Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          OLG8LlfwxhC2f7e/ziBocDhDVVpye4Orzd6Px3E2x7g=
Subject key identifier:   CF:B8:EA:50:E4:3E:75:03:DD:D8:E8:CE:A9:62:4A:1C:29:75:FD:1A
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          010B
Signing time:             Mon 03 Nov 2025 04:57:08 +0000
Manifest this update:     Mon 03 Nov 2025 04:57:07 +0000
Manifest next update:     Mon 10 Nov 2025 04:57:07 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: csNLrhqgE0cWFrmGm5ftm1bRhGJjmA3l96k/mvrPDVY=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Nov  3 04:57:07 2025 GMT
            Not After : Nov 10 04:57:07 2025 GMT
        Subject: CN=69083623-44ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:8b:31:01:93:74:fd:17:2d:be:10:08:af:
                    d4:46:34:7b:09:c5:e7:81:f8:00:f4:c2:67:65:5f:
                    6f:1b:6a:18:c2:9a:a1:57:b5:0b:d6:2c:11:95:45:
                    20:f1:88:de:70:e1:b7:ac:61:1a:75:4b:34:44:0b:
                    00:59:73:8c:dc:d1:e0:73:27:63:c3:0d:21:41:c1:
                    f4:00:e4:de:17:30:dc:5f:d2:38:f1:39:b3:19:f8:
                    d8:96:f2:ac:49:b8:c7:31:db:6d:3f:54:3b:d2:8d:
                    b5:b4:90:2c:01:c9:35:d7:9c:6e:b0:25:82:ae:db:
                    43:e0:ae:9f:44:8b:bb:e5:50:9b:99:0a:e0:5b:d2:
                    f8:14:8d:40:5d:5c:26:99:da:e3:bf:b4:7a:cc:14:
                    4f:5c:4e:4a:de:8c:e2:b1:a3:ed:2c:15:12:a9:42:
                    6d:a5:c2:65:0d:96:4e:46:b6:76:8e:dc:39:07:f7:
                    10:18:64:9e:5d:0d:97:19:79:86:1a:2e:c6:28:51:
                    b0:13:3c:4b:04:db:e6:01:17:05:34:d2:cf:d6:af:
                    57:12:45:c5:da:29:34:bb:8b:5e:0f:8a:62:e4:8b:
                    39:82:6f:b6:2c:bd:f9:10:f9:01:37:a7:06:07:30:
                    5f:cc:78:4b:3f:4c:97:31:e4:6a:83:4b:9d:cb:a1:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B8:EA:50:E4:3E:75:03:DD:D8:E8:CE:A9:62:4A:1C:29:75:FD:1A
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:e3:4d:2b:41:bb:77:b6:58:e0:14:94:62:9e:48:6a:44:
         ee:9c:da:b9:7e:46:80:c4:a5:6f:e4:f9:8e:a5:2e:2b:ab:f2:
         39:f2:bf:22:13:5d:da:4e:40:17:f0:f9:52:29:ff:de:fc:b6:
         b4:83:76:d5:86:c0:dc:01:5a:74:3b:78:1d:3f:89:87:15:31:
         14:ba:e1:e6:ce:f0:87:71:5d:1a:8e:da:a7:a2:25:c2:64:40:
         4b:e5:2d:13:dc:2e:52:09:6a:a8:31:95:f7:c0:84:68:9b:62:
         1e:76:30:56:b5:95:37:57:61:51:33:b1:93:5a:d6:ed:ed:df:
         18:92:3c:6d:ce:f8:5b:70:96:5d:58:1f:aa:93:a7:3a:3b:a1:
         4f:bd:64:9a:fa:ae:cd:0f:d0:e6:8b:1d:c3:22:20:a8:09:7d:
         ed:db:2e:64:92:c0:ec:72:af:80:5a:db:56:26:d8:f6:96:28:
         29:be:6a:4d:fe:f7:f9:87:44:1f:c6:19:15:0e:8c:97:b5:9b:
         3e:0f:6c:a9:36:86:4d:a9:ad:fa:60:49:1b:b4:af:82:ed:c6:
         99:f1:09:63:ff:a1:cd:21:fd:3f:6d:1d:94:88:9d:c4:c4:b8:
         4f:2e:35:f3:98:78:57:18:e6:a3:68:be:ca:68:1a:dd:83:7e:
         e8:e2:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:43 2025 by rpki-client