Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File:                     vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier:          gi2YJ6c2a88fW9WYHmNNz+UjPnYRQD95H37gjcHdLcI=
Subject key identifier:   04:2C:73:E6:88:72:41:D3:B1:39:8C:57:54:2A:BC:0B:95:6D:82:15
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number:          09
Signing time:             Mon 20 Oct 2025 20:27:36 +0000
Manifest this update:     Mon 20 Oct 2025 20:27:36 +0000
Manifest next update:     Mon 27 Oct 2025 20:27:36 +0000
Files and hashes:         1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: kfsLTfb3aK0zytYStaao7FcOP9w4yY0lob4wpGdmCEU=)
                          2: 8AE1E18AAB3411F085D6B647C4F9AE02.roa (hash: OySAnBdwJTi3IVmTSx/cuL36extS6/mFNWKp68Yeodg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Oct 20 20:27:36 2025 GMT
            Not After : Oct 27 20:27:36 2025 GMT
        Subject: CN=68f69b38-aa2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:0a:74:cc:0c:ff:d5:dd:75:bf:28:df:50:
                    52:2b:6d:0b:d7:67:6d:c3:83:f3:d7:4f:fe:6d:5d:
                    76:bc:f8:3c:50:0a:cc:3d:2c:e2:0e:aa:f6:f7:e8:
                    96:97:dd:81:25:21:b5:9a:b6:11:78:07:12:a9:e9:
                    5f:58:50:8d:92:4c:e4:5a:ce:49:e4:43:d0:8e:ea:
                    fe:a0:7d:2e:bd:25:15:fe:20:4e:18:63:0b:e3:3a:
                    b7:80:2c:74:d8:55:59:2f:d4:a9:b5:f0:d1:ed:4c:
                    58:6e:a8:54:c0:da:73:a3:e9:1d:9e:34:30:2e:7a:
                    f5:48:55:09:e0:bf:d6:d2:81:8c:d2:f9:1d:67:81:
                    2e:d0:dc:4b:d9:03:25:7b:d0:c6:b3:36:75:21:cb:
                    e8:33:96:4d:fb:34:c8:e5:9e:11:a3:a4:25:2d:fd:
                    a6:6f:40:51:24:55:2e:6e:91:d6:75:24:0a:ac:40:
                    6d:b9:37:4b:5b:07:16:5a:44:5f:37:6b:fa:0c:1e:
                    fb:97:20:29:03:d3:01:8f:69:b4:59:d5:fe:5b:e1:
                    db:8c:e4:2e:0a:c2:b0:81:f2:c2:fc:0a:7d:2f:3f:
                    46:e2:2f:be:97:b3:06:09:8b:97:41:1b:64:3a:93:
                    29:cf:1f:8d:bc:a0:cd:e0:c9:0b:1a:5d:e4:1a:cc:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:73:E6:88:72:41:D3:B1:39:8C:57:54:2A:BC:0B:95:6D:82:15
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:33:49:d4:ce:85:6e:d7:77:f6:a4:e1:75:19:0a:22:0e:
         d8:13:5e:c6:2b:de:c1:48:ea:55:90:fd:e1:d2:a4:35:df:28:
         aa:e4:e5:b2:1a:e4:43:59:95:f8:b5:2b:a6:f9:d5:1e:e0:59:
         e6:c0:b6:51:15:02:17:d7:2a:ae:85:cb:b1:70:27:4e:97:3f:
         ce:3c:71:d4:a5:ac:68:86:91:34:0b:45:79:14:b8:12:41:35:
         ae:cd:f9:a6:60:99:b9:c1:12:4e:0f:89:2b:2a:30:98:25:c1:
         bb:ea:9b:85:8e:6f:43:e9:85:38:d0:cf:2d:5b:ad:11:cc:49:
         94:32:8a:f7:8e:13:c9:f1:73:8d:ce:ae:41:00:de:53:80:5f:
         82:02:40:ee:2f:e8:69:aa:5a:ee:9b:a7:59:3a:ea:7a:3c:2e:
         7f:d3:1a:9a:60:8d:86:f0:a1:6f:6a:88:dd:b5:2e:73:4d:85:
         11:1b:98:4d:97:bf:14:7c:8c:a0:1b:cd:37:2c:fb:fb:e6:2c:
         25:0b:b2:69:c5:9f:79:96:71:12:bf:ec:35:e5:aa:6e:8c:18:
         98:b5:cd:af:e1:4a:9f:e2:46:35:e8:08:22:e0:5a:9a:7b:7d:
         76:7e:16:7e:ed:8f:51:02:a8:17:dc:6d:93:dd:5c:4e:fb:34:
         e0:ab:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:02:11 2025 by rpki-client