Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File:                     70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier:          vUP7KPBzphY9oNfn5u5VHZGfPp6/DOx0UvIqF7dTWt8=
Subject key identifier:   17:FF:08:75:F1:85:16:67:D4:2B:DE:0B:10:BD:A1:92:E5:17:E4:B3
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number:          0705
Signing time:             Wed 22 Oct 2025 22:51:21 +0000
Manifest this update:     Wed 22 Oct 2025 22:51:20 +0000
Manifest next update:     Wed 29 Oct 2025 22:51:20 +0000
Files and hashes:         1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: SjQ9cV9HkjcIWVQPCgZEBSiKvGiuibSPDI1Kw/Dz8jg=)
                          2: 05F05106586011EE9399A92EC4F9AE02.roa (hash: uE1Fce5x0iyRAmN0knxTtSotHjcQGH0Wea/3oUShZPs=)
                          3: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: hXI7auCZSPvAdHOfiV427I6HYIQHsMDxA6gjGw/HO3w=)
                          4: 34956990D75511EF80E68A39C4F9AE02.roa (hash: dxCqVoSNOkIPa8mn9WccbxZTxKG1nVMRR4a4UGacE9I=)
                          5: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: ZHB5HyWHIeMUdK8FQ83iXhPDeHhVdive57aqWkTwI34=)
                          6: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: u+3Kqlk1/ablMkybk1cn19GMLJzdy6UlNuONo3CbZ6Y=)
                          7: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: E255PQy8J0Om1w8sX22dbtF3FegoajHcFmWtic98DmU=)
                          8: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: 2hIQWvs5gCQjNeqkzYCi7IsHJw8uYq2a3BY4+uJn8rA=)
                          9: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: TnWWrKTfNekbVi6pIzTrH/qhvsHIadymtQxdXn+0jBk=)
                          10: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: lRSKSHnJ9I173rhXzeEXncsQoFojPmJc5tNaNSnncqo=)
                          11: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 22:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Oct 22 22:51:20 2025 GMT
            Not After : Oct 29 22:51:20 2025 GMT
        Subject: CN=68f95fe8-567d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:a7:64:c7:b5:df:8a:57:0d:12:ae:21:80:
                    25:73:3f:19:07:14:eb:a1:dc:a5:e9:f6:25:65:29:
                    e1:ff:ba:d8:44:4b:16:9e:9e:9f:72:be:91:b5:2c:
                    14:a8:70:c1:02:96:0e:38:55:40:05:14:f2:44:c8:
                    06:8e:fb:09:5f:fb:94:44:d8:d6:13:91:99:0b:a6:
                    6d:80:c6:a2:54:a1:fb:a4:4a:19:a5:82:80:ba:2b:
                    d0:f2:89:c1:c2:e9:a7:a7:80:a8:0c:22:30:a5:e2:
                    45:ce:96:69:96:c3:c6:7f:0a:9b:c5:0b:b1:de:df:
                    c7:41:0a:76:7d:a6:a0:a8:1b:c6:44:d5:d0:62:6e:
                    86:97:99:6e:a4:48:4a:84:27:61:23:30:ad:d7:d7:
                    2c:d3:c6:9c:1e:82:85:47:7a:c4:24:99:6f:d6:17:
                    53:66:63:35:ac:94:be:52:2a:81:8c:f0:ba:0d:a8:
                    9d:7a:1d:cc:db:be:bd:d9:13:7a:b5:10:46:44:02:
                    62:14:93:02:85:30:df:7b:b7:b7:51:e1:bb:34:6a:
                    5a:87:b1:9b:a1:91:55:99:c4:c8:75:9e:6d:18:76:
                    eb:91:c3:b7:3d:16:b5:bd:f6:f9:15:46:bf:14:fc:
                    28:a9:d9:69:66:e9:2e:77:57:61:60:d8:96:f0:e4:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:08:75:F1:85:16:67:D4:2B:DE:0B:10:BD:A1:92:E5:17:E4:B3
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f6:f2:28:ed:18:b1:db:f3:8c:68:b5:1d:c0:38:82:25:da:
         89:ec:05:e3:72:94:aa:48:66:42:f7:1a:1a:ea:a2:8f:ee:52:
         ce:44:21:50:45:ae:bc:4d:e7:7e:5c:24:a4:8a:1b:15:6d:d4:
         c4:f3:0c:6e:33:ef:1e:51:19:bc:81:de:a5:8e:99:e3:af:66:
         27:57:26:8a:f4:a7:2e:63:e9:ed:72:e7:7d:0d:f4:98:1e:e5:
         27:e3:e0:49:11:72:a0:57:1c:7e:91:bd:a5:5b:a0:af:37:1b:
         d7:16:29:39:d9:d3:78:af:de:30:55:d7:c9:12:43:4f:dd:43:
         31:14:1c:f9:52:3b:ec:b4:8a:f8:31:b6:44:1b:67:48:8d:4c:
         fd:71:22:c1:6a:07:e7:c2:65:97:65:7a:63:c6:08:c1:cf:76:
         58:ac:49:dc:51:eb:83:7c:85:ca:b0:40:1b:91:a4:02:92:09:
         2c:18:ce:ab:c8:b0:88:ca:65:87:45:ea:71:b5:c7:e7:e5:09:
         77:23:65:be:f5:68:fa:a2:6c:ba:43:92:8d:f2:3c:9b:79:ed:
         4a:00:bc:36:14:43:71:91:84:f0:89:4a:9e:2f:64:e3:9d:b6:
         40:81:13:60:ea:e1:61:3a:e8:21:87:8e:bc:b9:0d:17:c9:66:
         25:2a:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:35:27 2025 by rpki-client