Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          cXbV9VBh/6T6PKbpL8QL1mKcqXtSqiXrgdEsXIIjrDY=
Subject key identifier:   CC:A5:38:2B:55:89:72:76:6F:40:04:4F:AF:6B:2F:DF:50:E1:2C:50
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          0227
Signing time:             Sun 19 Oct 2025 04:13:15 +0000
Manifest this update:     Sun 19 Oct 2025 04:13:14 +0000
Manifest next update:     Sun 26 Oct 2025 04:13:14 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: ETRSJQuOLJxP04VQmeKmPHT/IGc7HFlB/91HaIOr00k=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 3spAcopzpeJWyW5mR0mGk38MM078PmmdgI27LOSYIH0=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: aYUm1aVtuDy+5vYCksuuiVbwXJaF0tNfwYSEMBfgydU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Oct 19 04:13:14 2025 GMT
            Not After : Oct 26 04:13:14 2025 GMT
        Subject: CN=68f4655b-8187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:73:ab:a5:a1:38:23:0b:b7:ef:62:30:1c:
                    d9:d4:67:5c:3c:be:21:9a:61:f4:20:24:bc:1e:46:
                    5f:4e:e1:b9:56:7b:b5:60:b0:4e:37:b6:d0:4c:a6:
                    90:f2:e3:84:59:ca:a0:00:be:2a:a4:ae:0c:f5:a5:
                    a6:33:88:24:67:0c:19:d4:be:c9:53:30:1a:87:9d:
                    21:26:8a:e1:49:19:13:e0:1b:26:65:80:65:2b:a0:
                    e9:a1:7f:ff:17:cf:6c:46:07:f5:37:09:dc:f5:65:
                    03:51:2e:18:53:97:cc:7f:a5:1f:34:d7:06:b3:c4:
                    15:81:c3:e3:21:69:70:df:07:28:41:90:a7:b3:7d:
                    0b:9b:3f:85:9e:94:33:4b:ef:c1:61:d3:c2:8f:ed:
                    57:4c:77:13:65:aa:bb:a0:9a:f3:04:4f:c6:63:e4:
                    1e:fc:14:80:d4:d2:9a:eb:b8:a4:52:92:57:6d:39:
                    d7:d6:2f:51:da:0c:22:7d:3f:a4:32:79:b7:87:7b:
                    e5:51:bb:45:d2:f2:22:94:03:49:18:c0:11:05:79:
                    93:29:00:0a:55:fa:8e:56:e6:a4:6a:14:1d:78:f7:
                    b0:4c:77:95:ea:d4:fa:40:62:a8:67:68:e6:eb:29:
                    99:2d:99:c0:75:76:1c:b5:a5:0b:00:29:98:3b:e6:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:38:2B:55:89:72:76:6F:40:04:4F:AF:6B:2F:DF:50:E1:2C:50
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:22:a0:dd:47:7b:82:28:98:12:3a:9f:10:f1:eb:ab:04:
         e0:3d:ab:48:ab:c1:31:da:e8:c2:fa:08:6b:33:b2:74:1b:cf:
         85:35:49:62:6c:b9:c3:90:67:d0:79:2b:53:61:60:fc:29:40:
         26:b3:25:5b:76:16:03:6d:01:c5:64:bf:dc:66:1b:29:3a:69:
         4f:d2:9a:40:e8:9f:f2:bc:a6:9b:90:66:55:6a:e6:9d:ff:86:
         d6:f5:ed:3a:59:15:fe:e1:32:ca:c7:cd:a7:87:54:40:90:e4:
         ca:f2:14:e3:4f:78:41:4c:ee:98:94:43:64:81:2e:4f:83:00:
         e6:02:03:11:ac:87:f2:9d:b3:36:73:ff:c6:4c:ae:8b:c4:e8:
         f9:7d:73:8d:07:83:86:83:a2:84:33:41:2d:7e:57:b0:57:15:
         26:ae:59:0e:d6:fb:49:03:e9:c4:8f:bc:29:1f:ee:63:1d:ed:
         72:a5:db:ea:2a:47:8b:2c:2e:07:93:f6:9b:75:92:34:99:31:
         bf:c6:ea:1a:61:75:f8:fe:f7:13:a0:b8:10:56:90:cf:59:14:
         5b:dd:ec:4f:96:bc:1a:26:24:57:59:3f:2f:93:93:c5:ab:eb:
         e1:15:6a:39:0e:0f:d9:50:bb:1e:8f:ba:d7:f4:96:ca:e2:3c:
         c4:e2:6a:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD
MzEyQzZCRUIwHhcNMjUxMDE5MDQxMzE0WhcNMjUxMDI2MDQxMzE0WjAYMRYwFAYD
VQQDEw02OGY0NjU1Yi04MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbRzq6WhOCMLt+9iMBzZ1GdcPL4hmmH0ICS8HkZfTuG5Vnu1YLBON7bQTKaQ
8uOEWcqgAL4qpK4M9aWmM4gkZwwZ1L7JUzAah50hJorhSRkT4BsmZYBlK6DpoX//
F89sRgf1Nwnc9WUDUS4YU5fMf6UfNNcGs8QVgcPjIWlw3wcoQZCns30Lmz+FnpQz
S+/BYdPCj+1XTHcTZaq7oJrzBE/GY+Qe/BSA1NKa67ikUpJXbTnX1i9R2gwifT+k
Mnm3h3vlUbtF0vIilANJGMARBXmTKQAKVfqOVuakahQdePewTHeV6tT6QGKoZ2jm
6ymZLZnAdXYctaULACmYO+aonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMylOCtV
iXJ2b0AET69rL99Q4SxQMB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF
NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR
Wm1PV3RNSTlqdlhERXNhLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO2CKg3Ud7giiYEjqfEPHrqwTgPatIq8Ex2ujC+ghrM7J0G8+FNUli
bLnDkGfQeStTYWD8KUAmsyVbdhYDbQHFZL/cZhspOmlP0ppA6J/yvKabkGZVauad
/4bW9e06WRX+4TLKx82nh1RAkOTK8hTjT3hBTO6YlENkgS5PgwDmAgMRrIfynbM2
c//GTK6LxOj5fXONB4OGg6KEM0EtflewVxUmrlkO1vtJA+nEj7wpH+5jHe1ypdvq
KkeLLC4Hk/abdZI0mTG/xuoaYXX4/vcToLgQVpDPWRRb3exPlrwaJiRXWT8vk5PF
q+vhFWo5Dg/ZULsej7rX9JbK4jzE4mqx
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:42 2025 by rpki-client