Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
File:                     0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json)
Hash identifier:          O6CszTwDrVOERRJgd95Wjv8HmDLIqkj3D45ijJ7PaIw=
Subject key identifier:   A0:98:58:0A:64:44:7F:93:9B:95:5B:0C:DC:0F:34:39:1F:3B:BD:E7
Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11
Certificate issuer:       /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
Certificate serial:       06AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
Manifest number:          06A8
Signing time:             Sat 18 Oct 2025 23:43:12 +0000
Manifest this update:     Sat 18 Oct 2025 23:43:11 +0000
Manifest next update:     Sat 25 Oct 2025 23:43:11 +0000
Files and hashes:         1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: PTrFK1lKpmoT1RvaPkQxtDfoxwgw0yN8lnRu1NiZdGY=)
                          2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: aR8xqbFUFjm+ccG/d5FkPfm2CRqS0a29lHr1SXFGeCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl
                          rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
        Validity
            Not Before: Oct 18 23:43:11 2025 GMT
            Not After : Oct 25 23:43:11 2025 GMT
        Subject: CN=68f42610-1652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:5e:4c:9f:fe:be:46:60:c1:61:a2:78:63:
                    81:82:e5:d4:23:7e:f4:f5:5f:42:a9:b2:01:f7:78:
                    e1:7d:e5:9c:03:f2:1c:66:18:ca:2e:05:e8:0c:a2:
                    f8:28:5a:73:6d:dc:59:09:a3:4a:ff:b2:78:ed:f3:
                    a2:5d:03:8a:6d:1d:b5:75:6c:d2:00:90:53:43:67:
                    1c:ce:e8:11:3e:b8:f7:c2:0b:76:6f:47:82:a2:a6:
                    4c:0e:b0:5a:57:0b:ff:8c:81:bf:ae:60:b9:3b:f4:
                    b9:68:a1:a9:af:bd:5e:64:01:d4:1c:55:8e:00:e4:
                    79:4a:93:ab:23:79:48:43:e6:69:f5:5a:f6:91:b5:
                    f1:a5:59:85:14:86:7d:24:ac:8e:a4:b5:f1:27:55:
                    92:bc:6d:a8:a8:56:b4:53:46:8d:d8:c6:3e:86:c7:
                    73:02:3b:2d:8a:ab:fb:b2:83:d5:d7:44:c8:bc:13:
                    66:69:32:65:ed:97:95:7a:5e:21:78:0d:f9:55:5b:
                    f6:35:27:87:f5:f4:5a:9b:1e:99:36:34:cc:52:02:
                    cb:d3:e0:08:1e:00:09:b7:a0:69:6c:03:7f:6c:b2:
                    39:f8:4e:31:00:2e:13:14:e9:a1:67:82:ee:41:0c:
                    6c:a5:2a:70:99:cd:da:8c:a4:e8:3e:ea:24:8d:79:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:98:58:0A:64:44:7F:93:9B:95:5B:0C:DC:0F:34:39:1F:3B:BD:E7
            X509v3 Authority Key Identifier:
                keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:33:8c:24:38:e4:e2:68:8a:1c:01:36:2e:59:01:39:85:
         c3:46:7c:22:88:92:36:65:84:f2:65:02:d5:b2:c8:8c:e9:1a:
         af:0f:f0:11:ac:97:c9:b1:6a:f2:28:ae:51:8e:41:24:23:25:
         30:6e:fe:b0:53:d0:cd:19:05:22:f2:dd:a5:1d:e5:2b:64:9d:
         79:35:97:08:df:f6:12:94:fc:c3:30:ac:7f:ed:bd:8a:50:0d:
         cf:e3:b9:06:e5:07:99:34:85:ca:cb:d1:5d:4a:ab:1f:d9:0c:
         41:81:0c:1a:ba:d4:b5:b3:d6:f7:8f:c8:30:c8:40:6e:1f:f2:
         fb:37:60:23:ae:10:a6:51:25:77:84:28:f5:60:81:f6:f3:a5:
         cb:45:bb:2d:be:36:ac:c3:37:be:80:39:5a:c5:50:34:1e:14:
         a7:59:e6:2d:98:4e:bd:4a:71:28:a2:94:03:21:22:db:fd:3a:
         0b:45:6c:6f:88:9b:ef:3a:b6:dd:d4:ec:78:d2:b1:57:19:5b:
         ba:c2:8c:8e:99:7f:78:4a:70:78:73:00:b4:b9:8e:37:79:7f:
         2d:d7:c2:b5:06:23:62:e2:e9:a6:0b:d9:3b:c8:d2:db:be:9d:
         e2:9a:76:99:af:6b:39:14:b0:03:a5:b7:9d:eb:ec:e9:02:df:
         3a:99:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:50:12 2025 by rpki-client