Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File:                     E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier:          984YqolJF+bFuy/8nS79trl1oEBiOiCTP85M61y1fUY=
Subject key identifier:   94:C4:E1:39:56:60:87:AD:20:1C:53:30:75:4E:20:09:96:8C:7E:6A
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer:       /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number:          A7
Signing time:             Sun 19 Oct 2025 08:36:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:36:25 +0000
Manifest next update:     Sun 26 Oct 2025 08:36:25 +0000
Files and hashes:         1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: PooTlJroBVj9+OZK7WpA1jAMcjh6h5S2EaBH/nnyowY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
        Validity
            Not Before: Oct 19 08:36:25 2025 GMT
            Not After : Oct 26 08:36:25 2025 GMT
        Subject: CN=68f4a30a-00c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:7d:7e:ba:16:ab:8a:95:69:b3:c6:fe:ca:
                    48:2a:a6:5b:be:f7:77:89:4d:a9:59:4b:f7:02:07:
                    8e:44:05:b5:70:3e:2c:62:6c:10:e8:25:79:46:a1:
                    95:5b:ff:c4:8d:c0:be:c4:a1:1b:7e:de:f9:94:8a:
                    c2:ed:38:8c:40:3d:de:ef:ec:b8:16:7b:60:3e:22:
                    8f:63:18:b0:02:bc:33:2c:38:e0:59:92:6a:62:b1:
                    df:3d:65:7c:a0:2b:84:d9:08:7f:72:72:21:b2:d8:
                    87:d0:a4:4a:1b:8f:64:8a:d0:0c:b0:23:0b:58:74:
                    7d:5f:6b:a7:0d:f1:e5:4c:d8:a0:1e:1b:b8:6f:29:
                    43:b2:76:1f:06:32:a7:10:97:66:ef:cd:14:14:26:
                    a3:8c:d2:36:96:b6:3c:11:66:bd:b8:e8:95:6c:b1:
                    c9:47:92:0a:85:03:b3:ef:34:cd:4e:be:ce:8f:67:
                    29:f4:16:ff:1c:56:e1:21:d3:9a:b0:11:c0:1e:e1:
                    8e:90:48:c5:38:05:ff:41:da:86:7a:45:b1:9b:53:
                    45:d2:c5:41:b8:04:e7:1b:ef:73:1d:e0:d3:7e:97:
                    06:7a:e4:36:97:4f:90:a2:0a:66:a5:a2:d9:4e:3a:
                    76:2f:20:ab:07:45:f6:7b:9e:6b:6d:55:a8:b0:7a:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:E1:39:56:60:87:AD:20:1C:53:30:75:4E:20:09:96:8C:7E:6A
            X509v3 Authority Key Identifier:
                keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:b6:5e:bc:60:66:ce:01:d7:d5:9c:f5:13:cf:f2:b0:e5:
         5a:9e:65:2a:6d:1d:86:53:0e:8a:ff:7f:d0:f9:09:a5:cf:23:
         60:3d:47:e0:1c:e0:b2:a7:19:48:9b:90:ca:4f:8a:d7:56:71:
         15:6a:3a:6c:c4:59:67:1a:b4:de:06:31:f8:5f:bf:6e:b4:02:
         4a:0c:14:cd:d0:81:a2:3d:9e:2e:15:e1:5c:b9:84:30:d8:c0:
         81:69:3d:43:af:b8:7d:aa:c8:a2:61:b9:bc:46:f4:f4:e4:c1:
         0c:08:6c:a2:1c:b4:21:96:ca:b8:17:e7:5e:e9:1b:f3:c8:0e:
         dc:f1:47:d5:96:23:57:fc:9f:23:db:85:a7:48:ed:29:f3:40:
         65:39:c5:7a:b9:db:0d:d2:3c:e4:e9:09:a2:9d:fa:ac:0f:a1:
         d8:fd:51:ec:aa:c9:46:8a:7c:9b:b3:23:de:93:d4:ac:46:0b:
         1b:a3:6e:b7:c2:71:c8:fd:20:56:ed:65:59:3e:6d:50:49:a3:
         72:36:7c:cc:51:91:e5:7c:a6:28:6c:16:c8:b4:dd:6e:5c:26:
         aa:15:f8:c1:1a:ac:0c:9d:7f:4c:7f:81:39:85:22:4a:ef:fe:
         ff:ea:cc:ea:60:ce:6b:74:f8:4e:2c:bf:b8:92:fb:2f:26:1a:
         3f:51:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:02 2025 by rpki-client