Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          +14VKXusFhw87EmYdbzkS8iXLJk6s7QebjVR5EXFxss=
Subject key identifier:   6F:A6:4D:1A:24:98:0B:06:C5:C3:A6:C7:5D:37:C5:F4:E3:79:9D:3C
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1D45
Signing time:             Mon 20 Oct 2025 16:25:58 +0000
Manifest this update:     Mon 20 Oct 2025 16:25:57 +0000
Manifest next update:     Mon 27 Oct 2025 16:25:57 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: fjpOIkxjJtBf3yHdPi1mHzSssKt/dYI36B0oGHUldy0=)
                          2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
                          4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7502 (0x1d4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Oct 20 16:25:57 2025 GMT
            Not After : Oct 27 16:25:57 2025 GMT
        Subject: CN=68f66296-ca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:24:ae:92:ce:88:9b:1f:63:1c:6f:d8:53:
                    53:82:83:74:28:58:65:62:cf:b8:4a:78:1e:22:2b:
                    3e:20:be:69:c3:e9:d1:0d:75:f1:29:aa:78:c4:d1:
                    1e:de:a5:40:8d:c1:95:48:c8:81:ca:f0:40:9f:72:
                    05:15:ab:73:ed:aa:17:5f:1d:27:e6:0e:04:49:5d:
                    12:c7:0c:9f:e6:bb:9e:91:0e:c5:9b:e2:8f:85:99:
                    bf:01:5e:6a:fe:49:c3:98:b7:1c:22:dc:52:b6:dc:
                    17:1e:bc:37:2a:0d:ea:2a:6d:24:16:49:36:e2:00:
                    cb:ad:fe:88:62:3b:d1:d1:77:39:11:81:6e:2b:33:
                    f9:df:80:bc:aa:b5:01:6f:4b:42:62:c6:03:ea:b6:
                    6a:12:d5:3f:2e:98:59:bc:25:a9:13:c3:7d:74:49:
                    08:0f:64:87:b6:07:09:38:a7:81:b8:1c:44:84:5c:
                    90:fd:2f:1d:f6:71:8f:26:79:8a:47:6c:93:58:f4:
                    94:b4:15:ab:12:3f:18:c8:ce:56:4d:97:a8:eb:7e:
                    4d:70:aa:bc:dd:a6:93:44:bd:bc:c2:b9:18:4b:ce:
                    dc:8f:0b:d8:0e:70:37:42:7c:dd:95:b5:1e:ba:72:
                    12:52:52:ac:b9:cc:0f:a0:7e:f3:4e:15:c5:26:e7:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:4D:1A:24:98:0B:06:C5:C3:A6:C7:5D:37:C5:F4:E3:79:9D:3C
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:98:7e:a1:a6:ab:c6:5b:e4:6f:1b:1a:2a:31:b1:87:ab:f9:
         f5:ca:16:4d:9e:7b:3c:82:be:73:f1:ef:20:55:5d:b3:b3:35:
         2c:91:47:6a:80:ee:0a:a4:2a:18:31:a2:5b:dd:28:8b:85:4e:
         db:fe:be:56:41:8b:fb:19:d5:8e:d0:a8:b0:dd:bd:ba:31:07:
         dc:6e:aa:57:13:c3:bd:a2:08:55:21:9f:48:cb:12:9f:c1:cf:
         20:1d:42:16:35:c6:1a:70:f8:2a:dc:19:ca:fa:66:ac:2d:e7:
         d9:fc:b1:ca:bd:31:98:55:95:84:f6:ef:7e:01:4a:1a:0a:ce:
         04:bd:ce:60:aa:48:2a:0a:6e:16:8b:10:a1:dd:9d:e0:8a:8a:
         0d:31:82:9b:9d:1e:d5:22:a9:e3:c1:04:d6:e6:52:6e:3a:cf:
         ef:84:24:a0:a4:1a:a1:ab:48:51:20:ff:94:c2:5c:75:89:d8:
         b9:3b:ca:8b:82:32:62:ba:86:2f:1c:05:d1:70:43:ab:5d:64:
         86:bb:0f:da:11:f7:2c:0a:3e:f6:e1:2e:47:c0:e9:0c:07:0c:
         56:50:e5:7b:5d:46:1c:8e:e8:94:55:52:ca:cd:33:f4:4f:36:
         d7:e3:c1:37:a4:02:2a:01:f6:23:12:d1:7a:81:c7:0e:f1:1a:
         2c:ee:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:23 2025 by rpki-client