Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          5kg8HpjXcAdpGGBpL71jehAOONT76h4+qLNcqnUxuao=
Subject key identifier:   DD:8B:AA:6B:1A:CC:83:93:09:C6:E6:07:9A:0E:53:81:36:14:39:BA
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          014E
Signing time:             Sun 19 Oct 2025 06:56:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:56:29 +0000
Manifest next update:     Sun 26 Oct 2025 06:56:29 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: XHBg8tIGcRCskZL1z0He+sN7+Ytrp+liBAS/AxZ3zhA=)
                          2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: yeuOidXSk24zKJ3fs5QRV6AIbEvRNYhviKgrMlbwKF0=)
                          3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: RAjyk/fK8qUwEx1/AGy4sz8Z8uX3xfNXLzvmKTaNnbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Oct 19 06:56:29 2025 GMT
            Not After : Oct 26 06:56:29 2025 GMT
        Subject: CN=68f48b9e-e1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:5e:91:26:3c:bc:6b:b7:18:f0:49:ab:4e:
                    4c:c6:3e:e2:d0:84:14:cf:23:38:dc:e0:23:d7:a4:
                    3c:99:05:bb:77:3c:38:f5:fc:d0:52:8f:76:5e:a9:
                    9e:f2:15:c4:90:0e:2a:c0:e8:6c:19:45:ab:3a:e2:
                    c2:34:82:e3:e8:3e:b6:5a:b2:c1:77:bf:89:8f:2c:
                    3c:18:a9:17:a6:75:37:7f:2d:8d:0d:1c:79:0c:96:
                    77:28:68:be:c2:26:fd:75:48:82:b0:e8:d9:c1:39:
                    5d:df:2a:7f:6a:ff:47:a3:9c:1b:28:28:d7:06:71:
                    cb:93:e4:0a:07:04:a5:f1:14:d1:69:ba:97:6b:21:
                    d6:ea:08:4b:dd:f5:7f:88:62:7a:0b:b7:47:3d:27:
                    11:9f:28:0e:17:d5:49:17:a6:b1:f9:b6:b4:ec:bf:
                    e9:fb:e6:c0:d9:72:a4:aa:31:57:de:4b:de:56:3c:
                    12:51:c5:3d:01:c1:7a:f6:55:c4:35:14:79:c8:e4:
                    53:c3:a5:85:23:24:18:b8:ea:3f:47:66:d5:80:69:
                    e8:ea:76:74:01:5c:dd:16:d4:22:b3:87:d5:81:18:
                    b0:a0:6f:2a:63:fb:18:36:89:36:43:84:91:54:41:
                    e0:2e:fa:0e:15:f2:0a:c1:5b:e3:9f:2d:c7:8a:98:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8B:AA:6B:1A:CC:83:93:09:C6:E6:07:9A:0E:53:81:36:14:39:BA
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:44:98:c1:c5:7c:be:84:1e:5d:c9:4f:69:4c:24:f9:28:fb:
         c9:5c:dd:e2:de:9e:b5:b4:e9:66:28:49:ba:2a:a9:ab:91:5b:
         5e:78:7d:ac:4a:96:5f:8a:89:5c:09:3b:a7:73:cc:2d:a9:b7:
         8f:48:69:9d:fd:7f:7a:6f:2c:59:ba:80:de:9b:20:de:e6:c1:
         c1:68:6c:e9:8e:18:d7:17:08:c5:60:66:2a:09:29:22:d1:52:
         50:c9:8d:af:81:65:fe:a6:42:53:58:fd:48:a9:db:84:a7:5f:
         34:95:97:91:13:f7:34:d1:48:42:98:11:f9:9e:45:fb:9b:c8:
         11:9a:e6:60:4d:67:09:2e:91:42:e9:33:e2:a2:12:42:7e:55:
         f1:8d:4a:f6:26:d1:13:e6:3c:c2:e9:65:db:42:40:f1:83:cc:
         cb:22:9c:63:5e:ea:28:1c:5c:71:f5:35:70:9e:77:96:2c:9b:
         7e:56:58:97:98:e4:4e:19:8c:14:e2:46:5a:8c:d6:1a:65:61:
         35:71:bb:4e:a6:db:76:c0:e1:bd:9a:39:df:77:0a:cf:6b:65:
         c4:38:3e:c7:bf:f5:df:6b:6d:5f:7f:e8:24:e3:e3:ca:b0:ac:
         87:e2:9d:65:9e:2d:2b:f4:c9:cc:e3:bd:1c:30:ef:1f:6c:8e:
         9c:29:84:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx
NTI4RUNFN0EwHhcNMjUxMDE5MDY1NjI5WhcNMjUxMDI2MDY1NjI5WjAYMRYwFAYD
VQQDEw02OGY0OGI5ZS1lMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx15ekSY8vGu3GPBJq05Mxj7i0IQUzyM43OAj16Q8mQW7dzw49fzQUo92Xqme
8hXEkA4qwOhsGUWrOuLCNILj6D62WrLBd7+Jjyw8GKkXpnU3fy2NDRx5DJZ3KGi+
wib9dUiCsOjZwTld3yp/av9Ho5wbKCjXBnHLk+QKBwSl8RTRabqXayHW6ghL3fV/
iGJ6C7dHPScRnygOF9VJF6ax+ba07L/p++bA2XKkqjFX3kveVjwSUcU9AcF69lXE
NRR5yORTw6WFIyQYuOo/R2bVgGno6nZ0AVzdFtQis4fVgRiwoG8qY/sYNok2Q4SR
VEHgLvoOFfIKwVvjny3HipjDwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2Lqmsa
zIOTCcbmB5oOU4E2FDm6MB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF
NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH
X2h2dTY5QUJJMTBWS096bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwRJjBxXy+hB5dyU9pTCT5KPvJXN3i3p61tOlmKEm6KqmrkVteeH2s
SpZfiolcCTunc8wtqbePSGmd/X96byxZuoDemyDe5sHBaGzpjhjXFwjFYGYqCSki
0VJQyY2vgWX+pkJTWP1IqduEp180lZeRE/c00UhCmBH5nkX7m8gRmuZgTWcJLpFC
6TPiohJCflXxjUr2JtET5jzC6WXbQkDxg8zLIpxjXuooHFxx9TVwnneWLJt+VliX
mOROGYwU4kZajNYaZWE1cbtOptt2wOG9mjnfdwrPa2XEOD7Hv/Xfa21ff+gk4+PK
sKyH4p1lni0r9MnM470cMO8fbI6cKYTi
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:03:49 2025 by rpki-client