Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
File:                     Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json)
Hash identifier:          Au3FNzW5s2aGPT3ka56KGiU60ICEXeFGb4NllmhDgdI=
Subject key identifier:   E8:D8:93:A1:3E:A9:2B:E9:67:A5:9B:AF:24:0F:4C:A2:57:E7:45:CB
Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07
Certificate issuer:       /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
Certificate serial:       033C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
Manifest number:          0338
Signing time:             Wed 02 Jul 2025 21:56:45 +0000
Manifest this update:     Wed 02 Jul 2025 21:56:44 +0000
Manifest next update:     Wed 09 Jul 2025 21:56:44 +0000
Files and hashes:         1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: PHXdz3ZiN8QUnaitZ22BuQbDpTB4kDiUcyaCnOqYWRk=)
                          2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: N6uM6LPODGpuiPmHZixFqRNSQB/Ampu1xfizdkiLwDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
        Validity
            Not Before: Jul  2 21:56:44 2025 GMT
            Not After : Jul  9 21:56:44 2025 GMT
        Subject: CN=6865ab1d-f23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:41:7e:e8:a5:80:95:ee:75:83:b1:38:b9:
                    f1:a5:65:d3:e7:a3:3d:fe:64:73:5d:90:56:37:11:
                    b3:36:2c:c8:91:41:6d:d7:05:97:34:dc:ca:d8:0d:
                    47:50:55:76:d2:af:7f:35:f1:ea:b0:7f:b0:36:37:
                    5d:0f:3b:64:da:6a:37:7a:41:fe:18:58:98:1e:10:
                    92:1a:0f:84:13:c8:6e:32:ed:0c:a3:74:c1:14:09:
                    a4:fe:98:28:48:3b:f2:4b:b0:59:6b:9e:9d:69:1a:
                    04:4f:c6:eb:fa:1d:c5:49:dc:6a:a4:bf:74:9a:ec:
                    d2:71:ec:c5:98:41:1c:a4:e0:b2:17:1b:5b:46:c3:
                    2d:23:5e:b9:66:41:cd:5d:12:0d:36:d5:5c:66:06:
                    2d:fd:a2:a6:e2:46:98:e4:1c:30:77:e8:64:f3:f4:
                    ff:04:2f:ec:4b:67:bf:f3:07:f2:91:29:34:40:20:
                    40:32:b0:cb:85:54:9e:af:24:9f:cd:8c:db:f7:00:
                    2f:b5:37:a3:f4:bb:8a:9a:6d:65:23:5c:a4:0b:21:
                    23:26:89:7e:16:cf:05:a1:79:65:57:54:39:ff:f6:
                    90:58:41:8f:4a:45:c1:e0:d5:70:ff:a1:15:fe:77:
                    38:c6:29:2d:54:f1:b3:b8:20:8d:e4:b6:9e:31:54:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D8:93:A1:3E:A9:2B:E9:67:A5:9B:AF:24:0F:4C:A2:57:E7:45:CB
            X509v3 Authority Key Identifier:
                keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:e8:01:ab:5f:65:34:12:32:d6:9d:d0:c2:3a:7b:f1:09:
         24:eb:26:a2:f8:d1:c9:62:ba:36:35:73:6f:39:d9:55:9c:13:
         d0:90:61:f1:fe:ce:d1:52:4d:93:f4:2a:7d:46:0b:31:71:49:
         2d:c0:17:32:53:78:57:6e:f3:31:ec:6a:e4:60:22:f9:cf:0b:
         03:29:1b:c0:fb:98:d2:b6:d9:51:3a:42:5f:ca:8e:09:12:e1:
         e3:4c:3c:17:82:d2:ac:ac:88:57:23:00:53:07:39:15:be:57:
         74:5b:9f:30:14:89:58:48:f6:be:4d:d4:e4:9c:9a:fd:39:f3:
         69:11:06:0b:16:66:eb:20:09:c5:24:e7:fc:21:26:70:c8:9c:
         00:dc:80:c5:22:61:a2:08:56:e5:49:9f:95:01:5f:ee:62:50:
         fb:82:7a:48:5f:f4:78:07:98:fe:fb:f7:d2:98:53:d7:3a:5b:
         a8:51:43:32:e3:cb:90:4c:3a:ae:ff:d6:c8:99:98:ea:1d:f9:
         af:d6:ca:26:51:d2:cd:19:2c:b9:d8:82:cd:5d:40:08:32:44:
         cf:93:f6:a7:df:2b:f2:01:3e:09:37:cf:21:5c:e0:8b:9a:2f:
         9c:8a:91:b2:47:e9:bb:06:74:4a:7a:02:71:ab:b3:a3:d1:cb:
         64:74:b1:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxOEQxMTAvBgNVBAUTKDNERUQzQjQxRTIwM0Y4ODQ3MDAyOTZDODcwMTAwREZD
NEU3QjE1MDcwHhcNMjUwNzAyMjE1NjQ0WhcNMjUwNzA5MjE1NjQ0WjAYMRYwFAYD
VQQDEw02ODY1YWIxZC1mMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjlBfuilgJXudYOxOLnxpWXT56M9/mRzXZBWNxGzNizIkUFt1wWXNNzK2A1H
UFV20q9/NfHqsH+wNjddDztk2mo3ekH+GFiYHhCSGg+EE8huMu0Mo3TBFAmk/pgo
SDvyS7BZa56daRoET8br+h3FSdxqpL90muzScezFmEEcpOCyFxtbRsMtI165ZkHN
XRINNtVcZgYt/aKm4kaY5Bwwd+hk8/T/BC/sS2e/8wfykSk0QCBAMrDLhVSerySf
zYzb9wAvtTej9LuKmm1lI1ykCyEjJol+Fs8FoXllV1Q5//aQWEGPSkXB4NVw/6EV
/nc4xiktVPGzuCCN5LaeMVSJSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjYk6E+
qSvpZ6WbryQPTKJX50XLMB8GA1UdIwQYMBaAFD3tO0HiA/iEcAKWyHAQDfxOexUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC82NjU2QTJBNENC
NDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1JUndBcGJJY0JBTl9FNTdG
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlMDdRZUlELUlSd0FwYkljQkFOX0U1N0ZRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTE4RC82NjU2QTJBNENCNDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1J
UndBcGJJY0JBTl9FNTdGUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNoegBq19lNBIy1p3Qwjp78Qkk6yai+NHJYro2NXNvOdlVnBPQkGHx
/s7RUk2T9Cp9RgsxcUktwBcyU3hXbvMx7GrkYCL5zwsDKRvA+5jSttlROkJfyo4J
EuHjTDwXgtKsrIhXIwBTBzkVvld0W58wFIlYSPa+TdTknJr9OfNpEQYLFmbrIAnF
JOf8ISZwyJwA3IDFImGiCFblSZ+VAV/uYlD7gnpIX/R4B5j++/fSmFPXOluoUUMy
48uQTDqu/9bImZjqHfmv1somUdLNGSy52ILNXUAIMkTPk/an3yvyAT4JN88hXOCL
mi+cipGyR+m7BnRKegJxq7Oj0ctkdLEx
-----END CERTIFICATE-----
Generated at Thu Jul 3 20:35:21 2025 by rpki-client