Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
File:                     eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json)
Hash identifier:          BIjI2spM5M7BxHMmLAW5m115Br96HbfG90iKuauvrYg=
Subject key identifier:   05:0E:A0:61:21:D8:91:EF:60:0A:81:93:97:D3:46:D4:50:8C:46:2C
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       05FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
Manifest number:          05F3
Signing time:             Sun 19 Oct 2025 00:34:51 +0000
Manifest this update:     Sun 19 Oct 2025 00:34:50 +0000
Manifest next update:     Sun 26 Oct 2025 00:34:50 +0000
Files and hashes:         1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: OU0BEMqLLZ1D6Hvz1EhjlyjzXi3U6sATr16Ehz4ZVfc=)
                          2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=)
                          3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Oct 19 00:34:50 2025 GMT
            Not After : Oct 26 00:34:50 2025 GMT
        Subject: CN=68f4322b-0d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:4e:58:c1:75:90:a2:e3:46:43:e6:80:c2:
                    4b:f4:29:65:6e:6a:63:5b:7e:90:ea:c9:00:fc:ab:
                    1e:b8:c0:5c:4c:36:c3:26:10:4b:db:14:51:4b:a3:
                    59:48:d4:e7:a9:a8:c0:b9:55:aa:d0:1f:9b:9a:59:
                    32:7f:1c:53:0a:90:d9:4b:04:0d:2b:54:53:95:6f:
                    2c:df:80:ba:6a:2f:ed:1b:42:4e:e9:35:7c:f3:f0:
                    63:67:ee:b9:4c:2d:5c:1e:56:b2:c8:6c:91:6e:24:
                    90:08:10:aa:97:6d:57:d1:c7:e8:fc:96:42:71:ec:
                    fd:82:f9:05:43:63:09:9d:53:64:e2:0c:00:0c:0f:
                    0e:cd:21:ae:5b:61:fb:e7:80:30:37:35:57:3d:9a:
                    a4:d9:17:6d:ff:fc:a4:a9:57:f0:d0:ff:1b:c2:17:
                    8d:be:78:61:dd:ec:d6:33:c8:27:d7:28:41:a2:8a:
                    fd:8b:44:2b:ad:f2:96:91:c7:c5:9f:a7:1f:3c:b7:
                    b7:d8:55:b5:6d:ce:40:59:b3:d7:c5:eb:4b:28:d5:
                    05:7c:a4:1a:a4:0e:87:18:2e:08:28:aa:f3:3b:9d:
                    57:0f:91:88:9d:f3:d9:1d:64:3f:58:fd:40:69:e5:
                    42:64:30:2f:5e:5d:ab:f7:36:5e:13:5c:5a:42:de:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0E:A0:61:21:D8:91:EF:60:0A:81:93:97:D3:46:D4:50:8C:46:2C
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:de:38:41:50:48:87:c3:85:b7:aa:06:3e:57:f0:ce:0c:
         4b:ae:4c:92:4a:bc:d7:a6:3b:b2:f7:c6:e9:f3:b8:ae:2a:c4:
         9a:ed:6c:2b:c8:03:a4:f7:6e:0e:f7:cd:42:24:a9:e8:01:5c:
         ce:3b:95:f5:ef:32:e1:aa:c7:4a:58:54:81:1b:ab:14:8a:0b:
         6c:02:57:54:77:1d:99:85:2c:aa:89:99:27:41:b3:57:a9:a6:
         42:a8:70:9c:5f:2c:8f:d9:4e:d3:5b:50:f8:a9:51:d9:0f:4b:
         65:25:43:5e:f1:ff:63:d7:bb:cd:85:ca:74:93:df:05:2a:bd:
         30:3b:f6:74:d4:1e:dc:ab:4a:9b:2b:a9:eb:82:7d:50:c7:f9:
         5e:11:c8:d2:ea:0d:23:d4:85:be:0b:bb:cb:4f:9e:bf:4c:e7:
         fd:95:ab:5f:6f:cd:b7:c6:9e:ce:1d:f9:48:d2:19:38:6c:59:
         e4:0f:25:94:a4:de:98:8f:7a:e1:f4:bb:4a:aa:ca:8c:e3:ec:
         9c:22:63:f4:6d:40:a3:f4:75:04:4d:49:b8:22:e1:27:ed:b0:
         db:79:f4:14:50:b1:fb:fc:8f:e8:fd:3b:f8:1e:cb:8b:44:49:
         29:2a:d4:77:b5:d3:dc:fd:0e:88:39:e5:57:76:32:34:6d:38:
         2e:55:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:51 2025 by rpki-client