Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
File:                     Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json)
Hash identifier:          YVJ+qv2k4IEIY3Kb14fjU9UrQIhdfNtDLiGdj/TkYps=
Subject key identifier:   62:F4:EA:40:C5:97:C5:E9:40:1C:B3:32:2D:A3:2B:E8:39:44:63:5F
Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
Certificate issuer:       /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Certificate serial:       13C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
Manifest number:          13BF
Signing time:             Sun 02 Nov 2025 16:56:50 +0000
Manifest this update:     Sun 02 Nov 2025 16:56:50 +0000
Manifest next update:     Sun 09 Nov 2025 16:56:50 +0000
Files and hashes:         1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: 9qU006YC3GtnPQC+md/rj2i1ZpP0qVK+SthbmAUQiRU=)
                          2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl
                          rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5063 (0x13c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
        Validity
            Not Before: Nov  2 16:56:50 2025 GMT
            Not After : Nov  9 16:56:50 2025 GMT
        Subject: CN=69078d52-b3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:be:f4:ca:25:61:46:e9:e4:6b:39:61:20:
                    67:16:17:e9:1d:db:b5:88:40:c1:c4:d3:5d:0d:fa:
                    ba:08:87:da:2d:66:77:90:8d:43:05:ef:26:7e:1e:
                    a4:e3:6e:01:d5:ab:a0:71:02:8e:6b:ab:77:62:bd:
                    14:0d:c4:43:a8:f6:87:66:b3:5b:e1:0d:7b:63:3b:
                    75:37:bc:76:2c:b6:b9:c4:62:d1:db:bd:5f:dc:6e:
                    f3:ca:a2:ce:3b:f5:82:c9:53:e3:3d:a9:19:72:0e:
                    ef:eb:76:a5:ec:b5:e5:c3:88:07:52:8e:7b:d1:60:
                    a4:b6:d4:50:55:08:a5:c8:d6:6d:6e:b1:2a:5c:21:
                    31:de:a3:dd:d5:93:d4:4a:db:8b:a9:ab:75:aa:31:
                    e9:f8:09:39:e5:f8:a8:e9:65:f4:3d:b1:27:b4:92:
                    7e:89:3e:63:e1:f3:1a:16:5f:7f:aa:a7:f9:bc:21:
                    3f:c3:99:26:de:50:73:29:73:f5:34:29:68:e0:44:
                    a6:af:df:b3:5e:88:b6:cd:11:26:6b:25:de:bb:f5:
                    42:ff:2e:5c:81:e7:36:72:5c:ed:e1:1a:9f:23:f0:
                    63:0c:16:fd:ca:50:d8:5c:b8:79:37:1c:a1:9d:72:
                    4d:42:d3:90:64:81:5e:2f:38:3b:38:a0:ba:63:d8:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:EA:40:C5:97:C5:E9:40:1C:B3:32:2D:A3:2B:E8:39:44:63:5F
            X509v3 Authority Key Identifier:
                keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:1b:dc:27:24:24:1e:52:2a:71:ea:14:bf:02:2a:51:ba:
         a9:1e:c3:03:1f:6d:6d:b0:e0:78:e3:e4:c4:53:6f:6e:53:8b:
         03:bb:15:58:9f:4a:23:b3:b0:20:d9:55:13:db:90:99:b5:e3:
         f5:41:b7:8f:13:de:c9:72:e2:ec:b3:03:b7:ea:f3:1d:a9:7f:
         3f:9e:9c:00:28:fb:21:8d:69:55:61:8f:9a:75:8e:11:2b:c3:
         db:a6:75:1a:34:5b:c8:2d:a8:0a:93:82:f1:99:8d:ed:a3:13:
         39:77:9a:ee:df:b6:bc:a2:68:cc:e9:0a:ab:20:a2:33:e3:d3:
         46:0c:fe:b7:19:0d:05:a2:de:bf:33:56:57:1a:c2:7a:7a:4c:
         db:09:a9:5d:9a:ed:b7:f6:ac:f0:f2:cf:b8:2b:5e:f2:45:6e:
         e3:93:b5:24:67:8d:d5:86:16:6a:49:95:7f:37:c3:30:f1:21:
         6e:f1:86:16:2b:f3:34:0d:1d:8f:01:8a:1f:f6:87:2c:70:96:
         0a:13:05:ad:e1:20:a3:fd:d6:a4:26:01:31:86:4e:b1:8f:d2:
         1e:0c:b2:d9:ed:2d:a4:a5:38:83:10:ef:21:b2:b9:08:13:90:
         a0:dc:51:18:02:5b:26:ab:14:45:3d:13:1f:e1:0d:09:9b:73:
         10:2a:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:01 2025 by rpki-client