Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
File:                     R8cEZQRKLhQBRUf6ebt6VP42674.mft (raw, json)
Hash identifier:          eyN7ZsjP4miipPDkDk6ocnq0ve68Rae60V4qxU8uXFg=
Subject key identifier:   0F:E6:23:C6:58:52:33:DF:F5:15:A6:70:CB:67:7E:74:04:D2:0D:3E
Authority key identifier: 47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
Certificate issuer:       /CN=A919B80A/serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Certificate serial:       06E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
Manifest number:          06DE
Signing time:             Sat 18 Oct 2025 23:26:42 +0000
Manifest this update:     Sat 18 Oct 2025 23:26:41 +0000
Manifest next update:     Sat 25 Oct 2025 23:26:41 +0000
Files and hashes:         1: R8cEZQRKLhQBRUf6ebt6VP42674.crl (hash: ZhMQbWk/ZtxPau3vV9s5i5m7LuY3RpJ94vZQurWXx5o=)
                          2: 858F093E6D6C11EBA3CFBD21C4F9AE02.roa (hash: bRtjBGYS/QbRw/iqaVSzb9XF2vNOvi7n10101duqilA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl
                          rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B80A, serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
        Validity
            Not Before: Oct 18 23:26:41 2025 GMT
            Not After : Oct 25 23:26:41 2025 GMT
        Subject: CN=68f42232-938e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:70:d8:4a:cc:70:be:74:b5:0f:56:2f:c4:70:
                    bc:c2:e1:5d:18:9e:30:f5:c1:9c:f1:b9:6c:a4:ad:
                    61:fb:3d:b0:c1:85:0c:e0:8a:66:18:5e:b0:21:a6:
                    68:f5:00:7e:72:6b:3e:71:71:50:14:6b:19:7a:ad:
                    c1:63:f2:0e:e4:1a:17:81:83:8a:d8:bb:f3:dc:ac:
                    5b:9f:d2:f6:d4:d1:66:ef:a1:af:7e:aa:16:64:61:
                    c9:95:eb:8b:2e:51:32:52:9f:57:80:c0:ad:8c:db:
                    65:93:0d:b2:2e:e7:9a:03:d9:83:ac:36:ae:71:35:
                    b4:ee:95:f4:14:e4:c8:ba:4f:f8:b3:f4:f0:4c:04:
                    95:5c:a5:d3:b4:bc:d9:16:e4:61:6e:4e:28:58:60:
                    31:cf:ff:8e:3f:2e:48:fd:e3:b1:0f:bb:19:f0:cb:
                    3f:63:77:ec:8b:29:b2:6e:59:27:c3:58:85:61:c7:
                    d9:77:da:35:5b:65:1b:bf:ea:15:81:cb:5a:67:cd:
                    a3:23:a4:e8:a7:53:e5:2b:db:7f:12:c0:c2:62:db:
                    10:57:b2:a5:c1:7a:05:38:75:ea:bd:30:ea:ca:5a:
                    ca:a3:4d:11:2f:34:fb:43:d5:8e:54:ad:44:87:40:
                    e7:fb:f1:fd:b0:7b:f7:f9:b4:9f:83:fc:57:ac:58:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:23:C6:58:52:33:DF:F5:15:A6:70:CB:67:7E:74:04:D2:0D:3E
