Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File:                     7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier:          eomQUAyXwWgIEysrxaMXyrVch7cu1HGTMJC3fpmkgw4=
Subject key identifier:   BB:0E:10:51:14:B2:32:BF:B3:18:4E:76:23:62:DE:60:D8:79:1F:4F
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer:       /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial:       0E4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number:          0E43
Signing time:             Sat 18 Oct 2025 18:27:10 +0000
Manifest this update:     Sat 18 Oct 2025 18:27:10 +0000
Manifest next update:     Sat 25 Oct 2025 18:27:10 +0000
Files and hashes:         1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: 6/xdyuaCEPzZnFnc1QTlfJTiCOQPuuHwaQyegQy5pCM=)
                          2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
                          rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
        Validity
            Not Before: Oct 18 18:27:10 2025 GMT
            Not After : Oct 25 18:27:10 2025 GMT
        Subject: CN=68f3dbfe-db4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:85:ca:45:83:a7:da:44:8c:07:4c:47:e0:
                    84:a4:58:a7:4b:c5:55:fa:f8:a6:fa:20:af:fa:cf:
                    75:bc:b5:09:2f:ea:af:f6:58:c0:ed:88:0e:36:40:
                    e5:0f:a9:49:b9:b8:82:f4:b9:68:13:32:83:9d:2f:
                    3b:07:5b:13:e6:f7:6b:7f:cd:09:80:29:be:ef:b2:
                    49:58:6f:16:0e:43:d8:9c:7c:1e:b1:4f:d3:07:92:
                    de:b1:50:f7:64:31:e5:d5:59:58:3a:0f:e0:0a:60:
                    6c:6b:0f:a0:5c:0e:36:d2:fe:d7:35:f6:6f:70:32:
                    01:fb:cf:ec:92:18:3f:14:48:6e:2b:73:76:4f:c0:
                    63:4b:5b:13:86:bd:8f:6c:a0:61:01:d4:b9:0a:a9:
                    94:4f:76:33:dc:56:47:a4:2e:26:ca:2b:f4:44:8f:
                    2a:d1:19:32:3c:3d:48:a7:c0:af:4a:23:bc:35:b4:
                    28:e0:ec:bd:c5:56:98:a4:29:1f:70:cb:6f:1f:e4:
                    50:0e:26:d7:93:57:01:12:57:b2:91:7d:e1:c4:6d:
                    ed:71:68:7d:cb:d0:1f:29:3f:6d:4a:c9:5f:a5:bc:
                    89:97:a2:5a:cc:d7:0e:c4:f0:f3:77:f2:1f:20:cd:
                    4a:44:bc:f0:6e:f2:2e:be:7c:55:78:ce:58:c1:0a:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0E:10:51:14:B2:32:BF:B3:18:4E:76:23:62:DE:60:D8:79:1F:4F
            X509v3 Authority Key Identifier:
                keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:38:00:45:bc:58:5f:e7:6a:d5:5d:6f:4d:10:86:68:af:22:
         59:78:77:54:bb:b2:6c:e1:10:71:31:2c:14:33:eb:5a:47:5f:
         35:2e:f7:d2:2a:a0:f1:26:08:3b:f7:5d:a9:d1:8e:ee:60:89:
         ea:cb:74:26:97:0c:8d:f5:f8:e8:97:ca:4f:0e:05:68:93:53:
         9c:66:7e:02:53:a2:0e:25:39:23:92:23:9a:ba:8b:c9:4f:89:
         a4:94:34:0b:d7:61:f1:18:e7:b8:21:30:d7:29:34:a9:0a:8b:
         61:dd:ad:e8:f9:2a:c4:cb:1c:ca:29:f3:b5:6d:76:c5:a2:50:
         33:e7:fc:be:e4:af:b6:74:e6:ae:f2:68:73:a9:ba:5b:d3:21:
         25:4d:fe:f9:10:0b:a7:0d:45:22:4c:f6:29:15:a6:99:13:c2:
         ed:ea:8d:92:58:e8:81:3c:7e:d3:22:e7:1a:81:6d:91:33:ed:
         2a:de:bc:3f:0b:51:a6:10:71:70:d0:ef:40:57:ad:5f:34:13:
         96:1d:3c:06:df:87:3d:4f:71:b2:d1:45:97:6c:31:55:c7:92:
         77:66:68:e0:da:04:76:88:ba:69:da:02:af:01:35:98:80:f3:
         cf:f9:3c:13:5d:b6:84:83:06:29:51:a8:67:c3:d3:2e:f9:c8:
         51:a2:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:52 2025 by rpki-client