Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
File:                     vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json)
Hash identifier:          X4W5SABlu5C3qAJ7eGXBVu3lSzmjgLF76DCJf4KHw2c=
Subject key identifier:   26:73:B6:36:27:F2:FE:5D:DB:34:55:BC:65:1B:CA:C8:9C:68:8A:E6
Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
Certificate issuer:       /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Certificate serial:       0E20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
Manifest number:          0E17
Signing time:             Sun 02 Nov 2025 17:51:03 +0000
Manifest this update:     Sun 02 Nov 2025 17:51:03 +0000
Manifest next update:     Sun 09 Nov 2025 17:51:03 +0000
Files and hashes:         1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: XPlgyA6aCRtiXE5JXvrjP6WVPQSidNHXgEltfY3ateg=)
                          2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: J3asPRjW2OTxFxfAPN+SaGNCDyYHApcc4gcIkuEE9lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
                          rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
        Validity
            Not Before: Nov  2 17:51:03 2025 GMT
            Not After : Nov  9 17:51:03 2025 GMT
        Subject: CN=69079a07-9c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:fc:0f:c7:73:cb:d8:b5:65:40:d8:28:07:
                    a4:1d:8f:35:c6:a3:2f:7e:cd:29:0f:83:f7:ea:d6:
                    b4:d0:0c:fb:24:33:a9:e3:45:d6:1b:06:b7:84:ca:
                    48:0a:d9:e2:5d:7b:7e:b6:0c:77:39:ab:b3:95:96:
                    3e:51:23:3c:2c:5f:18:4d:f6:54:96:d4:30:6f:91:
                    50:a7:20:5f:2b:97:bc:81:67:53:e3:bd:eb:cb:b5:
                    6b:59:83:47:ff:d1:b8:7f:30:45:ee:f6:94:9b:df:
                    c3:ce:a3:fd:78:10:48:51:33:04:c2:23:9f:fd:fc:
                    c1:c0:b0:69:1b:ae:60:8c:c0:4e:75:14:30:9b:60:
                    c8:1f:b8:c0:bd:35:5b:a5:b9:07:16:4e:9f:71:a1:
                    51:a3:35:a8:9e:3f:b6:76:2c:e0:4f:87:b3:d3:2e:
                    a1:b7:44:74:1e:e1:5e:2f:bc:ef:c4:17:dc:07:b9:
                    8e:ac:c1:ec:af:a0:61:fa:61:02:f8:1b:cb:99:36:
                    04:45:b7:8a:e3:50:d6:e6:a8:a8:d0:e2:f4:69:34:
                    c1:b1:00:6e:92:50:c5:c9:af:9b:ca:08:24:33:f4:
                    ea:74:f6:6f:69:a0:1a:31:41:69:87:e7:69:24:3a:
                    e9:02:6b:b7:39:5d:2b:4c:d2:08:4e:56:22:6c:4c:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:73:B6:36:27:F2:FE:5D:DB:34:55:BC:65:1B:CA:C8:9C:68:8A:E6
            X509v3 Authority Key Identifier:
                keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:d9:9a:fc:ab:45:1e:85:8b:ec:9b:32:07:ec:19:a1:2a:
         c2:f3:18:a5:50:7e:c3:1e:4c:32:52:8f:5b:e7:2d:0f:3a:4f:
         f0:2c:47:d8:ea:1a:c1:c9:09:ff:ac:3f:81:4b:24:d6:6a:e4:
         87:62:3f:35:81:18:9c:14:d7:49:dd:94:44:6f:a6:57:9a:a7:
         66:1e:cb:8f:02:51:d5:d0:3b:b7:32:4f:3f:84:fa:6d:bf:72:
         57:53:27:3b:57:c5:57:ce:8b:b5:1d:87:41:a1:fc:1d:89:f2:
         8a:e7:7a:5d:8a:dd:28:55:cb:28:99:41:d5:cb:20:e5:6e:ee:
         0b:f0:4b:a5:77:37:11:69:52:e7:89:a4:d3:06:4a:9c:d5:71:
         f9:80:69:f9:c5:71:97:f3:49:01:99:26:aa:9c:b3:2b:81:0b:
         95:63:14:11:4a:a0:d3:df:2c:4e:b4:85:fa:fb:5e:0c:00:8f:
         3e:a0:5d:61:90:75:e1:36:64:ff:52:dd:94:34:77:96:45:92:
         22:ed:9e:46:99:73:ce:c5:64:a5:1e:76:a3:e8:1d:da:22:40:
         0f:fd:5c:61:63:4c:d2:1b:f6:81:ab:4a:57:ee:5b:57:36:f8:
         bd:b0:c6:75:d9:61:16:69:4c:f1:5e:c3:2f:ce:64:22:b0:93:
         b6:66:90:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0
RDQwNjY0OTUwHhcNMjUxMTAyMTc1MTAzWhcNMjUxMTA5MTc1MTAzWjAYMRYwFAYD
VQQDEw02OTA3OWEwNy05YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngr8D8dzy9i1ZUDYKAekHY81xqMvfs0pD4P36ta00Az7JDOp40XWGwa3hMpI
CtniXXt+tgx3OauzlZY+USM8LF8YTfZUltQwb5FQpyBfK5e8gWdT473ry7VrWYNH
/9G4fzBF7vaUm9/DzqP9eBBIUTMEwiOf/fzBwLBpG65gjMBOdRQwm2DIH7jAvTVb
pbkHFk6fcaFRozWonj+2dizgT4ez0y6ht0R0HuFeL7zvxBfcB7mOrMHsr6Bh+mEC
+BvLmTYERbeK41DW5qio0OL0aTTBsQBuklDFya+byggkM/TqdPZvaaAaMUFph+dp
JDrpAmu3OV0rTNIITlYibEx03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZztjYn
8v5d2zRVvGUbysicaIrmMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5
OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz
UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+Ktma/KtFHoWL7JsyB+wZoSrC8xilUH7DHkwyUo9b5y0POk/wLEfY
6hrByQn/rD+BSyTWauSHYj81gRicFNdJ3ZREb6ZXmqdmHsuPAlHV0Du3Mk8/hPpt
v3JXUyc7V8VXzou1HYdBofwdifKK53pdit0oVcsomUHVyyDlbu4L8EuldzcRaVLn
iaTTBkqc1XH5gGn5xXGX80kBmSaqnLMrgQuVYxQRSqDT3yxOtIX6+14MAI8+oF1h
kHXhNmT/Ut2UNHeWRZIi7Z5GmXPOxWSlHnaj6B3aIkAP/VxhY0zSG/aBq0pX7ltX
Nvi9sMZ12WEWaUzxXsMvzmQisJO2ZpBP
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:59 2025 by rpki-client