Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
File:                     evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json)
Hash identifier:          5lCm8lMA0fCurH+tntbbsNJIilrIuJXcP4IS11dAL9g=
Subject key identifier:   90:C2:1D:A1:6D:C1:57:49:24:DE:51:9C:E5:59:FF:7F:F9:04:46:38
Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
Certificate issuer:       /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Certificate serial:       0980
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
Manifest number:          0978
Signing time:             Sun 02 Nov 2025 20:03:30 +0000
Manifest this update:     Sun 02 Nov 2025 20:03:29 +0000
Manifest next update:     Sun 09 Nov 2025 20:03:29 +0000
Files and hashes:         1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: 208VT7MsTYAkGil3xFDCLOJnCtstDjA8ui7OFDvXfW8=)
                          2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: +iwTzs5m/T4DUW8LNJ7XuCxYejcTHo86TwNrQogD1C4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
                          rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
        Validity
            Not Before: Nov  2 20:03:29 2025 GMT
            Not After : Nov  9 20:03:29 2025 GMT
        Subject: CN=6907b911-ec96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:59:62:f3:47:24:29:f4:05:77:8f:f7:72:
                    a3:79:08:8c:36:77:7c:61:32:e0:d6:eb:dc:62:e0:
                    14:74:d3:97:ef:f8:29:f8:34:d6:dc:ec:97:cc:81:
                    f1:a0:0d:82:fa:1c:f6:e1:20:5f:ad:ff:47:3c:a5:
                    4d:52:59:5b:16:89:d9:14:44:65:6d:7f:2c:aa:cd:
                    a6:b5:23:4f:ef:ac:0b:fc:19:9c:3c:9d:0b:9e:a9:
                    bf:1d:a2:c7:61:15:13:ed:7e:af:5c:81:a1:91:bf:
                    3d:db:62:fd:db:c1:2f:88:8c:63:af:ff:ee:2d:10:
                    9c:d0:cc:2e:a6:ea:ae:ed:86:70:71:2a:ff:04:04:
                    9b:9e:1c:38:39:70:40:aa:b8:66:9f:b9:03:8c:1a:
                    0e:a0:5c:b0:a5:15:e9:8b:7b:29:ee:5b:0b:03:76:
                    97:b7:d4:87:97:3f:7d:01:06:2d:bc:55:8d:b0:4f:
                    4a:90:66:e7:f4:c8:02:15:31:fa:d6:d3:a1:c0:83:
                    05:8d:6e:33:16:25:ed:d6:f3:c1:b9:a2:0c:97:ef:
                    af:25:7c:ab:ae:e0:ea:02:9e:ef:8e:7e:0d:07:90:
                    8d:6a:53:13:1d:ea:e9:2d:62:87:88:4a:b2:15:23:
                    01:04:fa:14:d6:a7:14:35:66:5a:c8:b1:83:bc:16:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C2:1D:A1:6D:C1:57:49:24:DE:51:9C:E5:59:FF:7F:F9:04:46:38
            X509v3 Authority Key Identifier:
                keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:05:17:1a:11:c1:f5:c5:69:e6:eb:0c:94:72:c2:9d:e8:b1:
         7a:a2:7c:b8:8e:a7:c2:2e:8a:d5:05:9f:d5:bc:e4:37:2c:f2:
         57:2a:ba:fa:27:54:c1:23:03:ab:23:9c:34:39:a7:19:bc:5d:
         7d:24:42:f8:c3:d2:df:c4:0d:94:db:e6:c3:92:f7:3e:40:6f:
         6a:20:0f:23:70:2f:ba:3e:1d:b6:ac:8a:df:4e:d4:a1:2e:e1:
         30:bf:c0:5b:0a:98:61:ef:af:e1:b9:3f:6e:12:28:ba:ab:22:
         8d:16:29:af:73:27:47:ca:34:e6:59:d5:ee:c9:25:29:5a:11:
         ff:d8:de:b1:15:c0:7e:58:1a:aa:e6:55:a6:7e:18:fe:08:4a:
         e6:ea:ab:f7:05:ad:3a:03:2e:25:66:31:9f:52:70:7a:45:e9:
         4e:07:c9:96:37:38:e7:f9:f9:d3:29:60:85:da:61:96:f3:4a:
         99:4c:f3:15:22:28:a7:ad:ae:6f:9d:fd:54:ed:d8:d4:18:37:
         82:9a:6a:9d:50:3c:3b:62:cf:c3:de:49:aa:b6:a7:b1:b9:22:
         67:27:8d:dc:b1:69:b0:d4:9c:92:6f:2e:3d:a2:d9:07:c7:3f:
         27:56:c5:d3:be:e8:6a:cf:60:25:48:a8:7e:9b:e4:42:62:98:
         dc:96:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:32 2025 by rpki-client