Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
File:                     Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json)
Hash identifier:          0nulhkRCMPj8YOW6cRT5c5ra4jz7wM9t+edU6x/EGDY=
Subject key identifier:   56:50:44:50:37:5F:02:48:7B:72:13:15:43:05:1B:E0:7D:5B:C8:70
Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07
Certificate issuer:       /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
Manifest number:          0352
Signing time:             Fri 22 Aug 2025 21:44:22 +0000
Manifest this update:     Fri 22 Aug 2025 21:44:22 +0000
Manifest next update:     Fri 29 Aug 2025 21:44:22 +0000
Files and hashes:         1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: pYxK3+g6A8iA8WiTZ8R7cgJz4lwuZQ99B2K5ZMP+nUg=)
                          2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: N6uM6LPODGpuiPmHZixFqRNSQB/Ampu1xfizdkiLwDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
        Validity
            Not Before: Aug 22 21:44:22 2025 GMT
            Not After : Aug 29 21:44:22 2025 GMT
        Subject: CN=68a8e4b6-7b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:2a:ff:63:60:b3:82:18:0b:1b:81:be:6e:
                    98:21:5e:89:35:69:f4:f7:ce:fb:a1:a8:35:dc:0e:
                    c3:7e:b1:0b:6b:4d:91:d1:6f:5b:bd:8b:53:35:78:
                    3f:68:bd:50:c0:f3:8b:d2:ce:77:b2:21:9b:f4:92:
                    f0:f0:e4:ef:7e:85:c1:f9:f7:8c:16:58:41:2b:53:
                    22:7c:fe:eb:6b:24:0e:3f:af:87:c0:39:47:d8:27:
                    d4:10:0a:ec:aa:31:78:15:43:43:13:9b:e6:e4:cd:
                    7a:39:64:bb:a9:e7:bc:1b:3e:a0:eb:92:b5:80:22:
                    ac:0a:cc:77:5c:8a:bf:fc:e8:48:68:0f:e1:fd:fc:
                    5e:46:8b:61:5f:3e:c5:5c:7e:92:42:82:4f:86:92:
                    5f:a1:fc:83:7f:c3:c5:1b:e8:33:a2:db:00:e6:c6:
                    0d:6d:03:ed:d1:6c:7e:47:07:47:87:1f:5b:df:7a:
                    2d:5c:bc:9a:89:96:24:21:82:f2:51:4b:fa:97:89:
                    cc:38:42:11:76:1a:99:6b:d1:aa:ad:90:6a:e7:0a:
                    ba:02:56:17:6c:fb:d3:81:bb:01:c5:53:4e:ff:62:
                    79:24:f4:7d:9c:07:f6:e5:38:8b:de:d0:40:a6:74:
                    d4:29:bc:86:2d:78:39:3a:cd:45:de:e1:db:01:26:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:50:44:50:37:5F:02:48:7B:72:13:15:43:05:1B:E0:7D:5B:C8:70
            X509v3 Authority Key Identifier:
                keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9f:f8:96:c5:ab:60:b5:b1:7a:d2:c8:b9:87:95:93:86:75:
         13:55:ee:6a:cf:23:41:78:7d:44:95:1c:b0:b3:05:4a:91:f4:
         55:da:9c:49:7a:e5:70:55:ef:e3:23:15:09:2d:de:8c:ea:5f:
         2d:0c:ff:a8:e1:9d:f8:16:0c:f9:6b:d8:2a:02:53:b2:a8:2e:
         c4:82:59:6f:f3:cf:ab:55:68:0f:58:6d:6e:7b:23:d5:83:87:
         36:d8:5c:d4:59:3a:34:62:a2:58:b2:c2:04:ef:bc:50:63:c8:
         b0:3b:03:9a:b7:01:1b:e1:9c:e1:e7:ab:13:cf:7a:f3:1e:a3:
         ed:99:b9:2e:10:00:c1:83:5b:c8:92:af:38:b9:34:22:4f:36:
         ce:8d:11:0f:a5:0c:0a:18:16:f7:5d:25:ed:42:16:08:c7:af:
         87:7c:e2:75:34:b6:af:50:4a:fb:56:bd:22:ab:b4:dd:b3:e6:
         39:8c:ca:fb:29:b5:6b:be:89:e4:46:50:84:2a:c8:4d:8b:6d:
         3e:5b:32:ac:08:91:ed:77:88:ce:5a:37:bb:60:97:0e:4b:7e:
         e7:f4:a7:bf:79:a7:12:2a:18:5b:84:15:31:cb:08:00:5c:53:
         13:54:28:f9:7f:6a:ca:94:30:72:97:06:7e:98:4f:e0:dd:0a:
         d9:ae:c4:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxOEQxMTAvBgNVBAUTKDNERUQzQjQxRTIwM0Y4ODQ3MDAyOTZDODcwMTAwREZD
NEU3QjE1MDcwHhcNMjUwODIyMjE0NDIyWhcNMjUwODI5MjE0NDIyWjAYMRYwFAYD
VQQDEw02OGE4ZTRiNi03YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFAq/2Ngs4IYCxuBvm6YIV6JNWn09877oag13A7DfrELa02R0W9bvYtTNXg/
aL1QwPOL0s53siGb9JLw8OTvfoXB+feMFlhBK1MifP7rayQOP6+HwDlH2CfUEArs
qjF4FUNDE5vm5M16OWS7qee8Gz6g65K1gCKsCsx3XIq//OhIaA/h/fxeRothXz7F
XH6SQoJPhpJfofyDf8PFG+gzotsA5sYNbQPt0Wx+RwdHhx9b33otXLyaiZYkIYLy
UUv6l4nMOEIRdhqZa9GqrZBq5wq6AlYXbPvTgbsBxVNO/2J5JPR9nAf25TiL3tBA
pnTUKbyGLXg5Os1F3uHbASa8OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZQRFA3
XwJIe3ITFUMFG+B9W8hwMB8GA1UdIwQYMBaAFD3tO0HiA/iEcAKWyHAQDfxOexUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC82NjU2QTJBNENC
NDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1JUndBcGJJY0JBTl9FNTdG
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlMDdRZUlELUlSd0FwYkljQkFOX0U1N0ZRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTE4RC82NjU2QTJBNENCNDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1J
UndBcGJJY0JBTl9FNTdGUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkn/iWxatgtbF60si5h5WThnUTVe5qzyNBeH1ElRywswVKkfRV2pxJ
euVwVe/jIxUJLd6M6l8tDP+o4Z34Fgz5a9gqAlOyqC7Egllv88+rVWgPWG1ueyPV
g4c22FzUWTo0YqJYssIE77xQY8iwOwOatwEb4Zzh56sTz3rzHqPtmbkuEADBg1vI
kq84uTQiTzbOjREPpQwKGBb3XSXtQhYIx6+HfOJ1NLavUEr7Vr0iq7Tds+Y5jMr7
KbVrvonkRlCEKshNi20+WzKsCJHtd4jOWje7YJcOS37n9Ke/eacSKhhbhBUxywgA
XFMTVCj5f2rKlDBylwZ+mE/g3QrZrsSp
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:12 2025 by rpki-client