Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          ASV32JHlbXkoZaaPOyO9B7LWOWexn1cLCffW8FF6tZg=
Subject key identifier:   C6:CE:37:75:88:28:13:8C:E1:14:F1:66:35:D6:7E:7C:5B:02:04:1D
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1FA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1CFF
Signing time:             Wed 22 Oct 2025 16:33:46 +0000
Manifest this update:     Wed 22 Oct 2025 16:33:45 +0000
Manifest next update:     Wed 29 Oct 2025 16:33:45 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: pAoWwv3w6fjergGKXSyJKiKm+YNrhZLTGKUogFi7I1Y=)
                          2: C362F1FC6E8A11F0BCC1991BC4F9AE02.roa (hash: ydv6JHZX5HxYCcM81vwZWeWAlo+E2UnhpXtUpF9b09s=)
                          3: A42AF5D0559111F08D8D0584C4F9AE02.roa (hash: FkUa4Y4fE67M165KQOCXOv0uBb3P1ghowmi2/pRPoi0=)
                          4: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: 2qn9NXSOf21uSxk9HsnL18AqcQ0bhCjIV+9nqDhn33Y=)
                          5: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: 3R0caWlbq1LOK9PMe9S0/RNrK2xglF1D20u07isPD7I=)
                          6: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: Rq28F8DG0yv7BlbarhDxq9/F29Ep/HSvPI5qoAbvOgs=)
                          7: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: APuEYDobiTkr+yjV+CCWI8xd4BdBtVmmm5ve6mCT6Qw=)
                          8: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 1S4Ze1eJ69z/bmw/D2eNMgh3uJmMcwiAvB3cJQ/oA/Q=)
                          9: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: x2K4iGB4XiPQaLbpOQU46N5zgaAZ4UmMEd3zJ7RSB2Q=)
                          10: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: mgxcBaGr7BI/56HJBlh6MCkHXWiHbJ+08mgJcXvNvJg=)
                          11: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: bhR5rDRi92lQT+/4ZT+LwH+kvujHBgyqcJUxAMDwnCU=)
                          12: F59F290A459B11F0AE80E433C4F9AE02.roa (hash: 9MfeAv3ExGwlQsjIUPGrk5ZfzNC4IazKk+fMrC6V7cQ=)
                          13: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: x9oCgx4OLMxvuQS3OLoI7upleDoGb9olbsuGUPW5kPs=)
                          14: E32743EEBCE711EFA920D83FC4F9AE02.roa (hash: CQQhpNpcrFkcxmZLzNkL+2k+UmrIbQvNlmEQq3sxyGQ=)
                          15: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: y7yNxeywRY1r8qYqNTXpqknUD3wMI4iVn5vIBSPv3v0=)
                          16: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: hL2Zdvxv4XI+3HFMfaS+1/ZokoAN1ShisW4m73K9Neo=)
                          17: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: Y5/Nm7yAB/blx4yGYi01eMUiV5qV/PTNhp++ArVqPjw=)
                          18: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: mtne+bMEBaQqJowTZo2wwhS1IpnM92WcDfLdziefH6w=)
                          19: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 0j38Uo+iFQdO5kEPFTuORuug7S4L8ZW5Ebjy0sA1lBc=)
                          20: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: IwC5LKAchJpvbQWM8/1J11MaLQt7r+hfsUvSRDAl+iw=)
                          21: E3FFB7282B1F11F09AACBB33C4F9AE02.roa (hash: eSBvSr9bRn6jhbrK6BtpitmGa1/YLUvUvJZQp7St0dE=)
                          22: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: oBbIK682wSEUP5TvritJ4KxrBNWU5rxHl4orE4VE3u4=)
                          23: 152C69AA6E7211F082AE972AC4F9AE02.roa (hash: jgLKgbr3d8wwY3fKPPD8A6I7jEuRD27KmM8wDR2ofOk=)
                          24: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: b5kRJtBI/pSUmP5v9Ia63CXCRGEXjqKz2TLjOK18uWc=)
                          25: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: xjE1wzsHVmSRCzFdeF0NIrknzjRrx9wDvb8yKtaqn18=)
                          26: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: dSsX5nHKXYb9bOl0U0xbwpvb4MLDdOQ/bdm2Sv2pyUc=)
                          27: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: gPqt9BXjKpUpT8BxS+2RF03m6ynmeK5bKK/XmFQPRsc=)
                          28: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: Lvk9jUc2nOmVqiloTp/GHNCkrAD4k8B4c9WxpWLobz0=)
                          29: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: dcnIGRDuhe/YVo11t/zCICa2zZu3fwNbXzjiiNbdEso=)
                          30: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: pzwrfGOBC1aqTT139+tbu2nilQDwKj9t+kR3PSIwn0Y=)
                          31: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: RV8EJBlleyhzVkG95IjKL2zXI9QzuqZSxvDEwW6Abdc=)
