Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
File:                     EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json)
Hash identifier:          novaCS87WMnxDGMi56JhzJO7M7jKV8Bkp187SoZloMo=
Subject key identifier:   5E:75:4F:66:89:16:8C:E3:4E:C9:FF:1C:4E:23:CC:82:52:E4:07:D6
Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4
Certificate issuer:       /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
Manifest number:          3E
Signing time:             Sun 19 Oct 2025 10:57:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:57:13 +0000
Manifest next update:     Sun 26 Oct 2025 10:57:13 +0000
Files and hashes:         1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: ArOI+puq7gm4ew8zq6BM9fBzEwPaWR2LeiAR92rLoX8=)
                          2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: wa4TR1fvKETfK3e7ugA2YaJ41gq/9kU5OrG3vVI95Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
        Validity
            Not Before: Oct 19 10:57:13 2025 GMT
            Not After : Oct 26 10:57:13 2025 GMT
        Subject: CN=68f4c409-fd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:63:f7:d4:d1:61:b7:27:9e:1e:16:ed:62:
                    dc:09:b8:9b:bf:6d:92:6b:ee:4f:b1:42:de:2a:f5:
                    05:5f:55:14:37:a1:45:fe:b3:40:35:42:30:30:56:
                    12:d1:90:90:7e:18:4d:75:77:9a:58:75:a1:36:b7:
                    d8:4b:4f:2a:d6:e3:4d:bf:a5:b5:9d:51:78:7a:b4:
                    38:a9:bd:d6:ca:38:e2:ca:4b:1b:ad:52:96:4b:40:
                    ad:7c:b9:52:1a:79:1b:26:a6:89:ad:5a:ab:63:6e:
                    ee:25:70:d1:0c:7c:3d:da:81:7f:53:06:ee:2e:a9:
                    c4:f5:a9:2c:f2:f3:3a:47:c4:de:52:3d:d1:63:5e:
                    ab:f0:70:7a:86:c0:60:db:3b:17:c8:53:98:8c:fe:
                    79:15:c3:ce:d0:8a:c8:fd:10:ae:11:5e:1e:bc:ca:
                    5f:8f:57:44:c1:ec:4a:5f:fc:d2:5b:b5:bf:66:af:
                    53:ec:6a:21:41:f8:41:61:ce:5e:9d:a6:2f:eb:f2:
                    d9:81:62:50:d2:9d:cf:ec:22:5d:71:5d:2b:5a:9e:
                    6f:4c:b7:de:a6:4d:60:44:ed:0b:24:9d:a3:29:c7:
                    88:b9:3c:06:26:34:19:52:f3:4b:b5:27:b5:8c:c3:
                    e9:66:76:20:38:90:20:7a:84:b8:45:40:86:90:31:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:4F:66:89:16:8C:E3:4E:C9:FF:1C:4E:23:CC:82:52:E4:07:D6
            X509v3 Authority Key Identifier:
                keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:24:6d:cb:fd:8f:c0:0a:c1:61:40:e5:97:5b:55:05:1d:26:
         79:8b:01:31:1e:3b:ae:be:1a:f4:ab:15:7d:d2:a1:8d:60:3e:
         3a:17:9c:07:83:5d:b3:94:0f:18:86:d1:ad:12:3e:d4:32:d2:
         03:63:90:ae:a1:19:9a:78:20:f6:c1:3f:35:68:a8:f5:5d:13:
         0e:1c:93:49:cc:96:0d:68:c0:92:18:06:86:d2:10:fa:78:5c:
         3c:58:4f:e4:2d:01:ae:d0:45:b4:40:1b:33:6b:3f:b2:5d:99:
         99:af:27:a9:63:8f:1e:f3:16:6d:c3:05:6c:95:8e:cf:5d:6f:
         f4:1e:39:69:75:8f:97:7c:ee:5d:a3:3d:b9:83:af:9c:14:71:
         5d:a1:40:f4:5b:5b:e7:56:f2:d3:71:2a:2e:7a:be:5b:c3:00:
         8a:2d:01:63:e5:59:de:94:e1:0e:03:c2:a5:78:b6:ca:fe:e9:
         72:cb:9a:94:b2:71:fe:2a:52:a9:3f:09:d8:dc:4c:6b:3f:ba:
         9e:04:05:7d:f8:52:95:4c:2d:9a:f7:40:bf:d6:b1:18:39:7a:
         3c:78:e0:62:30:4a:15:77:9c:03:e3:64:c3:93:27:e0:8b:99:
         b0:d0:55:06:51:64:ae:34:a7:db:59:43:b0:27:a9:d5:2d:1e:
         38:c7:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:10 2025 by rpki-client