Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
File:                     w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json)
Hash identifier:          LV6LmyNiPPee/g8c4OG8ATTby+Aa31+s6gVFKI+QcgE=
Subject key identifier:   5A:20:AD:65:DF:3B:F0:36:25:44:44:F1:50:DD:70:15:2C:9C:87:7A
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
Manifest number:          0147
Signing time:             Sun 19 Oct 2025 07:06:41 +0000
Manifest this update:     Sun 19 Oct 2025 07:06:40 +0000
Manifest next update:     Sun 26 Oct 2025 07:06:40 +0000
Files and hashes:         1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: YemJY3SAbw2Q8+qCxxzaXO82Rvyl83EjbkEgpSSU6ls=)
                          2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: pN1OWdiGw4OEkjeO/p/GHkPUsCswdzeq2aXMmLYYqcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Oct 19 07:06:40 2025 GMT
            Not After : Oct 26 07:06:40 2025 GMT
        Subject: CN=68f48e00-290a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:71:8d:d5:30:8a:3a:ea:d3:6f:db:0b:ab:
                    00:79:e2:ea:b9:ac:2a:a0:d1:77:91:7b:da:3e:af:
                    83:da:8d:72:57:07:7a:ed:eb:28:0b:97:7c:28:bb:
                    de:0d:b0:e8:78:3c:52:8c:fc:5d:df:21:6c:36:9c:
                    58:04:85:af:76:42:22:f8:03:16:3f:ff:7b:8f:5d:
                    fa:aa:3e:99:ca:d0:29:a7:93:55:70:a4:8b:16:51:
                    2e:de:81:7f:8c:71:41:9d:ed:14:73:73:ae:d4:24:
                    06:7c:24:f5:d0:48:3f:5c:5c:02:2b:e0:ba:06:b4:
                    74:4a:e2:1d:e2:dc:d4:a3:e7:d6:b8:05:ef:48:d3:
                    6d:7e:43:f2:c0:bd:b5:52:48:4c:6d:83:8f:71:98:
                    4f:41:c7:03:3f:1f:9f:02:98:bc:48:39:b0:0f:fe:
                    db:44:9d:d2:02:39:6f:03:2d:7b:32:e8:61:cc:1f:
                    dc:2e:9e:ac:1e:21:68:0e:58:1f:78:cd:67:a3:4c:
                    b6:68:b4:cd:93:ff:7a:1e:6a:2c:ac:c4:09:1e:ed:
                    9d:38:bd:3c:17:40:e6:78:79:7a:3c:8f:30:a5:18:
                    6d:cf:70:da:b1:23:78:b4:65:c5:43:0f:8e:77:a4:
                    aa:d7:3f:28:2d:26:e9:56:e5:10:e2:37:7d:14:5c:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:AD:65:DF:3B:F0:36:25:44:44:F1:50:DD:70:15:2C:9C:87:7A
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:29:16:ca:68:1b:11:11:8e:5d:5b:a6:49:54:20:6e:7d:37:
         04:16:76:61:b0:0d:3e:2a:8a:81:b2:f3:d3:03:9c:41:15:78:
         49:cd:8f:2c:80:70:32:20:50:33:26:27:b9:d5:cf:41:b4:28:
         44:6c:29:10:12:91:2c:ef:e0:7b:44:3b:97:fb:0c:25:52:97:
         d2:1b:3c:6f:a7:df:62:5f:13:da:48:88:80:87:d0:5d:7a:1d:
         bf:3a:b8:5d:77:6b:fd:09:1e:ae:37:50:2f:cb:5e:ba:ca:33:
         f0:37:62:10:31:a1:90:56:63:d4:12:f3:6d:8a:4b:f6:79:cb:
         c9:7b:6f:2b:f5:0d:80:99:8d:9c:a9:40:ff:a8:7f:f9:c2:7d:
         be:96:44:04:ef:52:7f:99:29:48:9b:df:1f:99:12:10:fe:0d:
         e7:67:cc:8e:db:96:a0:dc:84:56:0c:2d:9c:d0:dd:9a:28:3a:
         75:60:49:c3:db:94:97:4c:1a:1b:88:60:2b:7c:57:da:56:6b:
         8b:19:16:dd:d9:a5:57:7f:ac:e6:fd:f5:b0:e3:a5:b2:a2:9c:
         06:a2:67:f1:57:e6:58:48:b2:f3:36:4f:bd:c3:30:c1:48:a9:
         01:9b:47:9a:fe:02:6b:23:40:92:3d:9c:e4:63:6b:e1:33:a5:
         eb:8e:ae:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz
NkVBNDVCN0QwHhcNMjUxMDE5MDcwNjQwWhcNMjUxMDI2MDcwNjQwWjAYMRYwFAYD
VQQDEw02OGY0OGUwMC0yOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1c9xjdUwijrq02/bC6sAeeLquawqoNF3kXvaPq+D2o1yVwd67esoC5d8KLve
DbDoeDxSjPxd3yFsNpxYBIWvdkIi+AMWP/97j136qj6ZytApp5NVcKSLFlEu3oF/
jHFBne0Uc3Ou1CQGfCT10Eg/XFwCK+C6BrR0SuId4tzUo+fWuAXvSNNtfkPywL21
UkhMbYOPcZhPQccDPx+fApi8SDmwD/7bRJ3SAjlvAy17MuhhzB/cLp6sHiFoDlgf
eM1no0y2aLTNk/96HmosrMQJHu2dOL08F0DmeHl6PI8wpRhtz3DasSN4tGXFQw+O
d6Sq1z8oLSbpVuUQ4jd9FFwbAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFogrWXf
O/A2JURE8VDdcBUsnId6MB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD
MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTA3MC84MDhCNEQ2Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01
RkZibHpDTVhKSXMyNmtXMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmKRbKaBsREY5dW6ZJVCBufTcEFnZhsA0+KoqBsvPTA5xBFXhJzY8s
gHAyIFAzJie51c9BtChEbCkQEpEs7+B7RDuX+wwlUpfSGzxvp99iXxPaSIiAh9Bd
eh2/Orhdd2v9CR6uN1Avy166yjPwN2IQMaGQVmPUEvNtikv2ecvJe28r9Q2AmY2c
qUD/qH/5wn2+lkQE71J/mSlIm98fmRIQ/g3nZ8yO25ag3IRWDC2c0N2aKDp1YEnD
25SXTBobiGArfFfaVmuLGRbd2aVXf6zm/fWw46WyopwGomfxV+ZYSLLzNk+9wzDB
SKkBm0ea/gJrI0CSPZzkY2vhM6Xrjq5i
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:44 2025 by rpki-client