Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File:                     7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier:          oSesSRqLna6np1CB2hnP2056eTvYcAVwW9am1NEx2Pc=
Subject key identifier:   7B:7B:F4:04:C2:21:A2:65:47:68:1D:FD:77:69:54:29:7B:F7:53:82
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer:       /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial:       034F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number:          033E
Signing time:             Sun 19 Oct 2025 03:10:04 +0000
Manifest this update:     Sun 19 Oct 2025 03:10:04 +0000
Manifest next update:     Sun 26 Oct 2025 03:10:04 +0000
Files and hashes:         1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: YIm04C9HE+MY7RhsPx2CxBRImeiwdm+PbI+7sAPRygA=)
                          2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: LMp5kVNCStiwGpSsrDjiKfBvLER7LLTCwt6mJ3nCrNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
                          rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
        Validity
            Not Before: Oct 19 03:10:04 2025 GMT
            Not After : Oct 26 03:10:04 2025 GMT
        Subject: CN=68f4568c-d5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:04:db:31:4a:57:0d:14:17:b1:19:89:d1:
                    50:41:ce:68:1d:fc:fe:c2:ee:93:2a:3d:ba:05:ca:
                    a2:85:42:10:f7:a1:ca:dd:a8:d7:5b:9a:25:d6:61:
                    82:e2:b6:a3:cf:07:ae:a6:54:ad:05:fe:9b:5f:4c:
                    f3:f2:ac:7f:14:17:f2:4b:a9:a2:3b:da:d5:2f:22:
                    a5:d4:d1:ed:43:c1:16:d2:67:b2:60:4e:68:99:ca:
                    2d:53:e4:06:67:91:c6:d8:9b:9f:ad:82:70:7c:48:
                    79:71:44:0e:6c:b8:1b:ef:35:49:44:ec:2e:86:c7:
                    76:90:cd:7d:7f:70:a9:81:79:b0:7d:2a:51:aa:37:
                    56:65:8c:b5:9e:7d:41:18:2a:63:f7:3f:f3:8d:ae:
                    a0:3a:50:61:39:5f:df:53:23:e9:fd:b1:03:36:85:
                    fd:b4:2b:9d:78:6f:4a:40:3b:c9:82:72:77:37:0e:
                    bd:90:6e:c0:f9:6b:48:31:5d:a0:1d:02:02:2a:dc:
                    a5:0d:ef:bf:60:af:45:7f:fa:c6:c6:0f:15:1c:28:
                    6f:5e:75:a1:2c:45:2b:29:72:28:eb:5b:d8:a0:25:
                    29:52:58:0c:4b:df:d9:58:4f:e3:64:f4:cd:d0:6a:
                    0b:bb:7a:3d:f3:ce:b6:bf:6a:9b:0d:65:32:e1:9b:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7B:F4:04:C2:21:A2:65:47:68:1D:FD:77:69:54:29:7B:F7:53:82
            X509v3 Authority Key Identifier:
                keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:e1:14:a8:c2:97:67:50:d9:c2:eb:bd:51:b7:4e:3b:8c:
         e9:1d:5e:48:80:de:d7:c6:37:79:90:3b:6f:70:e3:ca:02:10:
         15:94:4f:52:5b:ae:ea:72:b0:9f:af:5e:38:14:fa:7a:0e:5b:
         4e:b2:50:92:39:35:cc:cc:be:ed:c4:ab:cf:54:b9:76:53:e8:
         ea:c0:69:b0:aa:9b:8b:7b:5f:36:6a:c7:ac:51:ae:0c:b5:0c:
         51:82:fe:61:4f:0a:d7:e5:f4:45:02:ed:b2:10:f6:d1:8b:ef:
         a8:aa:a2:46:f9:12:59:90:c1:20:b1:db:db:a2:ae:f3:f3:c6:
         36:1c:73:c1:72:e0:d6:dc:e5:04:08:92:42:0e:71:f1:2c:0b:
         35:89:3a:d8:f2:46:99:95:07:c5:d0:12:85:a5:91:07:69:a8:
         7c:36:4e:8a:d4:a6:2b:43:ec:f0:65:e3:1b:d2:f1:cb:a6:84:
         19:b5:09:e9:e9:2c:2f:8b:69:71:f4:94:e7:f3:9f:18:a0:52:
         06:fd:02:14:bf:17:6c:11:40:30:d4:55:5c:93:d6:9e:77:2c:
         3b:91:04:c6:46:f3:07:ee:41:09:be:14:22:d6:65:78:4b:e4:
         6b:32:22:2c:d5:9b:55:4d:a2:79:33:13:cf:96:eb:52:7f:12:
         7d:44:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:36 2025 by rpki-client