Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
File:                     J7eqjlEecNijC7NtAsrwhXkMmcM.mft (raw, json)
Hash identifier:          nO2LXex4eCwOR1C/GfZZuvRfx/ivWoznwwhPdcsILtA=
Subject key identifier:   AC:10:B9:1F:D9:A0:57:7F:CE:F3:41:20:F7:21:D8:1A:D7:B5:9F:35
Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3
Certificate issuer:       /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
Manifest number:          05E6
Signing time:             Sun 02 Nov 2025 22:59:09 +0000
Manifest this update:     Sun 02 Nov 2025 22:59:09 +0000
Manifest next update:     Sun 09 Nov 2025 22:59:09 +0000
Files and hashes:         1: J7eqjlEecNijC7NtAsrwhXkMmcM.crl (hash: +FYoeXXb9rXiHjfg+kYT0t1sDSNiAkM8j3IynH9Y0Ek=)
                          2: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (hash: ZEf3tktj8tsQa/GPBkU/T2j5p4mzyySZpNdpL6R/nPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl
                          rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914284F, serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
        Validity
            Not Before: Nov  2 22:59:09 2025 GMT
            Not After : Nov  9 22:59:09 2025 GMT
        Subject: CN=6907e23d-69b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:1d:cf:a3:16:47:e9:84:32:03:cf:9d:44:
                    d8:e4:fe:bd:ed:5e:aa:d4:45:fe:9a:36:75:a2:ef:
                    bd:a4:ea:1b:bb:dc:0b:1c:62:6a:a1:6a:ab:0d:25:
                    38:f3:79:f6:3d:6d:31:19:67:fd:f6:2d:d0:0a:c7:
                    d6:c5:a6:25:62:4a:05:37:43:1a:b7:16:ca:cc:7c:
                    95:56:05:6f:08:28:63:a6:97:79:5b:72:f4:f0:18:
                    f0:cc:c9:f6:a8:72:36:bf:c3:78:2c:1f:3a:ef:d5:
                    88:2a:e7:7b:cc:5b:0f:31:be:b0:c3:c5:dd:9d:9f:
                    e8:73:ef:9f:31:6c:b6:6f:4c:de:52:54:a3:47:30:
                    70:6b:b7:e1:ff:fb:35:49:ff:2c:ae:ee:1a:de:26:
                    e6:07:37:32:cc:9f:ac:a5:76:7c:c3:e1:d9:fe:39:
                    6c:9b:b3:9a:5f:4f:57:97:b4:85:16:01:20:b6:33:
                    53:34:eb:5d:70:38:91:48:38:f6:e2:93:44:88:39:
                    98:95:f1:cf:05:63:c6:f5:81:15:45:6c:31:b1:ee:
                    ea:92:e2:f5:de:5f:e1:48:b0:1b:ff:6c:fe:93:9a:
                    c4:d3:57:2b:c2:4a:5a:63:bb:b9:56:ea:2d:b5:fd:
                    28:3b:76:11:0a:26:f3:aa:af:ed:c3:61:76:1c:a5:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:B9:1F:D9:A0:57:7F:CE:F3:41:20:F7:21:D8:1A:D7:B5:9F:35
            X509v3 Authority Key Identifier:
                keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:e6:89:51:8f:72:11:13:35:b9:3e:5f:61:70:81:09:43:
         f1:2b:ee:94:02:bc:69:54:8b:01:63:cb:68:c2:a3:a2:5d:f4:
         71:11:e3:bf:7b:ef:15:03:e6:19:d8:bd:b6:7b:f3:31:ec:58:
         c2:3e:21:c5:86:63:6b:a6:93:19:65:02:b4:87:72:06:ae:89:
         78:a4:d4:3a:0d:b2:ca:bd:8c:14:46:3a:bd:08:82:f4:cb:eb:
         99:04:22:5a:24:47:9c:da:fa:01:cd:c2:b9:2e:d4:1b:d3:e7:
         e5:77:ca:de:c5:c5:84:ce:cb:94:63:76:24:24:33:45:46:3e:
         df:6e:37:24:62:b6:d6:7f:57:cc:fc:9b:b0:62:22:81:b4:9b:
         8c:95:ff:7d:1e:76:df:c3:04:02:43:cb:6a:6f:1b:db:94:9d:
         1c:fe:c3:d5:d1:ed:7e:91:fb:ba:7f:c3:3a:08:9f:00:53:ec:
         72:0e:13:81:b1:48:3e:5f:51:0d:57:aa:1d:58:27:52:1b:0d:
         93:69:fc:0b:65:6a:71:2b:51:d2:1c:a8:39:5b:77:68:db:90:
         05:f8:40:91:41:56:52:3d:92:22:1f:f3:b5:06:e6:14:86:ec:
         27:23:2a:6d:7c:b9:f5:de:fd:77:99:5a:7e:5f:76:3d:d4:e8:
         d2:a0:35:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4NEYxMTAvBgNVBAUTKDI3QjdBQThFNTExRTcwRDhBMzBCQjM2RDAyQ0FGMDg1
NzkwQzk5QzMwHhcNMjUxMTAyMjI1OTA5WhcNMjUxMTA5MjI1OTA5WjAYMRYwFAYD
VQQDEw02OTA3ZTIzZC02OWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mUdz6MWR+mEMgPPnUTY5P697V6q1EX+mjZ1ou+9pOobu9wLHGJqoWqrDSU4
83n2PW0xGWf99i3QCsfWxaYlYkoFN0MatxbKzHyVVgVvCChjppd5W3L08BjwzMn2
qHI2v8N4LB8679WIKud7zFsPMb6ww8XdnZ/oc++fMWy2b0zeUlSjRzBwa7fh//s1
Sf8sru4a3ibmBzcyzJ+spXZ8w+HZ/jlsm7OaX09Xl7SFFgEgtjNTNOtdcDiRSDj2
4pNEiDmYlfHPBWPG9YEVRWwxse7qkuL13l/hSLAb/2z+k5rE01crwkpaY7u5Vuot
tf0oO3YRCibzqq/tw2F2HKV1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwQuR/Z
oFd/zvNBIPch2BrXtZ81MB8GA1UdIwQYMBaAFCe3qo5RHnDYowuzbQLK8IV5DJnD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg0Ri85MzA4NUM4MEQ3
QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNOaWpDN050QXNyd2hYa01t
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0o3ZXFqbEVlY05pakM3TnRBc3J3aFhrTW1jTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjg0Ri85MzA4NUM4MEQ3QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNO
aWpDN050QXNyd2hYa01tY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7cOaJUY9yERM1uT5fYXCBCUPxK+6UArxpVIsBY8towqOiXfRxEeO/
e+8VA+YZ2L22e/Mx7FjCPiHFhmNrppMZZQK0h3IGrol4pNQ6DbLKvYwURjq9CIL0
y+uZBCJaJEec2voBzcK5LtQb0+fld8rexcWEzsuUY3YkJDNFRj7fbjckYrbWf1fM
/JuwYiKBtJuMlf99HnbfwwQCQ8tqbxvblJ0c/sPV0e1+kfu6f8M6CJ8AU+xyDhOB
sUg+X1ENV6odWCdSGw2TafwLZWpxK1HSHKg5W3do25AF+ECRQVZSPZIiH/O1BuYU
huwnIyptfLn13v13mVp+X3Y91OjSoDVV
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:41 2025 by rpki-client