Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
File:                     hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json)
Hash identifier:          7rx5qJkxNYJroTC5x3HO7QiAB946GSnL5bRSyeaI6DI=
Subject key identifier:   8B:4F:F1:7C:18:FB:15:F0:3A:2C:14:F1:6F:B8:05:C4:56:B5:28:07
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Certificate issuer:       /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
Manifest number:          01BA
Signing time:             Sun 19 Oct 2025 05:38:19 +0000
Manifest this update:     Sun 19 Oct 2025 05:38:19 +0000
Manifest next update:     Sun 26 Oct 2025 05:38:19 +0000
Files and hashes:         1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: 8VSrjwSwCVv22w7oltnb+C1D2qb2Xrkq8Tjl5AWt9gc=)
                          2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=)
                          3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=)
                          4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
        Validity
            Not Before: Oct 19 05:38:19 2025 GMT
            Not After : Oct 26 05:38:19 2025 GMT
        Subject: CN=68f4794b-df8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:89:80:19:d9:49:81:06:ad:17:5f:4a:3a:
                    0b:13:44:53:3b:05:d0:33:45:67:fd:16:18:00:13:
                    f7:9d:46:9b:df:1b:db:26:f8:5e:e9:ec:02:97:f1:
                    1e:97:da:64:70:8e:c6:b4:93:c7:d9:24:1c:13:4d:
                    33:d0:94:e4:94:c3:8d:64:f9:81:60:5e:d7:cc:b1:
                    0f:01:0b:1b:e7:a5:d9:ab:02:ce:40:53:c0:49:11:
                    48:f7:64:68:dd:cc:fb:b1:d8:db:69:a1:10:77:3f:
                    4b:5a:9a:58:56:e0:c3:0e:73:3a:89:1d:7b:72:1c:
                    4c:36:a9:a8:f3:6c:14:cc:a7:0e:45:d6:f6:0a:43:
                    d6:8b:56:a0:4e:98:eb:a9:00:97:3d:55:a3:eb:86:
                    6a:31:fb:69:62:9b:34:32:4b:76:2e:0f:0a:ee:56:
                    7f:c6:a9:1b:59:ae:fd:7d:e2:95:4f:0c:ef:d7:ae:
                    bc:5c:be:f0:29:ff:f9:7d:ff:e9:ef:f5:1c:a9:7e:
                    8d:c2:66:c1:d6:1a:fb:a5:2c:03:a4:b7:16:cb:5d:
                    59:69:48:e3:8a:74:3b:1a:bb:d8:fe:9a:82:4f:7a:
                    f7:d1:39:fe:72:fe:27:a1:3b:42:7b:fa:aa:5d:52:
                    d0:5a:3d:2d:e0:5a:35:af:77:1a:86:2a:54:d2:f7:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4F:F1:7C:18:FB:15:F0:3A:2C:14:F1:6F:B8:05:C4:56:B5:28:07
            X509v3 Authority Key Identifier:
                keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f1:4c:0d:62:54:7d:6f:30:0d:7c:31:39:3c:b2:b1:53:95:
         80:bf:d3:c2:4d:9e:1d:ba:4f:be:94:8b:a5:f6:11:a1:e8:74:
         39:c1:6a:f8:4b:19:c8:20:84:43:6b:c5:39:d6:0e:8e:57:9c:
         64:8a:85:51:d0:60:2c:f7:41:82:f5:71:a1:32:f1:5c:cb:22:
         90:c2:98:65:e8:63:c2:41:6e:06:f3:68:29:7d:d4:e2:7d:b8:
         6f:57:71:5c:a0:03:7e:68:cd:bd:2d:a2:f9:c5:2c:62:9c:dd:
         dd:00:57:7e:84:a5:c9:3a:ea:38:bb:3d:fb:0c:07:c1:03:a7:
         fd:80:0f:7b:b6:ca:b6:37:46:1c:b5:e3:1e:39:cd:7b:c3:54:
         93:a7:63:e6:d2:df:bb:66:c2:e6:41:16:5c:37:d0:d1:7a:44:
         01:d7:bc:7a:45:20:23:94:6c:ba:6a:7a:dd:18:e5:ed:46:6e:
         cd:98:47:c8:b1:42:56:ed:8d:3e:2d:6b:db:0d:6c:c0:a0:49:
         f1:1e:9a:b9:e3:f1:de:3e:86:a1:b4:d6:f2:11:b2:19:21:8d:
         4f:24:fd:f8:22:82:04:29:49:89:0f:23:e6:44:81:7a:a4:3e:
         d7:f5:41:fc:12:9f:27:42:7d:37:a3:c1:95:bd:18:5a:7c:23:
         a2:b0:01:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw
OUQzQ0M5NTMwHhcNMjUxMDE5MDUzODE5WhcNMjUxMDI2MDUzODE5WjAYMRYwFAYD
VQQDEw02OGY0Nzk0Yi1kZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1WJgBnZSYEGrRdfSjoLE0RTOwXQM0Vn/RYYABP3nUab3xvbJvhe6ewCl/Ee
l9pkcI7GtJPH2SQcE00z0JTklMONZPmBYF7XzLEPAQsb56XZqwLOQFPASRFI92Ro
3cz7sdjbaaEQdz9LWppYVuDDDnM6iR17chxMNqmo82wUzKcORdb2CkPWi1agTpjr
qQCXPVWj64ZqMftpYps0Mkt2Lg8K7lZ/xqkbWa79feKVTwzv1668XL7wKf/5ff/p
7/UcqX6NwmbB1hr7pSwDpLcWy11ZaUjjinQ7GrvY/pqCT3r30Tn+cv4noTtCe/qq
XVLQWj0t4Fo1r3cahipU0vdrkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItP8XwY
+xXwOiwU8W+4BcRWtSgHMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1
MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK
cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCj8UwNYlR9bzANfDE5PLKxU5WAv9PCTZ4duk++lIul9hGh6HQ5wWr4
SxnIIIRDa8U51g6OV5xkioVR0GAs90GC9XGhMvFcyyKQwphl6GPCQW4G82gpfdTi
fbhvV3FcoAN+aM29LaL5xSxinN3dAFd+hKXJOuo4uz37DAfBA6f9gA97tsq2N0Yc
teMeOc17w1STp2Pm0t+7ZsLmQRZcN9DRekQB17x6RSAjlGy6anrdGOXtRm7NmEfI
sUJW7Y0+LWvbDWzAoEnxHpq54/HePoahtNbyEbIZIY1PJP34IoIEKUmJDyPmRIF6
pD7X9UH8Ep8nQn03o8GVvRhafCOisAG/
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:16 2025 by rpki-client