Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File:                     eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier:          JhR/AUD0AqFXgu7UfzIlmw8pSYjc/Afd30OGUW/WwO0=
Subject key identifier:   AA:AE:EE:A9:EE:3D:DA:A8:77:4C:DA:6C:41:FA:EB:1B:4F:07:43:11
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer:       /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number:          013B
Signing time:             Sun 19 Oct 2025 07:13:49 +0000
Manifest this update:     Sun 19 Oct 2025 07:13:49 +0000
Manifest next update:     Sun 26 Oct 2025 07:13:49 +0000
Files and hashes:         1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: IElIxmtdgGX64sGuGjcaazyJ/rhBytIOD1NpSQxZ2/A=)
                          2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=)
                          3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
        Validity
            Not Before: Oct 19 07:13:49 2025 GMT
            Not After : Oct 26 07:13:49 2025 GMT
        Subject: CN=68f48fad-393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:b9:c8:9c:53:9e:99:a3:f2:9e:c7:7b:34:
                    9f:84:04:b6:37:83:89:08:00:3b:40:49:fb:b5:86:
                    ed:fa:98:e0:a1:78:bd:ab:c2:c7:03:fb:09:d6:58:
                    1f:e1:8a:71:14:4f:85:93:f0:e2:bb:f3:cf:75:37:
                    6c:e8:2e:e9:c8:70:5f:88:f2:af:25:ff:75:69:55:
                    64:94:d3:01:09:be:01:cb:de:f5:83:56:9f:c1:ad:
                    60:8d:27:84:96:48:14:22:2a:79:5a:ff:60:36:fd:
                    e3:17:69:67:48:20:ba:d3:aa:df:d0:32:2f:e2:f1:
                    8b:b0:af:af:7c:13:eb:0c:a6:31:aa:26:d1:c9:a6:
                    80:b2:39:97:d9:1b:2a:88:28:c2:b6:6a:99:3f:1c:
                    88:67:09:50:e1:6d:81:da:50:8f:f1:d0:78:8b:db:
                    12:a7:df:e9:44:ec:65:fb:4d:97:ba:c2:7c:f2:68:
                    de:ee:b3:76:6e:74:ac:73:a0:60:a3:ef:8b:f6:0a:
                    31:6a:90:32:97:53:6b:bf:0b:70:cf:fc:c7:9a:de:
                    99:9a:a2:79:43:53:da:b7:1f:91:59:aa:66:e4:a9:
                    06:5a:0d:1d:72:b9:82:86:31:45:04:ff:7d:32:96:
                    54:ab:29:ca:ba:1e:a7:92:8c:ff:37:63:a5:5a:44:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:EE:A9:EE:3D:DA:A8:77:4C:DA:6C:41:FA:EB:1B:4F:07:43:11
            X509v3 Authority Key Identifier:
                keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:6f:35:d5:fc:97:ca:52:ea:6b:68:84:d0:c3:ae:c6:bb:
         78:bc:c7:02:72:12:f6:19:9b:ac:2d:a9:5e:61:7e:7b:92:ff:
         e2:e6:69:97:98:eb:6a:c6:91:5d:ac:fd:53:49:c5:0f:14:79:
         06:cb:3f:66:3d:da:98:1a:5f:56:da:96:f1:63:05:ce:66:5d:
         99:32:4e:34:f3:98:72:4b:fe:21:a8:0b:1d:1d:82:43:a0:c7:
         52:14:c4:1d:87:06:ff:e1:fb:46:1e:a3:58:24:bd:76:2d:1c:
         85:4b:83:3d:76:67:ba:da:ae:c2:c4:7a:5d:dd:87:e4:8a:32:
         36:6c:87:d7:fc:89:37:e8:70:4e:2f:68:d1:91:aa:b6:65:23:
         2b:de:7f:08:11:0b:97:36:e0:a9:8e:c3:da:de:59:56:66:ef:
         35:66:c7:b1:dc:cd:a5:2d:ed:58:8b:24:08:9a:26:84:e0:66:
         be:4c:06:c0:ed:d9:63:db:7f:67:bb:f3:69:1d:46:73:27:c8:
         92:42:bc:90:62:ae:f1:8f:3c:46:a4:c0:88:5a:ab:c7:8e:0f:
         d7:5a:92:b3:a9:20:b8:ea:be:ef:8a:26:9c:14:1c:52:c2:f7:
         12:35:91:85:f7:bf:29:44:3b:82:8e:07:06:b9:71:9d:e5:ec:
         76:2c:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:53 2025 by rpki-client