Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
File:                     enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json)
Hash identifier:          OcCYBndA9UjEZmUdqsa0/bVKrw9Nf6a4bRRAjuj1X3o=
Subject key identifier:   D6:14:5F:62:5A:53:1F:AC:71:A5:18:F0:4B:C8:23:2E:CB:C1:09:22
Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Certificate issuer:       /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
Manifest number:          09FB
Signing time:             Sun 19 Oct 2025 00:16:48 +0000
Manifest this update:     Sun 19 Oct 2025 00:16:48 +0000
Manifest next update:     Sun 26 Oct 2025 00:16:48 +0000
Files and hashes:         1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: ZljG8kVjlDonxkocaX9u1y1wfwdCP6YnbIHIE18sEZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
        Validity
            Not Before: Oct 19 00:16:48 2025 GMT
            Not After : Oct 26 00:16:48 2025 GMT
        Subject: CN=68f42df0-a523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:7e:96:a2:3c:27:e2:3b:d4:43:cc:26:43:
                    58:fd:1d:d6:43:53:3d:eb:e2:d9:67:9f:60:7f:5b:
                    24:8d:09:0d:ec:8a:07:7e:fb:04:2e:49:23:f5:a1:
                    47:d9:8c:2a:e9:3a:90:00:4c:2c:0c:7d:b3:18:2d:
                    71:b3:37:cb:3d:84:07:db:c3:2f:69:4c:90:aa:44:
                    6b:84:a2:4c:1d:51:a7:ce:94:6b:71:4b:f2:4a:6b:
                    13:e8:68:ea:f9:16:a1:66:21:b2:8f:57:7e:50:71:
                    0c:55:31:96:f5:58:ec:0d:c7:f4:2a:47:46:79:8c:
                    ba:fe:b3:2b:27:22:35:a3:97:99:34:f6:85:c9:41:
                    54:86:84:a9:86:85:9c:25:28:f4:95:e7:08:57:11:
                    5c:57:8e:88:1f:89:30:b1:b8:34:93:ae:aa:99:45:
                    cf:2c:92:a3:b9:ff:95:6f:e7:05:61:1a:78:ea:56:
                    47:c9:49:4e:24:eb:3a:c5:c3:0c:6d:73:3c:e7:02:
                    78:82:69:45:32:7a:d8:ae:d7:43:9a:9d:d7:71:6e:
                    98:99:98:4a:1d:52:4a:9b:5b:70:58:cd:38:c6:f7:
                    74:7c:4d:73:61:9b:10:1a:3a:47:e8:25:ed:fc:c8:
                    c3:5a:c0:d8:cd:c6:af:b0:55:70:e7:09:4b:03:fa:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:5F:62:5A:53:1F:AC:71:A5:18:F0:4B:C8:23:2E:CB:C1:09:22
            X509v3 Authority Key Identifier:
                keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:5a:eb:b4:88:61:31:d5:37:70:ab:19:02:31:e0:f6:c4:
         ce:ba:a8:fa:5c:f7:6b:ff:d7:cf:f1:8f:07:2c:01:c9:f0:6e:
         55:25:35:72:14:3e:35:72:c3:e4:d7:f4:aa:aa:f4:10:3b:db:
         cb:38:f4:dd:b4:ab:8a:de:46:93:e9:1f:14:8f:6b:71:c2:55:
         18:0d:29:95:38:26:47:fd:80:d8:0b:b3:29:58:d6:9a:fc:0d:
         15:a6:0b:e4:43:06:12:1a:4f:a7:cc:9d:4b:e0:19:94:c3:a9:
         b8:85:41:37:0f:c9:cf:74:e7:2f:b3:8a:03:eb:ba:b2:55:85:
         db:f3:74:ec:6e:a1:e2:99:e1:8f:ca:17:77:84:e2:c3:45:9b:
         b1:b9:86:99:e5:93:12:d7:12:99:c2:d2:04:60:6e:29:e6:ad:
         13:96:f3:95:dc:3c:97:6a:00:b8:8d:93:17:7a:f5:b6:b1:ea:
         0d:54:c9:f4:4e:f9:50:83:37:97:fb:8a:5f:c5:da:52:7a:68:
         e4:ef:13:78:7e:ea:e4:94:f4:c3:0f:33:e4:4a:08:a5:3c:4f:
         e0:14:ca:12:8e:ce:84:fb:e5:9f:78:76:c6:00:55:0f:83:cd:
         e0:9b:e1:2f:d8:21:0f:9f:fa:74:aa:03:93:c1:fb:51:9c:6b:
         04:2a:2c:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz
NjlDQkEwQjAwHhcNMjUxMDE5MDAxNjQ4WhcNMjUxMDI2MDAxNjQ4WjAYMRYwFAYD
VQQDEw02OGY0MmRmMC1hNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0R+lqI8J+I71EPMJkNY/R3WQ1M96+LZZ59gf1skjQkN7IoHfvsELkkj9aFH
2Ywq6TqQAEwsDH2zGC1xszfLPYQH28MvaUyQqkRrhKJMHVGnzpRrcUvySmsT6Gjq
+RahZiGyj1d+UHEMVTGW9VjsDcf0KkdGeYy6/rMrJyI1o5eZNPaFyUFUhoSphoWc
JSj0lecIVxFcV46IH4kwsbg0k66qmUXPLJKjuf+Vb+cFYRp46lZHyUlOJOs6xcMM
bXM85wJ4gmlFMnrYrtdDmp3XcW6YmZhKHVJKm1twWM04xvd0fE1zYZsQGjpH6CXt
/MjDWsDYzcavsFVw5wlLA/qQzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYUX2Ja
Ux+scaUY8EvIIy7LwQkiMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE
QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY
Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMG1rrtIhhMdU3cKsZAjHg9sTOuqj6XPdr/9fP8Y8HLAHJ8G5VJTVy
FD41csPk1/SqqvQQO9vLOPTdtKuK3kaT6R8Uj2txwlUYDSmVOCZH/YDYC7MpWNaa
/A0VpgvkQwYSGk+nzJ1L4BmUw6m4hUE3D8nPdOcvs4oD67qyVYXb83TsbqHimeGP
yhd3hOLDRZuxuYaZ5ZMS1xKZwtIEYG4p5q0TlvOV3DyXagC4jZMXevW2seoNVMn0
TvlQgzeX+4pfxdpSemjk7xN4furklPTDDzPkSgilPE/gFMoSjs6E++WfeHbGAFUP
g83gm+Ev2CEPn/p0qgOTwftRnGsEKiya
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:49 2025 by rpki-client