Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File:                     4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier:          CvTsxrN8y0Aleau44Tg3GZBqDGy4edbCkbPsZ0wjDbI=
Subject key identifier:   AB:30:54:75:49:D5:E7:02:C2:EA:38:EF:33:50:5F:5F:9C:AF:DF:08
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer:       /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial:       07F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number:          07EB
Signing time:             Tue 04 Nov 2025 21:12:06 +0000
Manifest this update:     Tue 04 Nov 2025 21:12:06 +0000
Manifest next update:     Tue 11 Nov 2025 21:12:06 +0000
Files and hashes:         1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: +RgpYh1TajIyRShLAuYHbUR//X9X6aRpNeKPCmQ7SvE=)
                          2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
                          rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
        Validity
            Not Before: Nov  4 21:12:06 2025 GMT
            Not After : Nov 11 21:12:06 2025 GMT
        Subject: CN=690a6c26-0229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:22:57:68:4d:d8:95:4d:3c:57:70:f1:a0:
                    89:81:27:33:bb:b7:d4:b4:52:4f:1f:39:78:1d:31:
                    98:75:a6:e0:03:cf:b7:de:98:12:34:6a:f1:b3:69:
                    e4:0c:c2:9f:25:b9:3a:c6:0c:60:b8:f4:d8:fb:7b:
                    25:51:d5:f4:73:a9:48:71:a5:74:34:18:7a:f7:53:
                    88:0a:a2:8e:7c:67:7d:89:2e:6f:1b:a6:3e:1c:8e:
                    c7:4a:8b:bb:30:0b:12:93:fc:4e:73:be:d2:26:e9:
                    4d:73:ee:d3:2f:9f:72:e1:1d:5c:79:35:3f:e6:77:
                    3c:15:41:ca:6d:de:85:f5:6b:9e:cf:18:5f:52:7c:
                    d3:5f:3a:b6:dd:a9:b9:85:ef:2e:35:00:55:90:23:
                    17:f0:a7:cb:69:0e:83:c6:f1:31:de:08:be:7a:55:
                    a1:b2:af:77:49:6e:1e:c4:11:da:6a:bb:18:57:71:
                    79:49:fc:dd:ca:5e:a7:b4:90:64:ce:02:b9:e1:ac:
                    66:ff:66:c5:8f:fd:59:06:7a:ac:93:f1:33:50:58:
                    33:8e:10:6b:cc:7e:95:85:11:e1:dd:20:aa:95:fe:
                    be:d9:9e:37:2b:14:d8:81:57:ce:0f:e4:fe:50:c3:
                    c3:25:67:a3:44:00:5a:6a:dc:ef:b5:18:36:d5:bd:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:54:75:49:D5:E7:02:C2:EA:38:EF:33:50:5F:5F:9C:AF:DF:08
            X509v3 Authority Key Identifier:
                keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:c9:31:2f:84:ee:0f:cb:f9:a5:be:04:be:2b:c1:28:b6:
         76:11:16:c8:b3:0b:04:2c:58:16:10:cc:6d:d8:a0:eb:ed:33:
         76:e8:57:41:81:e6:42:5d:86:ad:34:a6:2a:79:99:e3:fb:52:
         26:73:f7:c2:53:fd:55:82:9d:b4:5e:2d:40:d1:cd:ca:97:68:
         7d:1c:4b:17:2f:83:bf:b9:43:f4:b4:7d:ab:cf:b8:8f:38:da:
         0b:29:29:2d:f5:df:0f:af:2f:08:f8:57:e1:a0:a9:60:aa:98:
         f1:6a:37:c0:f4:83:91:81:33:ff:24:c3:c7:6e:04:95:75:af:
         b7:6d:0d:f2:28:4e:77:2d:c8:42:ad:f8:db:50:47:42:3f:4c:
         b8:b9:c3:42:54:a1:1c:e1:b2:5f:4a:b2:e0:26:cb:28:b9:df:
         00:51:11:22:bd:60:3e:e7:df:6e:9c:58:f9:e6:1f:50:d2:37:
         ee:47:11:72:61:12:f0:f4:6e:bf:25:b2:a1:ed:7c:e4:66:c1:
         cb:a3:f1:ea:82:72:d2:8c:f9:78:45:51:49:db:42:4a:3b:67:
         29:63:12:54:88:9d:cb:0c:f0:07:39:b3:bc:12:6b:19:06:83:
         f1:57:d3:42:dc:db:03:e2:f4:07:66:6f:4c:42:3f:e1:77:c8:
         29:3f:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:13 2025 by rpki-client