Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
File:                     e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json)
Hash identifier:          10epcLlUorhqtnmDoEv3PZEvdigyEIneOhexDpJBjp8=
Subject key identifier:   6B:D1:CA:39:FD:1D:75:3E:7F:5A:29:2D:68:F0:43:BE:B8:CB:B7:3F
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
Manifest number:          0144
Signing time:             Sun 19 Oct 2025 07:06:27 +0000
Manifest this update:     Sun 19 Oct 2025 07:06:26 +0000
Manifest next update:     Sun 26 Oct 2025 07:06:26 +0000
Files and hashes:         1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: 32kvTr+WW5S74UD3tGjQZbsK3yywV6khxS3M/gv4dTc=)
                          2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Oct 19 07:06:26 2025 GMT
            Not After : Oct 26 07:06:26 2025 GMT
        Subject: CN=68f48df3-e1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:75:d0:53:93:62:a2:5a:51:13:94:74:91:
                    b6:56:d8:8f:36:3a:68:8d:02:07:16:f7:7e:c0:ff:
                    cf:c3:ed:e7:97:3b:86:20:ab:d8:ef:08:a1:60:9b:
                    0f:de:f9:a8:c3:a5:71:6f:0e:09:b9:26:68:f4:81:
                    1b:f0:59:cd:bb:b7:a1:05:90:7c:21:2f:40:6d:7d:
                    a5:10:17:25:69:fb:f6:62:bf:99:4f:4f:52:90:e3:
                    de:2b:a6:6a:42:b2:9e:29:6c:6b:73:68:41:e5:01:
                    8c:68:48:aa:13:b1:41:5f:79:cc:ec:b1:a1:5b:0e:
                    f3:6f:11:c3:d7:35:9d:6f:db:c9:b2:56:08:cd:9d:
                    61:8a:6d:e5:a9:49:3d:10:60:f1:2e:34:7e:20:82:
                    73:2f:0a:26:ce:e6:3b:0c:79:19:ca:6c:74:5e:c3:
                    f2:1a:01:8b:42:fa:1b:f3:90:55:fa:fc:85:30:d8:
                    dc:84:20:02:cf:82:e2:85:ea:b6:d3:ff:2c:19:3b:
                    30:71:f6:7d:d4:cd:fd:f1:aa:b8:82:bd:9f:94:29:
                    f1:65:c8:24:95:24:19:5a:be:a1:8a:ac:99:a8:f6:
                    c0:f0:59:b2:f7:73:9d:39:98:8b:38:ec:fe:76:de:
                    b9:a6:68:ae:38:3f:45:67:c1:5f:d9:f5:d6:6b:3d:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:CA:39:FD:1D:75:3E:7F:5A:29:2D:68:F0:43:BE:B8:CB:B7:3F
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:2c:07:f1:34:c8:7e:82:ab:df:b0:bf:e4:ce:fb:3d:c4:
         98:ea:35:0d:aa:51:8b:66:19:0e:fc:3d:bf:e3:03:b1:6e:98:
         2c:ef:69:35:9a:d0:0b:47:23:5b:f6:ef:4a:ef:bd:97:ab:e0:
         fc:04:77:6e:e6:b1:76:91:37:6d:03:f7:a0:b7:d8:3e:cc:a8:
         cc:cd:fd:bd:7d:03:04:c3:ec:ce:a4:be:50:fa:80:aa:b9:cc:
         ad:89:80:a3:b1:5d:c4:f9:0e:6a:d8:4b:d3:7b:3d:25:de:6b:
         d8:a2:b7:54:dc:c9:42:fa:d3:db:e8:83:a4:df:ad:44:4c:1f:
         20:16:f9:5f:07:e6:ac:3e:af:46:35:b2:0f:4f:1e:91:57:61:
         e2:67:88:d3:d5:ef:88:80:b5:5e:66:41:df:d8:d6:6d:d0:0e:
         6c:ec:0a:d6:64:3f:fb:84:f3:a1:9f:6d:41:18:c8:c2:1f:41:
         5a:53:de:e4:3e:e4:b5:50:61:5d:ad:45:0b:01:50:f5:1e:03:
         97:8d:70:05:cf:73:dc:a5:6d:1a:eb:83:0b:d4:2e:62:83:4d:
         a1:ba:f8:b4:c7:e3:b4:ae:33:9d:f2:a3:14:1a:7c:f4:bf:4b:
         ed:ee:4c:e1:93:ca:7e:a6:02:5f:bc:c9:f9:1e:d4:8d:f0:40:
         c5:71:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:07 2025 by rpki-client