Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
File:                     e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json)
Hash identifier:          Fg8DIGlcgU3WRS8VBPYOqFgoea6EdG/LaCQFmA+0FX8=
Subject key identifier:   2C:60:E9:AB:7F:E8:72:EC:1C:06:84:BF:F6:4D:9F:FA:32:9D:B9:DC
Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
Certificate issuer:       /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
Manifest number:          07BE
Signing time:             Tue 04 Nov 2025 21:31:30 +0000
Manifest this update:     Tue 04 Nov 2025 21:31:29 +0000
Manifest next update:     Tue 11 Nov 2025 21:31:29 +0000
Files and hashes:         1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: 74dmLrEAKrgYD0QImgP9JH0sxxAA9BnqIMLHZn4oA90=)
                          2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
                          rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
        Validity
            Not Before: Nov  4 21:31:29 2025 GMT
            Not After : Nov 11 21:31:29 2025 GMT
        Subject: CN=690a70b2-0dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:66:45:c5:66:de:8a:83:0b:57:b3:50:e8:
                    de:75:8c:0d:14:aa:65:12:24:31:14:87:9c:a2:7b:
                    b2:af:5f:3d:8d:73:fc:f6:27:c5:3d:70:82:54:db:
                    f0:fe:7a:84:50:0a:96:66:e8:22:c3:32:08:d6:1a:
                    70:22:bf:51:70:dc:ae:a4:f5:8f:18:c6:49:9d:19:
                    fb:f5:ab:64:2e:63:63:d5:93:1b:91:63:29:55:34:
                    e3:f1:70:ce:07:1e:1a:bd:49:f2:47:e9:19:6c:e3:
                    05:31:1a:f1:1a:78:5d:3a:9a:70:61:a7:77:a6:09:
                    fe:ec:40:63:b6:18:b8:68:52:42:3f:9e:a0:49:e5:
                    fb:92:61:57:6c:a8:44:40:6d:88:32:ff:d3:f5:31:
                    9c:d8:9a:d8:af:c1:8c:d2:8e:2a:f8:51:6b:d6:1a:
                    e6:e0:11:ee:62:cf:66:37:fe:59:f4:d4:e4:e0:77:
                    87:c0:5f:ce:01:30:c5:f3:7d:fb:e2:6e:13:2a:77:
                    01:fa:d8:b7:7f:d3:b5:91:76:c9:26:1b:64:03:22:
                    78:4f:16:78:7b:9c:d7:c9:44:42:4e:b9:df:ea:84:
                    60:c2:97:63:46:f6:8f:4a:28:2c:ce:ad:be:a7:f5:
                    57:ba:14:93:d0:9a:43:ec:fe:3a:8b:f7:97:23:be:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:E9:AB:7F:E8:72:EC:1C:06:84:BF:F6:4D:9F:FA:32:9D:B9:DC
            X509v3 Authority Key Identifier:
                keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:ac:d6:ab:22:be:c2:4a:e9:87:f3:9c:b2:54:43:b2:0a:
         27:5c:ae:e7:38:20:f5:42:88:20:aa:03:5b:04:a3:a2:21:6f:
         0a:63:41:ef:7b:8d:81:ca:74:0e:3f:ef:52:ac:cd:b0:73:74:
         ff:40:7c:44:0d:40:d8:85:50:29:f1:23:b3:ed:f1:21:81:04:
         71:93:4b:7d:97:99:eb:8a:d7:1f:2a:a8:cd:3f:a5:14:5d:de:
         45:88:cb:7a:d5:53:c6:1c:6c:2e:97:61:4e:f4:40:fb:82:21:
         b5:40:71:d6:f9:71:7b:72:e0:04:31:d5:d8:76:32:68:f9:c0:
         92:60:ca:5e:b0:e6:2a:4f:01:b8:bb:ad:27:cd:2a:f2:39:ff:
         3d:53:56:8a:7c:71:a1:6e:c5:a3:d4:1f:a4:89:bb:fc:65:bd:
         6f:18:ce:75:31:19:89:ed:d1:4a:f4:5c:66:1f:ae:38:1a:95:
         38:75:57:e7:11:94:15:a9:27:0d:c6:9f:2d:5a:67:de:b8:3d:
         aa:23:a0:55:07:d2:5c:ef:76:70:76:d3:88:e5:13:64:e0:0d:
         25:96:e8:c1:79:44:9a:8e:11:c6:be:e6:f8:1b:8d:8f:32:fd:
         31:74:6e:97:81:27:6f:43:8e:f4:19:11:cb:1e:bb:0f:05:93:
         fa:28:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:25 2025 by rpki-client