Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
File:                     Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json)
Hash identifier:          XsdWb5/PIB99Wydw3dOHRItLzL+E5DKEu3WS0iXpDc0=
Subject key identifier:   1F:41:EC:4D:E5:80:19:D2:91:94:2C:F8:C2:39:2A:6D:E8:16:EC:0F
Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
Certificate issuer:       /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Certificate serial:       13BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
Manifest number:          13B6
Signing time:             Sat 18 Oct 2025 17:26:17 +0000
Manifest this update:     Sat 18 Oct 2025 17:26:17 +0000
Manifest next update:     Sat 25 Oct 2025 17:26:17 +0000
Files and hashes:         1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: YTMdd6FTVVsU+/d5L4x5qZnN7eQIGWDY0igjWv/YQkY=)
                          2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl
                          rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5054 (0x13be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
        Validity
            Not Before: Oct 18 17:26:17 2025 GMT
            Not After : Oct 25 17:26:17 2025 GMT
        Subject: CN=68f3cdb9-e735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:aa:b1:55:5a:b9:81:b7:5e:21:bd:11:8e:
                    f1:45:43:cf:82:1a:8e:d2:94:13:26:b2:72:7e:4b:
                    bd:a1:3a:f2:7b:07:f3:22:1e:ea:56:06:31:f3:d2:
                    d0:97:5e:3f:4b:d9:23:45:d8:dc:9e:b1:67:f0:c8:
                    79:07:f0:e9:74:ba:d3:37:dd:08:09:21:88:1a:18:
                    1c:33:2c:50:89:ce:7e:09:66:b4:fc:2f:f6:c5:90:
                    7c:ea:c0:c5:84:ab:e6:b5:37:16:78:d7:7d:9b:c8:
                    0a:21:38:47:44:ec:12:6c:57:48:46:0a:c8:8f:1e:
                    22:d7:9b:40:c2:8e:fc:03:00:47:27:37:81:87:8f:
                    3e:0d:04:39:a4:9a:f0:80:eb:71:dd:ab:4f:ef:0b:
                    cf:85:c2:d0:a8:3c:98:85:28:8f:ac:d2:70:2f:4e:
                    3e:1e:db:ee:90:c6:0c:3c:eb:78:dc:24:7c:cd:3f:
                    e9:55:7c:7d:57:f4:25:e8:8d:fe:52:48:81:6a:2b:
                    90:09:f2:f7:9b:f3:36:fe:94:a7:9d:ee:e0:d0:36:
                    77:43:eb:86:7b:9c:46:a4:3c:21:44:06:2d:f9:9a:
                    f5:60:b1:33:26:ee:4b:2c:f1:8e:6c:e3:c4:d1:55:
                    9a:4b:8d:bd:02:77:c4:1a:96:ac:83:63:18:71:5a:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:41:EC:4D:E5:80:19:D2:91:94:2C:F8:C2:39:2A:6D:E8:16:EC:0F
            X509v3 Authority Key Identifier:
                keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:51:c0:b6:95:4f:67:99:64:ee:e7:ef:4b:d4:50:98:1a:
         c0:b9:1e:73:b5:69:77:b2:b1:e8:9c:ac:be:5d:2d:ee:58:08:
         e7:3a:e0:b3:9f:98:f8:b9:a7:ce:88:b2:d1:85:0e:7e:8f:45:
         d8:b8:3f:b8:ed:c1:a2:ec:49:10:af:aa:79:c5:0e:5f:d3:1e:
         ae:8f:95:44:ee:5a:71:b8:e0:19:3d:78:81:92:4e:7e:0b:b1:
         0f:a8:8f:ec:0a:ad:3d:bd:40:d4:16:9c:ee:77:c8:a0:75:2f:
         a2:f3:6f:b4:41:c8:44:43:bd:39:53:da:35:fe:1c:14:94:e8:
         f3:0b:76:87:41:3b:e8:ef:e6:97:57:8b:4a:ca:b6:b9:9f:4c:
         ea:4e:88:c9:e5:ea:ea:eb:54:34:19:a0:3d:3e:14:be:86:f3:
         7e:6a:ec:e5:92:50:87:ea:f0:6e:7c:d4:64:93:a9:d4:47:6e:
         64:b8:81:0c:1c:13:70:6b:39:f8:d8:1d:ea:b2:aa:43:5e:e9:
         74:59:ec:79:3f:6e:ce:ea:81:6b:6d:1f:16:ff:c1:57:11:b4:
         79:7c:af:7e:50:b0:96:83:55:3e:5e:93:85:45:73:b2:63:3d:
         34:74:56:5e:92:8f:25:f1:66:9a:46:56:90:4c:b1:9e:63:bc:
         b7:cb:40:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2
QTBERDkwRkEwHhcNMjUxMDE4MTcyNjE3WhcNMjUxMDI1MTcyNjE3WjAYMRYwFAYD
VQQDEw02OGYzY2RiOS1lNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApD6qsVVauYG3XiG9EY7xRUPPghqO0pQTJrJyfku9oTryewfzIh7qVgYx89LQ
l14/S9kjRdjcnrFn8Mh5B/DpdLrTN90ICSGIGhgcMyxQic5+CWa0/C/2xZB86sDF
hKvmtTcWeNd9m8gKIThHROwSbFdIRgrIjx4i15tAwo78AwBHJzeBh48+DQQ5pJrw
gOtx3atP7wvPhcLQqDyYhSiPrNJwL04+HtvukMYMPOt43CR8zT/pVXx9V/Ql6I3+
UkiBaiuQCfL3m/M2/pSnne7g0DZ3Q+uGe5xGpDwhRAYt+Zr1YLEzJu5LLPGObOPE
0VWaS429AnfEGpasg2MYcVo5PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9B7E3l
gBnSkZQs+MI5Km3oFuwPMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD
RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR
QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCzVHAtpVPZ5lk7ufvS9RQmBrAuR5ztWl3srHonKy+XS3uWAjnOuCz
n5j4uafOiLLRhQ5+j0XYuD+47cGi7EkQr6p5xQ5f0x6uj5VE7lpxuOAZPXiBkk5+
C7EPqI/sCq09vUDUFpzud8igdS+i82+0QchEQ705U9o1/hwUlOjzC3aHQTvo7+aX
V4tKyra5n0zqTojJ5erq61Q0GaA9PhS+hvN+auzlklCH6vBufNRkk6nUR25kuIEM
HBNwazn42B3qsqpDXul0Wex5P27O6oFrbR8W/8FXEbR5fK9+ULCWg1U+XpOFRXOy
Yz00dFZeko8l8WaaRlaQTLGeY7y3y0Am
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:36 2025 by rpki-client