Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File:                     0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier:          nRS+IeBSGptzq+m9qNpyBAgWq3mPYvC9ioNJEB5fc9I=
Subject key identifier:   03:0A:49:D4:15:68:1F:2B:BC:55:BB:1B:45:92:47:C7:3C:EB:F7:B0
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer:       /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number:          010E
Signing time:             Thu 23 Oct 2025 06:41:24 +0000
Manifest this update:     Thu 23 Oct 2025 06:41:24 +0000
Manifest next update:     Thu 30 Oct 2025 06:41:24 +0000
Files and hashes:         1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: 3GhpUWiht1k3elf3RmYJw8pFE5GAQoCIQBbMEg7zoIc=)
                          2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: 9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
                          rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 06:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
        Validity
            Not Before: Oct 23 06:41:24 2025 GMT
            Not After : Oct 30 06:41:24 2025 GMT
        Subject: CN=68f9ce14-547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:2e:47:76:8e:cf:41:d1:f7:8b:6c:0e:47:
                    4f:40:92:3d:eb:81:93:cd:42:8f:2e:c0:7b:ad:a3:
                    52:82:c8:10:4f:f0:2b:5d:9a:75:aa:ed:42:14:70:
                    0a:57:41:a9:29:62:d7:35:32:2c:b0:d0:73:b7:21:
                    8d:ba:19:a7:9e:ae:60:1b:e0:b4:b1:1e:48:3a:3f:
                    f1:3c:8c:2f:9c:a5:f1:80:ac:80:91:02:49:2c:94:
                    8c:0c:68:a0:0d:d0:b3:a7:f2:79:7d:f5:d9:27:5e:
                    ef:5e:34:5c:40:63:a3:e1:4c:97:39:93:91:eb:da:
                    9a:d4:77:ca:56:d2:6c:8f:a3:fd:66:e2:25:96:89:
                    12:49:65:f3:22:db:51:01:d7:12:16:70:e0:d6:4f:
                    01:b5:bd:e7:40:cd:a0:2f:0d:58:4e:18:53:2c:b7:
                    13:24:e3:74:63:6b:a4:40:dd:21:fb:16:57:0b:33:
                    1a:c6:63:e8:f6:a1:05:ec:44:6d:27:25:12:29:65:
                    f7:84:19:9e:47:4d:73:ed:05:d8:31:26:1d:1f:e0:
                    3f:8c:15:34:c0:63:f2:28:6d:6e:cf:34:f8:08:98:
                    0b:cb:10:f0:3c:0e:4d:e8:aa:60:e0:bc:1c:86:3c:
                    cf:d8:d5:b5:78:95:fb:7d:bb:1d:74:c0:ad:a8:9f:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:49:D4:15:68:1F:2B:BC:55:BB:1B:45:92:47:C7:3C:EB:F7:B0
            X509v3 Authority Key Identifier:
                keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:92:ab:49:64:7b:e6:bf:e7:df:91:1a:4d:65:ca:80:e5:a8:
         50:14:f3:3f:f5:f5:32:7b:b4:cf:c8:a4:0e:b7:7a:7c:fe:18:
         81:6f:28:dd:12:bd:3c:9d:e9:82:9f:60:4e:5f:ee:a2:e5:37:
         78:98:5d:f0:b3:e6:5f:8c:f4:49:65:5b:00:a3:cd:10:38:94:
         25:e6:48:95:c4:7f:b7:27:fb:da:a2:45:91:d7:ff:ff:54:7c:
         63:9d:5b:45:84:03:4b:c0:54:e7:80:8d:fc:65:1c:91:8e:02:
         53:44:f8:c2:e4:6a:0e:87:90:a1:2b:2c:20:b2:4b:26:40:9c:
         d7:1d:12:57:5d:eb:b0:2e:cc:7a:8e:2a:bc:c2:2b:7d:ed:57:
         eb:11:e2:bd:0b:c6:4d:53:41:27:e5:e9:17:fe:91:71:75:1b:
         7e:5d:af:42:4c:09:4d:9b:e7:20:82:1e:5a:83:d9:8f:93:ba:
         aa:66:20:9a:c6:68:9a:a4:b8:65:21:93:72:9a:c4:42:22:c7:
         1a:43:b1:72:5c:d1:34:e8:0b:3c:8e:36:9b:58:9c:31:4b:ec:
         49:e1:7a:d4:04:b7:40:88:8a:e5:06:41:01:ff:3a:86:d0:a4:
         a9:2a:ef:36:32:c8:83:15:7c:f3:10:30:5b:e8:6d:7d:f7:51:
         91:63:95:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD
RjkwQTg1NUUwHhcNMjUxMDIzMDY0MTI0WhcNMjUxMDMwMDY0MTI0WjAYMRYwFAYD
VQQDEw02OGY5Y2UxNC01NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsG8uR3aOz0HR94tsDkdPQJI964GTzUKPLsB7raNSgsgQT/ArXZp1qu1CFHAK
V0GpKWLXNTIssNBztyGNuhmnnq5gG+C0sR5IOj/xPIwvnKXxgKyAkQJJLJSMDGig
DdCzp/J5ffXZJ17vXjRcQGOj4UyXOZOR69qa1HfKVtJsj6P9ZuIllokSSWXzIttR
AdcSFnDg1k8Btb3nQM2gLw1YThhTLLcTJON0Y2ukQN0h+xZXCzMaxmPo9qEF7ERt
JyUSKWX3hBmeR01z7QXYMSYdH+A/jBU0wGPyKG1uzzT4CJgLyxDwPA5N6Kpg4Lwc
hjzP2NW1eJX7fbsddMCtqJ/sCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMKSdQV
aB8rvFW7G0WSR8c86/ewMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4
QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC
dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXkqtJZHvmv+ffkRpNZcqA5ahQFPM/9fUye7TPyKQOt3p8/hiBbyjd
Er08nemCn2BOX+6i5Td4mF3ws+ZfjPRJZVsAo80QOJQl5kiVxH+3J/vaokWR1///
VHxjnVtFhANLwFTngI38ZRyRjgJTRPjC5GoOh5ChKywgsksmQJzXHRJXXeuwLsx6
jiq8wit97VfrEeK9C8ZNU0En5ekX/pFxdRt+Xa9CTAlNm+cggh5ag9mPk7qqZiCa
xmiapLhlIZNymsRCIscaQ7FyXNE06As8jjabWJwxS+xJ4XrUBLdAiIrlBkEB/zqG
0KSpKu82MsiDFXzzEDBb6G1991GRY5Ud
-----END CERTIFICATE-----
Generated at Fri Oct 24 03:46:17 2025 by rpki-client