Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
File:                     EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json)
Hash identifier:          fFKnxWAcX9dJjI8VZ9n1oyUJliHe6/d+oZiq2P7TbkE=
Subject key identifier:   F4:96:48:05:63:DE:CF:C4:2C:75:93:82:80:90:F8:BF:31:6A:A5:80
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
Manifest number:          8D
Signing time:             Sun 19 Oct 2025 09:52:00 +0000
Manifest this update:     Sun 19 Oct 2025 09:52:00 +0000
Manifest next update:     Sun 26 Oct 2025 09:52:00 +0000
Files and hashes:         1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: WhCzooAzt8gyCz8EoVfDRPxEG3ArsnRMG6np8ShpRGM=)
                          2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Oct 19 09:52:00 2025 GMT
            Not After : Oct 26 09:52:00 2025 GMT
        Subject: CN=68f4b4c0-80dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:41:d3:e2:24:08:c1:f5:5d:29:58:0f:7b:
                    fe:f6:0b:c7:25:49:c1:8c:1b:7a:81:76:ae:15:5a:
                    bc:f1:ae:bf:de:1f:95:80:98:12:b2:3b:82:c1:bc:
                    dd:57:13:1b:73:7a:b0:69:1c:b4:ec:e6:12:03:3e:
                    cb:18:4f:89:56:a2:ae:d2:3c:51:79:9d:ae:10:f9:
                    6e:e3:16:f4:04:18:78:af:b8:90:4f:43:df:c6:f5:
                    83:32:4e:95:fa:87:a9:a4:01:4a:60:16:30:0f:0b:
                    92:a8:8e:d4:f2:3b:03:12:05:5c:24:e3:35:60:24:
                    7e:0b:8f:89:f7:2a:e5:dd:fa:45:ec:08:e9:f6:4e:
                    a4:86:b9:9f:79:6d:6e:18:6e:b2:b9:25:ec:c7:ae:
                    7b:23:8c:7d:cc:8e:c8:67:3c:23:29:1c:85:f9:2b:
                    07:ad:85:36:71:a5:c6:5d:05:3c:37:89:01:92:81:
                    58:59:ed:da:1f:43:0c:37:4f:8c:04:da:67:29:9a:
                    1e:16:67:81:da:32:c6:31:a9:0b:88:60:f7:6d:ad:
                    45:57:db:10:0c:86:9a:70:5e:93:9f:e9:65:a8:d5:
                    b0:22:8c:51:97:80:47:0a:35:fb:cc:12:43:a6:df:
                    c3:e3:f4:51:24:9a:d3:2a:37:40:01:1a:30:67:7f:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:96:48:05:63:DE:CF:C4:2C:75:93:82:80:90:F8:BF:31:6A:A5:80
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:62:4d:2e:45:ab:08:cd:93:33:2f:76:a6:8c:ab:46:9b:
         85:e3:e8:0f:a7:9c:58:32:0c:c3:60:87:9c:db:68:37:33:fb:
         84:8c:90:21:d1:28:7e:f7:51:d6:f8:cb:c9:98:6f:d1:82:5a:
         bd:94:24:e7:bb:86:73:d9:6e:45:01:9a:4a:e3:13:b2:1f:c9:
         51:44:03:c0:6f:fc:8d:f0:7a:88:b9:82:4a:98:d8:44:c4:44:
         a5:fc:1b:d4:66:cd:19:e1:97:3c:ee:1b:aa:4b:93:14:e6:84:
         f6:dc:df:22:46:e9:44:f6:a2:a0:5a:e8:74:b5:df:aa:04:a3:
         41:3b:dc:f0:31:af:01:99:17:47:ae:dd:b6:e9:06:1b:3c:0a:
         64:0e:9d:13:2c:72:90:4a:d0:c3:f2:61:33:86:c7:9e:78:db:
         c6:f4:ab:79:1b:e0:93:7f:cc:84:6e:82:f5:28:74:fa:9b:4c:
         c8:d0:c0:50:e5:71:29:07:93:55:14:51:9e:27:ba:1c:a6:27:
         aa:1a:99:55:c9:70:bb:08:46:99:2c:14:ff:16:dc:12:9a:f5:
         bf:86:b1:3d:80:8f:3b:9d:97:2b:cb:a2:83:58:9a:22:cf:43:
         09:89:8e:b8:98:fb:77:b3:89:d9:4f:0f:80:39:a9:74:3f:3d:
         55:7b:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:22 2025 by rpki-client