            X509v3 Authority Key Identifier:
                keyid:47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:c9:7c:39:8f:c1:7a:df:0e:7e:1f:bb:52:da:e5:de:78:
         ac:49:b2:f9:1e:d8:06:04:f4:c0:91:51:81:12:31:21:f8:22:
         c6:40:65:e0:7a:49:59:c3:20:90:be:ea:0a:69:e1:b0:dc:3c:
         c6:ae:06:14:1d:91:54:8d:41:bf:29:10:a8:c5:17:fe:0b:b6:
         5a:9d:d8:94:af:a8:75:80:d7:52:45:86:d7:9a:80:01:90:bd:
         07:2e:65:da:ff:cc:2b:80:e1:64:87:32:37:05:26:af:8e:cd:
         ed:51:e9:3c:8d:3b:70:a3:d5:d5:e5:80:22:86:d6:ce:74:3d:
         ab:82:b4:a8:d9:ae:ea:28:81:c9:97:3f:be:b5:7c:b3:4a:db:
         6e:cc:05:34:ea:57:a0:b0:88:23:52:c3:f9:77:c1:d6:b7:3c:
         30:20:ee:0f:4a:2a:7b:42:62:cf:a6:5a:f8:7a:fc:68:9f:0f:
         64:b6:84:9b:85:d5:5a:5c:cb:2d:51:ee:38:b2:d2:0c:5d:29:
         23:04:3f:b8:b5:34:46:51:0f:8f:41:eb:20:91:d7:aa:ed:a6:
         c7:7a:9a:d9:25:9e:f3:1d:7d:a4:4f:72:68:e7:aa:c2:b5:e2:
         3c:eb:fe:26:01:ce:c4:99:90:4e:be:3a:4f:95:37:30:5b:b0:
         ec:80:bd:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4MEExMTAvBgNVBAUTKDQ3QzcwNDY1MDQ0QTJFMTQwMTQ1NDdGQTc5QkI3QTU0
RkUzNkVCQkUwHhcNMjUxMDE4MjMyNjQxWhcNMjUxMDI1MjMyNjQxWjAYMRYwFAYD
VQQDEw02OGY0MjIzMi05MzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7HDYSsxwvnS1D1YvxHC8wuFdGJ4w9cGc8blspK1h+z2wwYUM4IpmGF6wIaZo
9QB+cms+cXFQFGsZeq3BY/IO5BoXgYOK2Lvz3Kxbn9L21NFm76GvfqoWZGHJleuL
LlEyUp9XgMCtjNtlkw2yLueaA9mDrDaucTW07pX0FOTIuk/4s/TwTASVXKXTtLzZ
FuRhbk4oWGAxz/+OPy5I/eOxD7sZ8Ms/Y3fsiymyblknw1iFYcfZd9o1W2Ubv+oV
gctaZ82jI6Top1PlK9t/EsDCYtsQV7KlwXoFOHXqvTDqylrKo00RLzT7Q9WOVK1E
h0Dn+/H9sHv3+bSfg/xXrFgY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/mI8ZY
UjPf9RWmcMtnfnQE0g0+MB8GA1UdIwQYMBaAFEfHBGUESi4UAUVH+nm7elT+Nuu+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgwQS9GOEU3MjI1NjZE
NkExMUVCQjA0Rjg2MjBDNEY5QUUwMi9SOGNFWlFSS0xoUUJSVWY2ZWJ0NlZQNDI2
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4Y0VaUVJLTGhRQlJVZjZlYnQ2VlA0MjY3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjgwQS9GOEU3MjI1NjZENkExMUVCQjA0Rjg2MjBDNEY5QUUwMi9SOGNFWlFSS0xo
UUJSVWY2ZWJ0NlZQNDI2NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEosl8OY/Bet8Ofh+7Utrl3nisSbL5HtgGBPTAkVGBEjEh+CLGQGXg
eklZwyCQvuoKaeGw3DzGrgYUHZFUjUG/KRCoxRf+C7ZandiUr6h1gNdSRYbXmoAB
kL0HLmXa/8wrgOFkhzI3BSavjs3tUek8jTtwo9XV5YAihtbOdD2rgrSo2a7qKIHJ
lz++tXyzSttuzAU06legsIgjUsP5d8HWtzwwIO4PSip7QmLPplr4evxonw9ktoSb
hdVaXMstUe44stIMXSkjBD+4tTRGUQ+PQesgkdeq7abHeprZJZ7zHX2kT3Jo56rC
teI86/4mAc7EmZBOvjpPlTcwW7DsgL0a
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:43 2025 by rpki-client