Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File:                     Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier:          PiODC/8muf6tZnheuylxZA6ToWzJ1t4+8qJGCRI4U50=
Subject key identifier:   9C:D6:54:E5:85:29:68:4A:63:F5:82:49:18:0D:3B:61:10:E2:F7:A1
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       0623
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number:          061B
Signing time:             Sun 19 Oct 2025 00:26:40 +0000
Manifest this update:     Sun 19 Oct 2025 00:26:39 +0000
Manifest next update:     Sun 26 Oct 2025 00:26:39 +0000
Files and hashes:         1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: Td6REjCwni6OQ1pg/MdLHVsI//vAi6LKS9TMIsLMsqA=)
                          2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: fb7qHh5ZQWTTd8VnRA4KyHFCOrkRy8TphWCCGB0gByk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: Oct 19 00:26:39 2025 GMT
            Not After : Oct 26 00:26:39 2025 GMT
        Subject: CN=68f43040-b491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:00:5b:c5:a1:7f:d1:4e:bb:68:cf:ae:5f:
                    af:02:1e:3d:99:00:fb:2b:80:d6:21:d8:76:de:ae:
                    f1:fe:a2:f7:3e:09:3e:6a:a3:85:c6:1b:c1:3e:e7:
                    21:33:ef:f7:2f:c6:54:9a:93:33:b9:92:7b:a2:38:
                    16:dc:7e:4e:96:66:c4:b4:3d:f4:c4:46:e1:5a:ef:
                    ac:dc:a2:cb:c9:48:53:70:dc:c0:24:6e:9b:c0:2f:
                    0b:53:17:7e:5b:36:13:63:ba:56:3c:d4:45:ba:b9:
                    a1:fa:52:7b:f3:d3:0e:51:40:87:06:4b:ad:4d:ad:
                    24:31:e1:2a:25:7a:59:c8:08:5f:d5:65:43:98:92:
                    69:c2:c9:1e:aa:a5:ec:5a:b4:1a:67:db:e2:e0:b9:
                    24:5c:e3:87:62:c0:f2:e8:5b:d3:b7:0c:79:dd:a0:
                    69:0b:7c:5a:67:9c:9e:e3:86:ec:43:b0:10:ee:3d:
                    46:be:3f:17:3d:19:51:d6:65:3e:d2:76:dc:27:8a:
                    32:28:d0:d2:da:23:cb:b4:e5:b2:d0:3c:4c:d6:bf:
                    4c:37:3a:09:dc:ae:46:c8:66:04:e0:60:d2:c0:87:
                    0e:49:42:d8:c6:8b:e8:0a:88:d5:50:10:43:7b:58:
                    ea:d0:6b:56:c6:5d:9d:30:e1:77:fc:e0:a3:19:61:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:54:E5:85:29:68:4A:63:F5:82:49:18:0D:3B:61:10:E2:F7:A1
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:25:9c:36:84:af:e7:de:de:0c:88:a0:44:3e:36:93:8c:eb:
         25:7a:aa:09:0f:d2:2a:52:ed:82:50:41:46:3a:70:f0:fa:1c:
         67:cb:3a:52:2a:82:ac:0d:3f:21:16:ea:28:d7:a4:1b:10:c3:
         f5:b6:d3:bd:23:ee:78:ea:b7:9d:a3:01:d3:ce:08:76:d6:00:
         ef:fe:77:ba:64:0d:a1:7e:f0:19:1b:86:ba:3e:03:c2:59:33:
         b7:0d:34:c4:07:34:e6:03:8a:4f:e6:80:ee:34:ae:b0:16:41:
         cf:7d:45:b7:cf:73:66:0b:a1:42:c7:27:dd:d8:b4:2f:61:2e:
         28:28:20:df:dd:06:70:5f:f4:48:b4:37:d5:84:54:04:1d:50:
         4d:73:04:05:ac:27:2d:25:1d:a0:89:94:9e:8e:c8:e5:a3:e2:
         d9:84:fe:a3:c9:b6:67:9d:37:e3:9f:fa:44:b7:30:7f:91:89:
         93:c3:41:02:58:fc:10:2d:21:2e:d9:6d:bb:fe:bb:ab:68:ce:
         9f:44:42:fa:1e:4d:e5:06:12:cc:2e:43:14:31:c8:01:ca:6d:
         47:78:27:bb:7c:15:2d:16:55:39:c1:ce:1f:d9:13:a6:be:0f:
         52:88:ff:0d:6b:6b:78:6a:fa:5f:b1:25:2d:c2:fc:fa:19:f6:
         aa:48:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:58:01 2025 by rpki-client