Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File:                     E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier:          YzGOLVFQHEBTKT+Md9Tqtqtvr++bKwnK9MElGRC5Zdw=
Subject key identifier:   44:1A:72:88:70:94:88:13:00:58:E5:3E:0B:AE:4B:8A:26:43:16:E8
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       04C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number:          04B9
Signing time:             Sun 19 Oct 2025 01:42:23 +0000
Manifest this update:     Sun 19 Oct 2025 01:42:23 +0000
Manifest next update:     Sun 26 Oct 2025 01:42:23 +0000
Files and hashes:         1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: uW3DuDDToidYbSRXIkDZODLplq+cE8/PB7OeCd2tzKs=)
                          2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=)
                          3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Oct 19 01:42:23 2025 GMT
            Not After : Oct 26 01:42:23 2025 GMT
        Subject: CN=68f441ff-d4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:ac:b6:38:59:a9:29:b8:4f:03:bf:79:7d:
                    5d:36:96:b0:45:d3:b8:84:64:91:9f:32:df:e7:06:
                    74:98:93:d7:0d:b5:86:48:43:e7:21:3a:04:cf:fa:
                    b5:c8:6e:15:05:8d:46:c3:0a:c5:c3:fb:44:87:95:
                    31:13:c6:ad:8a:b5:d8:1a:39:17:f8:39:40:4f:33:
                    d7:e6:f6:05:4d:d1:b3:f8:df:99:0d:ba:f6:83:e0:
                    0d:4c:72:de:1b:09:1f:a9:56:3b:b7:b1:5c:75:37:
                    bb:be:26:33:6d:ce:ee:23:c0:9a:07:31:60:a7:b4:
                    78:96:91:aa:dc:42:1e:6f:1b:b3:81:86:85:9b:0c:
                    07:af:4f:7f:26:93:62:b0:2a:85:12:20:46:5b:69:
                    83:d2:af:8f:60:e0:15:dd:62:59:1a:4e:f4:52:c3:
                    67:9f:94:6c:25:67:0b:5f:ea:53:c0:35:b0:b5:55:
                    2f:fa:ac:cb:ce:80:d1:53:df:c9:d0:67:27:25:cd:
                    7f:ab:ec:8b:21:12:ca:5d:1b:08:25:38:20:ba:e9:
                    76:91:4e:d3:a3:d5:71:ee:33:11:55:d0:e2:b5:11:
                    50:62:77:bb:63:8d:c0:8b:65:69:15:a8:e4:11:95:
                    4d:70:8e:a4:84:7e:66:54:c2:64:f6:44:2a:b9:ff:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1A:72:88:70:94:88:13:00:58:E5:3E:0B:AE:4B:8A:26:43:16:E8
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:94:8e:33:d1:6b:95:08:55:0d:25:86:18:c4:63:95:8b:
         c8:66:f5:e6:b9:11:60:f5:82:ac:bf:17:e0:7c:45:6c:f9:6b:
         ff:e0:03:82:e8:3d:39:1c:3c:cb:e7:d6:c1:7d:48:8b:8e:77:
         f6:a7:e6:b3:b3:20:e9:5c:05:fc:a7:3e:53:09:98:30:cf:6c:
         0f:89:3a:30:b6:51:72:f3:1a:bc:65:c6:5d:33:4b:90:70:47:
         17:6b:dd:49:6c:cd:c4:9e:3b:86:f5:11:4e:6c:4e:70:f2:d7:
         e9:33:f3:b6:bb:a8:9c:3a:15:8a:41:8d:f0:f2:9e:aa:9a:f6:
         81:00:58:08:8c:9b:63:b2:68:86:19:ff:5b:b4:5a:be:86:d9:
         a1:d8:a1:85:a3:92:25:7a:6a:78:dc:0f:f6:29:3d:45:81:55:
         8d:a7:dd:74:8b:38:a8:8a:4a:b8:b4:df:f6:75:d4:ce:c6:85:
         46:a6:c1:61:05:b6:40:fb:62:14:49:3c:63:52:f6:d9:06:a8:
         b4:5c:8e:1d:2f:d7:04:cf:b9:6e:2d:ef:c0:af:01:f9:44:51:
         b3:a3:0a:26:41:8f:4a:bf:0c:e5:b3:8c:8c:b1:b6:f1:69:4d:
         00:05:16:fd:5d:8f:50:07:40:14:a3:4b:61:18:62:f8:07:2d:
         51:24:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:56 2025 by rpki-client