                          32: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: KwfuEN2GtNIeymat9QicYfvjGAixMAdsbfteX7WUvEg=)
                          33: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: nXSnzDLmzp0BLqr6LnwQS+rSkrXmy8a6H9txoxxzEAU=)
                          34: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: uysLyPq5b4frr5fJrVPEOfj4Wx/jhSmFE2Cw3P/UT04=)
                          35: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: w2SR4epUhMFSAcQK3/dc+xj2nRxXuAifHwZUSCbmzIY=)
                          36: F3309B3004D011E994985639C4F9AE02.roa (hash: cBlfvRvu5XPZeGK26Yrs2RLgQwg2/ERxPdd95ScxBkY=)
                          37: 9D1066F8474111F08A856E0FC4F9AE02.roa (hash: osyXK4bFAXBaALZNfhA8dh2eViVUfO9fCufB9qUWT7E=)
                          38: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: 6CETeBmdxLp575yCFO+woa7316cbcGtcb5tHB4lGr3U=)
                          39: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: CT9oR+mour9icf2SXlc68B/oJLLnyCcyaxA9b5EH/aA=)
                          40: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: y1hSxpTcRmvGSlokMiKmUttArX3J3HAaJ4mrrIaV/Z0=)
                          41: F5CC48A804D011E994985639C4F9AE02.roa (hash: doD+yTdaGVyKwIsSSZCRhj5n7eg36BNqzqq+qHdoKjY=)
                          42: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: kamFVk5Lhqt3swGOQVtx9Xo8vPBROM2IhuUHDFxP/BE=)
                          43: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: ILtcyDU15URhGSa5Kjj9yOQZtiWVIFSi4W87UvdNp7k=)
                          44: 50550748066011EEA5F59657C4F9AE02.roa (hash: 85uNE5EA4RwePX68ecsox54cbRTW2BiV90sMJiT4zJc=)
                          45: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: iWkHjXOrmmMyudZnFP7UPWo3G/SVzy0m5OG/H6qexGA=)
                          46: BD58F50404D311E9A6452047C4F9AE02.roa (hash: 4P793Jb0fesAoesXcB5RaDkBjyGdPNj+Zecm5mMaFtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 16:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8102 (0x1fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Oct 22 16:33:45 2025 GMT
            Not After : Oct 29 16:33:45 2025 GMT
        Subject: CN=68f9076a-eabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:39:0c:27:ba:fc:3a:5b:cd:06:9b:96:24:
                    a4:d7:c8:34:12:fc:d1:09:8e:1f:50:ed:7c:c9:15:
                    ad:7e:31:f3:fe:a1:a8:fa:3b:c8:8d:a2:8c:b6:9b:
                    24:8d:e3:44:1a:88:3e:1f:b0:61:cc:d0:22:55:ec:
                    0c:a5:9f:eb:70:9e:28:bb:9b:09:41:ef:d7:67:b5:
                    68:e9:0d:2f:de:66:25:89:22:7f:48:dd:5d:9c:6a:
                    28:0e:6a:a0:b9:e2:c9:c0:08:c9:93:a3:d6:c2:93:
                    50:37:22:fb:20:f9:9c:70:a7:45:98:e3:9d:42:de:
                    97:7d:24:e5:63:f5:a5:55:8d:2c:9c:e4:9c:29:82:
                    c8:af:12:29:4a:00:4d:59:ad:04:c7:d7:74:cd:65:
                    ed:c5:16:ad:40:2a:cc:cc:a4:de:33:d1:af:78:48:
                    b3:c6:a9:08:7d:5f:5e:3b:0f:41:d7:09:5c:30:c1:
                    14:67:58:92:dc:e1:d6:18:00:36:98:73:dd:79:17:
                    2c:81:e3:b0:47:4f:11:c1:57:37:22:1f:75:67:c5:
                    77:06:4b:aa:d7:3b:a2:be:1f:4d:7d:69:13:81:30:
                    cf:3f:29:22:a3:10:fb:35:d2:33:31:47:dd:ea:69:
                    10:6e:1c:60:e7:3d:a7:1a:38:eb:03:6d:7a:39:94:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:37:75:88:28:13:8C:E1:14:F1:66:35:D6:7E:7C:5B:02:04:1D
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f8:f1:bf:40:27:6e:21:ae:0c:8c:05:fc:20:5d:12:ae:6d:
         f3:e4:e7:00:32:51:a4:56:16:35:32:0d:21:09:f6:37:ca:50:
         6d:74:c5:14:d0:0b:3d:39:24:c3:f3:66:c4:16:91:79:67:8b:
         9e:ae:47:c4:21:a2:c8:51:80:f2:e5:8f:d0:dc:1e:27:86:aa:
         c9:6f:54:91:3c:74:f1:7b:79:8a:19:64:1e:e2:75:6b:20:f6:
         94:be:6b:94:0f:71:9d:9e:34:76:7b:97:3d:d0:cc:b7:62:57:
         46:8e:95:88:6b:a4:55:bc:fa:83:79:36:49:b8:ad:aa:7e:bf:
         9e:c3:d8:0b:05:47:30:0f:dc:d5:e5:45:91:be:6a:db:2a:7a:
         ff:4b:14:4b:87:fd:1e:60:6b:11:58:d0:ff:80:44:ee:71:3e:
         a1:0d:3f:ee:ef:18:a1:21:e0:8b:15:06:9a:b0:8a:75:f5:78:
         50:a5:6f:20:bf:ce:47:28:b8:b2:df:96:59:7b:6c:d8:10:76:
         4a:3f:f4:4f:5e:6f:59:48:25:1e:43:1f:0a:c2:29:3a:41:be:
         01:46:04:25:46:f6:50:a2:2f:14:05:8d:b4:24:12:e0:5c:d0:
         b1:49:a0:1b:46:8c:06:e8:dc:28:79:b3:64:9d:51:f3:c2:de:
         ed:7d:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:54:48 2025 by rpki-client