Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File:                     7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier:          8Hl5S3B1S3lFqtyfRt4ergxBP0KZpE0zCBa5usXyvV8=
Subject key identifier:   E4:2D:D0:27:30:99:19:DF:16:AF:18:E5:9A:EE:4D:18:B8:59:8A:62
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer:       /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number:          EE
Signing time:             Sun 19 Oct 2025 08:15:24 +0000
Manifest this update:     Sun 19 Oct 2025 08:15:23 +0000
Manifest next update:     Sun 26 Oct 2025 08:15:23 +0000
Files and hashes:         1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: orS/R3UobCBA/yt0BZxPr6ZwY2ULVG1xKF/+yCH/BAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
        Validity
            Not Before: Oct 19 08:15:23 2025 GMT
            Not After : Oct 26 08:15:23 2025 GMT
        Subject: CN=68f49e1c-e29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:96:fa:3c:be:60:6f:03:2a:f6:85:64:92:
                    e6:d4:f5:f2:be:5e:98:41:66:3d:91:44:cd:69:5b:
                    29:0b:f1:b9:a7:cc:09:f4:7b:fc:9f:b6:05:6f:b3:
                    c0:0e:96:52:87:33:29:a1:9b:87:bd:9e:c3:fc:1f:
                    39:5e:74:c3:31:30:17:05:93:a3:df:36:13:92:05:
                    0e:38:67:62:16:c0:28:e8:2d:17:cf:95:0e:1d:ec:
                    eb:1e:07:c8:68:2a:84:0d:36:23:c0:63:c9:55:53:
                    b2:f7:87:e0:30:22:bc:75:f7:2f:e5:98:da:20:8d:
                    45:3a:d4:c1:f7:64:25:39:b5:8b:bf:a9:e5:84:2d:
                    b4:78:84:c4:a9:49:ed:dd:58:62:ac:82:69:2d:28:
                    11:5b:11:25:e7:ab:9f:b3:e2:60:6c:82:57:64:81:
                    6c:37:86:50:d2:19:3f:a6:cd:a7:7f:79:28:3d:6e:
                    92:20:e5:c4:fa:b4:89:27:0f:9e:a9:22:6c:7f:0f:
                    04:2d:5d:cd:76:b2:a9:e4:23:38:2e:8f:19:28:6c:
                    3a:97:a2:b9:75:46:79:f5:44:ba:df:70:db:1c:4a:
                    ec:51:a7:df:85:33:69:a7:42:33:59:99:ab:ef:04:
                    c9:24:22:14:40:7c:bc:19:b3:92:e7:52:c5:ff:08:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2D:D0:27:30:99:19:DF:16:AF:18:E5:9A:EE:4D:18:B8:59:8A:62
            X509v3 Authority Key Identifier:
                keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:c7:42:39:77:d9:1d:0d:85:fc:e9:94:51:ee:b6:4d:c5:
         9f:bc:c2:55:c3:58:e6:64:a1:90:47:f0:1f:bb:34:f4:45:b0:
         01:6e:82:43:1b:78:55:bf:9a:31:fb:26:f9:b4:6d:80:f6:79:
         cf:81:70:ec:5f:06:a6:c8:b5:09:fd:8e:0b:15:e4:09:61:c8:
         89:06:60:7a:2c:01:27:f6:33:ea:42:f6:67:8e:9f:ea:8f:98:
         7b:cf:83:4d:d0:ea:56:a1:e8:82:95:26:2e:6a:6c:09:d4:86:
         16:64:f1:3d:fd:c3:c5:3a:eb:7d:3b:6a:ee:68:53:3a:e7:4a:
         f3:a9:4e:7a:63:92:15:47:26:56:cd:66:fb:94:04:93:e6:84:
         94:e6:3c:1f:57:df:b2:b9:8b:2f:1a:d5:42:1b:9f:78:4a:41:
         ea:d6:75:08:9b:f2:b7:67:6e:5e:13:3c:e7:9e:10:14:78:e6:
         40:ed:c6:1a:51:7a:3b:d2:0b:6a:08:9d:00:bc:93:49:07:7f:
         73:f0:23:4f:97:2d:13:a3:fd:2a:db:2b:da:43:fb:c7:8f:36:
         fa:55:a4:0e:5e:c2:68:15:82:1c:be:3f:5d:5b:a0:75:97:2b:
         60:7f:06:45:6d:33:f2:03:be:6e:a2:23:e2:2f:de:53:f8:42:
         18:92:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:46 2025 by rpki-client