTYxJFC2PAuP59bF79k10dAC8HNVIQs=)
                          6: B12A25C49A0311F09156AE56C4F9AE02.roa (hash: qyAII90csy0Rn8L/6v873TKIy8BdpI8H9BwdfO34meM=)
                          7: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: RG7TCR+hu/+Ok550Z5N0qOkdev6k9kUyJ/FaV+2X5Ic=)
                          8: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: nLnWAwdemI13C2q8S/qa+9BJ2323t0M3P0SOVSaJVNw=)
                          9: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: 62gMKAte/bNphw0tPYUF/ZvmE1/0Yr02LZLp3QQyGq4=)
                          10: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: pFm7n9VGiFUAcF3W7YGai7F1W8FI2/WlsVm3RdvaL8A=)
                          11: F2B3F2BA7DFF11F09B687570C4F9AE02.roa (hash: pQhLpM5Rl+aW3gSv3+uxd5+iWqRbm+2iGTggucxA9FM=)
                          12: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: x5ZXcyZot9NxnkynC1UvcdUEHIRqiQ9BeutOwqKe7/Q=)
                          13: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: Rgp4CAddp4zh4GvoUSZvZkXy9j88DgqM6tLo5LqrskY=)
                          14: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (hash: 1DbRY7Dt+Gln8rSAGnsKUeRj0Sm0DLBT94bWpJpOtoQ=)
                          15: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: Kqq5i0mycJsM2p96QyceGbqT0cTIxmv0LLK0yaPey48=)
                          16: 9EE451A08ABE11EFA0AEF447C4F9AE02.roa (hash: KIrSmQo5iCGuGlJlwWjl9JWnA4uFzugb+1cf51uUuU4=)
                          17: 718A62C23EFE11F08F98A223C4F9AE02.roa (hash: g3DvDfWhQW+pgOd3WbISADZLSahseyB4cwXN77ZdFPk=)
                          18: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: MGKfZkUlP4hm8yifkXlXdpMG3M4ujfcWqT10DluRHA4=)
                          19: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: lb9o/vIcDBEjvp+RqGQSW3gOmj7ndA5EvwIHbcU4984=)
                          20: 9FA2A3588ABE11EFA0AEF447C4F9AE02.roa (hash: 531oQX+rVA8FSL6e8iLTYKTaSv/hBNMulZCg1OlX9WE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Oct 19 00:56:19 2025 GMT
            Not After : Oct 26 00:56:19 2025 GMT
        Subject: CN=68f43733-70b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:af:61:cf:6c:9f:ac:a0:39:18:22:21:c1:
                    c6:62:cb:0c:e6:a6:f9:c0:ae:0a:9f:2e:7a:7d:4f:
                    25:5e:cb:d7:3c:76:b1:43:4a:fa:c5:47:8f:b0:ea:
                    02:c0:02:b6:ca:01:11:fb:31:58:7a:3d:9a:24:60:
                    68:29:b0:40:26:e4:c7:df:b8:71:00:c3:43:1a:eb:
                    8e:28:95:5f:44:f9:f2:83:ad:a8:c3:06:84:42:a5:
                    77:ff:90:1b:2a:01:42:21:f5:22:2e:af:08:60:ae:
                    b1:df:fc:c9:d6:16:6f:33:4c:e7:f9:95:32:bf:94:
                    45:db:a8:d1:0d:35:5c:f3:3a:92:10:81:34:11:33:
                    89:44:e2:0c:7a:94:36:be:02:b8:14:c0:64:37:3d:
                    65:75:08:15:7a:e5:0d:e8:7c:05:b5:d1:37:ff:dc:
                    bb:fb:25:74:a4:9e:4c:b3:0c:f0:c6:d6:1c:2c:c6:
                    80:d2:49:4a:3e:a9:55:c9:0e:7c:10:98:ae:78:8f:
                    f3:7e:4b:26:dd:b6:73:99:f2:8c:bb:b1:a6:c3:ba:
                    62:fa:f4:f9:60:02:c9:6f:9e:8b:22:fc:46:7a:04:
                    b5:97:81:e3:73:0f:94:0b:2c:47:5b:33:0d:c0:46:
                    e1:4c:99:e5:d8:e1:08:ab:6d:55:04:9c:f2:f4:10:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:70:50:6D:D4:9A:20:41:8B:25:2A:CB:FC:94:40:C2:80:69:3E
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:71:20:e5:de:29:f6:ac:d8:23:80:5a:12:97:90:27:c4:
         da:ba:99:70:fa:00:e4:a0:09:27:a9:e2:95:fd:7e:09:14:84:
         e0:7b:56:07:04:65:0c:8e:32:c6:7e:f5:ef:89:ea:b6:6a:6f:
         06:63:e1:c9:47:0e:25:31:ce:8c:45:ca:61:d1:ec:f8:6f:b9:
         ef:a5:88:32:01:8c:83:81:04:33:c8:a8:b3:a6:82:d9:38:6c:
         2e:31:8d:91:3d:c3:d1:d4:82:94:bb:2a:f0:2e:69:c7:2d:3f:
         d2:6d:a4:a7:15:3a:ad:17:ed:f2:81:c1:bc:4b:e6:c3:54:c8:
         0d:a7:cc:be:47:cf:c9:46:36:9e:a7:3f:34:05:1d:f5:c4:c5:
         5a:be:f2:df:a8:7d:25:06:81:b9:bc:fd:b3:11:a8:40:03:eb:
         73:bd:40:96:74:83:00:18:57:b7:d8:f5:fc:62:81:9d:b3:aa:
         91:51:15:04:35:9b:14:cb:e1:5a:49:fc:e2:a6:01:12:52:a5:
         93:7a:0d:44:34:08:34:4f:3f:65:13:c0:bf:3d:00:e8:07:6b:
         cb:d2:56:c5:df:f2:14:c5:73:26:46:06:b7:ff:ba:49:fc:a6:
         5d:35:5c:0c:0d:c3:9c:0f:f1:e2:bf:17:33:cf:76:81:bd:6a:
         c1:18:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:13 2025 by rpki-client