Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
File:                     EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json)
Hash identifier:          DHbinNyBsaw+/HSHQ4EAli6ODC5Fjup9T08M+aNgg6Y=
Subject key identifier:   44:83:16:2F:DB:9C:EF:0B:3F:42:7A:7D:74:50:B7:32:20:88:AF:D0
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       0694
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
Manifest number:          068F
Signing time:             Sat 18 Oct 2025 23:52:09 +0000
Manifest this update:     Sat 18 Oct 2025 23:52:09 +0000
Manifest next update:     Sat 25 Oct 2025 23:52:09 +0000
Files and hashes:         1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: /axoA+FDtnm3WOAR2kTschJ/yPnl/Fy+Gsj+kq8+s74=)
                          2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684 (0x694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Oct 18 23:52:09 2025 GMT
            Not After : Oct 25 23:52:09 2025 GMT
        Subject: CN=68f42829-ec41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:f9:2c:f0:5e:0a:dc:a8:7f:7b:9c:1b:3e:
                    51:26:22:3e:00:e9:d2:45:e6:d9:e2:3c:51:fe:f6:
                    1b:92:ee:e7:2c:98:d8:4f:49:7b:7e:6a:45:c3:b7:
                    34:12:da:00:64:c4:53:56:38:f5:5f:93:11:c5:b5:
                    b4:23:5c:76:7d:93:e2:c0:3d:e1:85:5c:44:6f:c4:
                    ed:4a:56:9e:de:76:e3:99:1f:18:7f:47:8a:70:be:
                    90:c6:7c:1f:71:ad:c2:30:15:e0:d0:5a:e9:eb:73:
                    f2:94:5c:f5:56:36:1a:8e:24:ac:93:93:64:ff:b1:
                    eb:27:94:31:16:bc:d2:da:5e:79:b2:d0:95:21:71:
                    76:e3:69:25:b9:d9:15:c0:05:f0:23:cd:bd:5d:b0:
                    f5:71:af:fb:f0:c8:63:f6:92:30:4b:31:cd:21:2b:
                    d7:8a:d4:c5:3e:40:53:25:0b:a5:2d:92:21:06:c5:
                    fd:d5:0a:95:71:be:26:49:d0:1a:e7:58:22:50:d8:
                    a8:f0:54:51:04:93:72:76:f3:ec:f7:c0:5e:4d:7e:
                    02:f7:ec:8c:fa:c7:97:26:e0:60:01:cc:4c:c3:d4:
                    68:98:41:51:ac:75:b0:08:78:31:34:90:76:01:94:
                    82:1e:85:2c:f5:3a:c3:b8:6a:d3:1e:cb:a7:3d:b2:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:83:16:2F:DB:9C:EF:0B:3F:42:7A:7D:74:50:B7:32:20:88:AF:D0
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:61:e9:22:1a:80:69:61:8b:46:36:0b:a2:36:05:1c:80:
         4d:0f:f3:f0:83:25:87:6e:cb:cf:ec:d8:27:aa:f8:0a:f3:4b:
         8a:eb:84:a9:95:7d:88:58:1a:84:a4:ab:59:85:03:34:3d:87:
         d9:a4:97:3f:b2:04:3f:da:b2:de:a4:de:e3:e5:2b:5d:87:1f:
         2d:dc:40:bf:d1:18:30:57:20:20:94:4d:2f:f9:87:b7:22:7f:
         8f:79:5f:dc:46:65:6e:78:16:60:d6:33:3e:e5:a9:50:0d:63:
         59:4e:53:de:61:0d:0b:53:4a:07:29:a3:0f:47:2b:3c:28:a1:
         a5:21:0d:6c:27:ab:b1:03:b5:c1:1c:f5:7e:1e:1e:39:8a:84:
         91:19:75:d2:f0:85:f0:42:8f:d3:56:98:74:73:30:90:16:f0:
         09:0d:92:35:2e:6b:94:6a:ec:fa:86:1b:81:64:9d:39:3e:cf:
         0c:95:c0:75:48:4c:f8:bb:88:cb:d4:58:e1:09:0c:bb:0f:cd:
         6c:5d:b2:b5:0f:b9:b7:41:5d:47:ed:20:be:ad:0f:96:10:a4:
         09:86:0a:6e:fd:a6:2b:c5:87:51:26:ff:75:4b:2c:e0:92:cf:
         28:2c:6b:8e:a5:12:1b:f1:c0:bb:69:f2:72:69:8b:d6:cd:d6:
         dc:74:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:17 2025 by rpki-client