Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json)
Hash identifier:          xYoCvdTPYzRXqar4IeE2OJApJERfQewdG2ifSyObxTM=
Subject key identifier:   3C:40:59:C7:3B:D3:3C:2C:2B:63:65:03:1A:7D:E9:73:A1:35:24:AB
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
Manifest number:          B6
Signing time:             Mon 03 Nov 2025 06:01:27 +0000
Manifest this update:     Mon 03 Nov 2025 06:01:27 +0000
Manifest next update:     Mon 10 Nov 2025 06:01:27 +0000
Files and hashes:         1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: zd66aXo10dFN0nbs5tuDyUI4v2qtx0b8M7UUxWigiRo=)
                          2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Validity
            Not Before: Nov  3 06:01:27 2025 GMT
            Not After : Nov 10 06:01:27 2025 GMT
        Subject: CN=69084537-1c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:83:24:47:22:b1:09:6c:60:73:4a:63:0d:
                    7e:1d:23:da:14:ce:1b:2d:02:5e:29:3f:11:f1:40:
                    6a:21:3a:fb:5c:a2:f5:35:8b:92:27:16:49:f9:1e:
                    9d:e6:dc:3a:af:b6:57:04:3c:10:a6:84:b9:9e:ce:
                    f2:07:4e:c9:2f:ee:3c:7e:7c:37:f4:44:18:df:8d:
                    e8:40:5c:c6:ea:a2:dd:ff:14:d6:f9:41:f8:11:48:
                    5b:0c:c1:e6:86:4e:0e:54:44:2e:72:d2:4b:88:95:
                    bd:13:16:99:eb:94:7e:84:a5:da:8c:1a:46:df:51:
                    d8:53:8c:c2:b9:21:ee:21:40:c0:42:f2:d0:1a:51:
                    fb:36:fb:4a:65:9a:8f:29:7f:e1:d2:34:53:86:d4:
                    92:34:ae:61:70:a9:db:f7:a9:c1:be:21:56:99:5e:
                    60:4d:ed:31:23:d6:ef:74:4c:1a:fa:d2:d1:a8:bc:
                    53:44:67:45:85:37:93:15:51:2a:b0:c0:0c:ba:3e:
                    cc:b4:09:16:01:74:86:bf:29:43:99:a2:51:2f:51:
                    f9:b8:07:d4:ed:a9:6b:b9:0d:f2:38:6d:39:42:12:
                    94:85:d5:6e:35:05:e1:a2:eb:83:60:cf:07:4c:fb:
                    1e:7d:a8:6b:c3:19:ac:93:3a:11:18:9d:37:13:7b:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:40:59:C7:3B:D3:3C:2C:2B:63:65:03:1A:7D:E9:73:A1:35:24:AB
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:49:da:d3:9e:cd:a3:85:41:60:2e:21:b2:ac:fa:1b:bd:
         f1:2c:10:12:57:85:07:23:76:83:e1:e1:89:36:79:a2:60:10:
         44:82:ee:ca:43:19:ee:ae:7e:33:9a:66:b3:8e:31:59:ed:2b:
         3a:ce:ad:73:ee:9e:cd:3f:9a:a0:a2:c9:8b:cc:49:44:19:3b:
         5a:00:ca:02:af:b1:1b:0f:c0:e7:33:9f:4f:64:5b:9d:8f:7f:
         c7:d5:01:45:59:f1:37:c7:83:c7:a6:eb:2b:aa:a7:6c:2b:4a:
         c7:7c:9c:3f:46:c1:04:13:df:62:d7:14:d0:47:2d:96:a2:c5:
         3b:f6:f5:7a:11:fb:8b:00:b4:fa:b6:d8:53:98:e9:de:15:f3:
         cb:bc:cd:4c:4f:c5:45:03:fd:9e:d1:8a:fe:8b:ca:66:20:d4:
         9f:fd:fd:79:e0:8b:c2:b1:6d:75:f4:2e:cc:40:6a:9f:a3:b2:
         4c:81:b4:06:28:c9:47:13:34:05:2c:c0:57:bd:07:b9:b9:8e:
         b1:6b:64:b6:d6:20:e9:3c:b4:84:a7:08:2c:0a:d9:e6:82:0c:
         1f:ed:54:40:47:9e:11:1a:01:27:2f:e4:b6:5b:52:da:6d:39:
         bb:ef:30:b8:3d:c9:ff:54:35:f0:cb:39:64:8a:66:42:1c:8e:
         f7:4a:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:22:39 2025 by rpki-client