Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          04OBxprIsDIywDHQC6C0KJsKwqAiTefY3R1EJUzQChg=
Subject key identifier:   01:BC:88:71:C1:96:6C:33:25:68:EE:D5:DD:17:E0:F0:FE:3C:7E:A7
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1D4C
Signing time:             Sun 02 Nov 2025 16:09:15 +0000
Manifest this update:     Sun 02 Nov 2025 16:09:15 +0000
Manifest next update:     Sun 09 Nov 2025 16:09:15 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: YChTzHTQh/Jzpx08TbgG5eTXSWiqgOjiDs+IavtnmDY=)
                          2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
                          4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7509 (0x1d55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Nov  2 16:09:15 2025 GMT
            Not After : Nov  9 16:09:15 2025 GMT
        Subject: CN=6907822b-5570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:61:55:d0:85:52:f8:bf:e1:51:60:93:5e:
                    67:f5:10:9c:4f:56:73:90:5d:35:eb:0f:a7:6c:5a:
                    65:17:56:79:65:cb:99:ea:b3:2e:d0:5d:8c:66:62:
                    58:4d:bd:6a:f2:b4:4e:a4:57:a1:89:0b:b8:03:a0:
                    95:e0:e2:65:ae:fe:5e:99:f8:8e:4f:85:3f:80:f9:
                    cc:8c:58:90:45:55:90:18:da:e8:60:56:ef:78:f9:
                    79:32:08:f4:46:a0:79:49:09:07:2d:49:84:4f:a8:
                    02:f9:7b:bb:ed:fc:f3:0d:a1:38:63:6d:17:39:a8:
                    ca:00:bc:7e:ca:a1:68:42:99:07:99:0e:3b:40:69:
                    41:7b:04:9d:5b:1f:90:58:1b:25:6f:23:96:ff:27:
                    02:aa:3b:50:e4:6c:a3:a4:ea:70:7f:f5:43:1a:e5:
                    0b:f6:07:51:af:1c:e2:37:1e:a4:9d:76:6d:22:5f:
                    ea:0c:d0:0c:be:9f:fc:58:3f:72:ef:6e:b9:4c:d5:
                    df:5f:33:07:17:77:7f:9e:2b:a4:ca:31:54:0f:80:
                    26:81:b9:8f:72:fd:df:c1:21:0c:b2:eb:92:05:92:
                    14:74:98:57:c8:f2:5b:9b:7f:a9:b5:d8:09:21:5e:
                    50:55:14:c8:f0:ea:4a:be:91:53:4b:9a:cf:6c:11:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BC:88:71:C1:96:6C:33:25:68:EE:D5:DD:17:E0:F0:FE:3C:7E:A7
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:af:ab:2c:ed:e2:7f:fb:ac:25:0b:af:c7:30:52:e2:8d:02:
         e4:0b:4b:e4:9e:3b:73:e9:91:1f:51:9c:34:cb:50:ba:cd:08:
         47:32:de:e5:87:76:37:69:1c:15:c6:37:ca:2f:c8:78:49:5d:
         f1:ab:35:8b:9a:bb:51:78:ed:5e:ec:30:d3:a3:ef:21:8d:98:
         27:38:41:81:dd:ac:71:67:57:ab:f6:15:47:8e:6b:85:3d:80:
         41:6a:4d:af:89:59:eb:ee:fa:7f:89:a8:41:f2:c5:b6:d0:9e:
         0f:11:61:85:19:e0:25:96:8a:26:37:5b:c7:96:38:68:3b:6a:
         1f:3d:d1:cd:68:d6:58:38:ff:25:61:14:f5:20:fd:38:9c:86:
         14:60:89:ac:33:bf:c5:be:6c:db:ee:22:97:45:33:5e:ed:5c:
         59:5b:f4:6a:07:3a:ef:98:dd:76:08:32:6c:54:df:91:27:e3:
         54:3f:90:b8:7d:0d:e0:0e:bd:fb:1f:d3:ae:d5:a9:e8:12:c3:
         67:ba:c1:fa:18:05:4a:4a:a3:c3:c9:ee:1a:ae:cb:3d:3e:dc:
         4b:1a:1b:ad:b2:2e:e8:a4:03:ef:55:b1:20:ff:d5:a5:83:d0:
         0d:c4:52:74:fe:15:d7:d0:f2:6d:1a:df:53:1e:ad:94:a7:ab:
         b9:2e:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:12 2025 by rpki-client