Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
File:                     e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json)
Hash identifier:          0tbSNwjyYOgTzhQyept6+WrJABOvUACEmLb/9iJxzJ0=
Subject key identifier:   FB:0B:2F:14:4A:A4:E5:DB:9A:70:2F:04:B6:78:27:C0:4B:3D:9D:8E
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       0382
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
Manifest number:          036C
Signing time:             Wed 05 Nov 2025 01:15:41 +0000
Manifest this update:     Wed 05 Nov 2025 01:15:40 +0000
Manifest next update:     Wed 12 Nov 2025 01:15:40 +0000
Files and hashes:         1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: OoFTkYd6KFyzjV9sAAzjdXMqw6JxczU00qp9QcNOhd8=)
                          2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: +cjSEjrCbRsWjKbOnlHA21txqQ/09N0BEt4ab1fE4as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Nov  5 01:15:40 2025 GMT
            Not After : Nov 12 01:15:40 2025 GMT
        Subject: CN=690aa53c-5ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:d8:88:3b:4d:1c:47:87:83:aa:df:5d:92:
                    ce:e9:b2:a5:4e:a7:33:6c:c2:1e:e3:5a:65:8d:ea:
                    71:44:bc:d5:06:55:8f:22:09:42:2a:b3:c3:f4:b2:
                    6c:1f:93:e4:71:ce:d4:ad:4f:c3:f9:c1:a9:6d:e4:
                    44:ec:41:d4:bd:11:e5:ea:5f:c0:59:aa:e2:a0:af:
                    ef:2d:5a:bf:5a:d6:53:f8:f8:17:68:b1:a5:d5:8d:
                    10:39:bc:5d:bc:86:db:fc:77:71:e1:c0:77:08:61:
                    4e:a1:ec:c9:f7:8a:22:eb:a0:f6:f6:b5:1d:a6:b1:
                    9a:ae:75:35:e5:10:2c:65:e4:30:f9:0f:d6:e7:0a:
                    b8:b1:a5:63:df:fa:ff:37:8c:19:8e:8e:4b:4b:19:
                    67:3f:66:4a:ae:37:7a:77:dc:c2:33:b1:06:4f:1a:
                    e6:c3:cb:75:f5:0d:b2:97:53:47:60:f2:d5:39:50:
                    09:40:33:15:fe:a7:5c:1a:ad:65:ba:74:05:70:63:
                    97:dd:1f:57:ae:5d:00:8c:5b:bf:d2:7b:d5:c2:df:
                    fd:78:d5:44:2b:94:2c:45:84:f8:3b:c9:9d:b2:b2:
                    c7:47:0b:3c:04:32:8b:22:a1:cb:89:f8:4f:01:69:
                    b4:b5:73:8b:da:86:3f:2d:86:f6:03:cc:ca:e3:72:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0B:2F:14:4A:A4:E5:DB:9A:70:2F:04:B6:78:27:C0:4B:3D:9D:8E
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:9a:9a:5f:55:ab:d9:d2:b8:64:f6:2a:dd:9c:2f:19:2e:
         a5:ce:71:3a:b2:23:58:6b:0e:c6:b7:93:03:a9:7b:0f:a7:d6:
         0d:00:47:b1:11:e1:e7:9b:f9:0d:f0:f5:22:1f:ac:87:0b:26:
         cd:39:d3:06:94:08:1a:8a:ba:af:ec:38:cf:e5:4e:e5:5b:86:
         4a:bd:e0:76:34:e0:70:a5:ca:f3:94:9e:76:79:88:d3:4a:84:
         0d:a4:06:bb:31:16:21:13:c8:cd:f6:37:d3:09:46:28:ec:f3:
         15:96:b4:82:d5:f2:a3:4f:61:9e:0c:a0:4c:57:f2:bc:57:b0:
         f8:15:e3:7a:76:a5:d5:b0:ec:e3:71:95:22:38:4a:4f:c0:6d:
         4e:83:cf:46:c2:33:c4:31:58:32:c8:d8:a3:9a:9b:02:34:3d:
         cf:f6:b4:35:3c:cd:49:b5:5e:92:19:e3:27:09:9c:be:c0:ff:
         b0:ac:36:c4:9d:36:36:ae:92:fc:b3:94:d5:5d:ab:dd:ec:34:
         a1:2d:ce:4b:07:8e:ba:35:5f:ef:96:2b:bb:6e:f8:fe:60:8f:
         96:79:65:42:46:52:09:13:24:76:2e:7d:db:09:75:08:b8:a5:
         5f:ee:95:11:15:a0:80:af:80:57:52:17:48:a4:a8:a2:4f:05:
         fc:c2:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:18 2025 by rpki-client