Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File:                     eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier:          z4zePvcVsktreTdmT6PjtIdENJ74bTNBMaRXYRz7EwM=
Subject key identifier:   CD:50:1E:6F:E5:2E:85:B0:13:C5:CC:24:41:0F:3E:02:C8:E0:41:4D
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       118E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number:          110D
Signing time:             Sat 18 Oct 2025 17:53:35 +0000
Manifest this update:     Sat 18 Oct 2025 17:53:35 +0000
Manifest next update:     Sat 25 Oct 2025 17:53:35 +0000
Files and hashes:         1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: VtT87mbMgnfQi2KrlXftxdmhn80efVlUNiuApMIHe5U=)
                          2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=)
                          3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=)
                          4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=)
                          5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=)
                          6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=)
                          7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=)
                          8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=)
                          9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=)
                          10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=)
                          11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4494 (0x118e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Oct 18 17:53:35 2025 GMT
            Not After : Oct 25 17:53:35 2025 GMT
        Subject: CN=68f3d41f-24c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:27:eb:41:a6:78:2a:93:ed:de:4e:c1:b7:
                    d5:cd:c0:d7:2f:c7:21:a1:3f:9e:93:c0:79:7c:f5:
                    86:84:b6:78:20:3f:57:a1:a2:67:23:cd:de:7d:7a:
                    7f:12:61:92:4c:3d:db:a0:25:dd:93:73:c8:ce:8e:
                    43:69:ec:bb:2a:36:df:b9:00:cc:a2:0c:02:11:d2:
                    31:77:6e:3d:28:57:53:38:f2:da:3b:dc:49:dc:0e:
                    ea:a4:af:ee:bd:8d:d7:d4:0c:18:0e:ff:53:74:a9:
                    80:96:81:f0:6c:02:92:77:96:9c:e9:2f:3e:31:37:
                    c0:d9:a9:93:d8:00:20:b6:7b:69:71:79:43:64:1c:
                    5c:03:5f:f1:1a:ea:7c:88:80:85:72:fb:15:99:a4:
                    74:dd:cd:d9:e6:73:1c:af:12:66:29:91:53:ab:9a:
                    8b:9a:23:39:68:4c:19:60:84:3f:72:b5:85:ff:95:
                    07:cd:02:d1:60:37:c3:5f:76:5f:c3:a9:89:0c:1c:
                    63:f4:91:de:9e:f4:7b:5f:ee:cd:8a:f2:f6:4b:5e:
                    01:fb:40:5b:90:7e:b2:06:6f:2a:14:f2:95:9b:56:
                    48:11:f7:22:28:ae:05:f0:54:e2:7a:63:f7:e8:a4:
                    bf:c9:b8:c4:05:95:95:ba:a7:96:55:8f:a2:71:50:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:1E:6F:E5:2E:85:B0:13:C5:CC:24:41:0F:3E:02:C8:E0:41:4D
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:3c:95:53:f6:d8:55:1e:e2:2a:04:f9:a3:0d:b1:79:66:
         e4:99:d2:36:d1:df:ce:29:a9:41:a2:a3:f7:eb:d6:70:92:aa:
         5b:49:e1:d3:09:6c:9a:b9:56:7a:88:cf:a8:4a:be:aa:b0:87:
         b1:ae:30:14:2b:4f:f1:6d:02:cd:c5:58:46:43:cb:8f:f3:1f:
         af:61:2f:65:a3:ee:b6:70:dd:c7:a4:c2:f9:8a:4c:ca:b3:ff:
         96:aa:34:46:41:17:2f:f1:7e:17:d6:43:33:3e:a9:34:b3:be:
         d3:fb:de:6f:01:b5:b4:af:24:a1:dd:d3:f5:cc:20:3a:aa:57:
         b0:e4:67:04:6f:e8:e4:50:fd:29:b8:c7:74:62:09:06:73:11:
         0c:d9:b8:87:d0:d9:f6:7a:1b:f0:e5:3f:b6:00:49:3f:ec:94:
         af:2d:77:af:a9:4c:19:d7:93:e3:d9:42:1e:8d:f9:40:0a:a2:
         a4:6e:4c:e4:30:8e:d5:9e:9e:31:7d:b1:4c:9f:c4:b0:12:67:
         fc:4a:df:d9:4b:4e:0e:e7:5e:28:39:ab:48:85:15:34:8b:43:
         b2:45:96:6d:c7:a3:7f:67:ea:11:7f:b5:00:2d:57:11:1c:e5:
         8f:69:38:41:d7:ce:6d:8b:bb:67:fb:34:26:9f:36:ad:9e:8d:
         77:03:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:49 2025 by rpki-client