Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
File:                     eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json)
Hash identifier:          EazFwSCFzLUfiIDBrwFkBpg1AFRGa4mLUnlbQSFSk5s=
Subject key identifier:   5A:F8:98:F3:D7:4C:78:00:D3:C1:2D:DE:00:FB:27:B6:CD:40:5E:53
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Certificate issuer:       /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial:       05CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
Manifest number:          05BD
Signing time:             Sun 02 Nov 2025 23:07:33 +0000
Manifest this update:     Sun 02 Nov 2025 23:07:32 +0000
Manifest next update:     Sun 09 Nov 2025 23:07:32 +0000
Files and hashes:         1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: E1L4gwwr55DWV2RXH5gtHa4hASIcCMB0QPjOZywbEaI=)
                          2: 2B2AA83249DA11F0ADC32972C4F9AE02.roa (hash: ENQCCP1smLOBz6lkvyZXvu5GjJ9+TuN3CIZ9PkAQoUQ=)
                          3: 0A816CBA49DA11F09907E971C4F9AE02.roa (hash: wG78MZ6DvUZN1QM+z69f/6CHqJPulZ82YYhtj5h4cgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
                          rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
        Validity
            Not Before: Nov  2 23:07:32 2025 GMT
            Not After : Nov  9 23:07:32 2025 GMT
        Subject: CN=6907e435-b5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:39:c4:ee:e9:83:ea:99:4f:cd:85:bd:26:
                    40:92:7b:df:72:86:16:8c:ed:33:6a:a9:c4:26:40:
                    0f:b7:ae:d6:8a:7c:63:b5:e0:17:ab:e8:ff:e1:89:
                    17:9e:be:ee:55:7d:0d:7e:fe:0f:9e:87:52:94:a2:
                    49:8b:a1:1b:6d:74:8a:60:b9:85:79:4f:71:14:47:
                    88:4b:c1:9a:85:05:e2:ee:0b:d6:d5:27:7e:18:e0:
                    95:1f:5b:e3:39:e6:d0:10:e9:bf:f7:2f:07:43:e7:
                    9e:28:01:08:bb:67:a1:57:93:92:ec:6f:87:73:6c:
                    e4:90:3f:66:45:77:02:f4:79:53:a7:2a:6f:b8:e6:
                    51:f3:4d:89:c3:98:3c:d0:d4:50:de:ef:3d:80:f7:
                    e1:75:08:29:86:b3:a5:c2:9a:0b:6c:27:20:4a:4e:
                    56:e0:6b:5c:31:2e:19:98:b4:70:47:4e:1a:71:01:
                    13:8d:35:66:cc:e0:aa:9d:5d:33:2a:d9:e0:cd:64:
                    5a:59:80:df:12:f4:14:6c:64:a4:83:0a:dc:c6:ff:
                    b3:ea:5a:d0:2b:91:cf:ef:6e:00:63:7f:52:a3:d7:
                    1b:2f:1e:13:01:c3:22:64:c2:b5:7d:ca:90:69:c0:
                    41:ff:62:fd:7b:05:41:54:41:f9:8d:da:8d:93:3e:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:98:F3:D7:4C:78:00:D3:C1:2D:DE:00:FB:27:B6:CD:40:5E:53
            X509v3 Authority Key Identifier:
                keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:45:c0:f2:cb:5f:63:90:46:da:f3:df:62:8e:99:c5:14:
         f6:94:5d:b1:62:1a:36:ac:a2:c8:ee:0c:5d:73:5d:52:09:c7:
         f2:37:bd:f1:81:f2:6c:a2:fa:66:a0:4f:92:95:78:99:2e:41:
         01:0c:a9:fd:da:7d:eb:67:25:10:19:ca:21:25:cf:bb:29:d4:
         ee:f6:15:b1:7f:f3:5d:f9:c9:eb:ed:4b:23:f4:e5:1c:f3:35:
         6a:d8:b7:17:1a:f8:85:ba:ed:8f:33:52:e8:33:ea:2c:a4:2f:
         89:1b:59:d7:4b:29:b6:b4:29:7b:7c:45:40:93:bc:e7:f2:8c:
         bd:f4:df:bf:71:a7:ea:fe:ea:e9:34:46:70:6c:ca:35:6c:9a:
         5a:43:9a:b9:77:c6:43:4b:8c:4d:7a:3d:f8:2c:88:8a:eb:9e:
         c4:d7:c9:88:01:56:f0:04:18:48:03:6d:7f:e2:16:19:ec:5b:
         bb:d2:dc:3a:fd:02:79:23:3a:9c:8f:4b:0a:73:5a:df:fb:c8:
         fa:97:ac:33:d2:9b:c7:14:5a:cd:dc:32:78:28:26:6e:c6:0f:
         fe:dd:5a:55:63:7e:84:cc:c0:50:c8:1e:44:5a:05:76:78:c0:
         c3:9d:37:2c:dd:4b:2d:02:21:2c:6a:6d:d7:c1:84:0d:5c:a7:
         e3:d4:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:18:14 2025 by rpki-client