Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File:                     -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier:          vZsElSLl6UIgUi9Y36tgsc+LiRoGZw25KE1lPEdbsO0=
Subject key identifier:   CA:E0:79:4E:A0:62:CE:D3:36:6E:39:40:EE:2A:5C:3F:7D:6A:59:14
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       0307
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number:          02F8
Signing time:             Mon 03 Nov 2025 01:11:48 +0000
Manifest this update:     Mon 03 Nov 2025 01:11:47 +0000
Manifest next update:     Mon 10 Nov 2025 01:11:47 +0000
Files and hashes:         1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: BSVw0mfUumpTg4jWqfd9YJvcUlLWHzrSQ56SSP8vazo=)
                          2: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=)
                          3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Nov  3 01:11:47 2025 GMT
            Not After : Nov 10 01:11:47 2025 GMT
        Subject: CN=69080153-3655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:f1:c7:62:79:96:5a:ea:4e:b7:08:c2:ec:
                    6c:4f:a8:04:24:99:28:85:ba:e3:e7:8c:a9:67:cd:
                    fc:38:7e:a1:68:28:73:91:2b:70:1a:0b:73:bf:f3:
                    e4:23:4f:13:ea:e2:8a:df:9c:95:5f:43:1c:13:e0:
                    0d:52:2a:b4:a4:5d:1c:a7:68:a1:b4:21:39:07:d4:
                    91:1d:3d:b4:6d:10:7d:a3:70:91:36:32:fa:ae:41:
                    ec:cf:e5:9a:4e:5a:49:aa:a4:d1:61:26:ac:f8:88:
                    dc:1f:ab:48:cd:ee:0b:bf:3a:4e:4c:c1:a9:b2:01:
                    29:e6:d2:29:fe:2e:46:d4:df:60:57:70:d7:84:0a:
                    08:17:a3:3c:d5:7b:a9:da:61:7c:50:88:0f:54:f2:
                    10:b8:db:87:22:58:ac:22:3b:0d:60:78:3f:53:5a:
                    b8:80:91:0c:d1:45:bf:75:40:fd:b1:47:f1:c0:7e:
                    40:7b:b7:12:18:cc:89:02:d4:e5:b2:6d:65:3d:b1:
                    be:55:43:07:af:b0:6c:ca:26:c7:d3:49:1c:52:f3:
                    95:a8:b6:d2:8b:67:ca:e8:a3:81:ed:41:c8:39:2c:
                    53:a1:f1:3d:1b:bd:8a:2e:92:14:74:52:d7:b0:82:
                    eb:af:70:a1:c2:00:bf:b0:5e:21:ba:4f:fd:de:fe:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:79:4E:A0:62:CE:D3:36:6E:39:40:EE:2A:5C:3F:7D:6A:59:14
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:14:8a:a5:aa:04:05:02:f8:99:12:c1:4a:3b:87:29:d6:82:
         d8:99:7c:83:56:31:7f:7f:e5:af:70:93:f4:8c:16:38:74:08:
         17:6b:74:8e:27:3d:a2:d9:a8:00:c3:e1:70:20:f7:b7:5b:9f:
         fd:e2:3a:91:ff:a4:28:be:45:e7:cd:9c:6d:e0:a1:47:97:ab:
         29:ee:01:55:f8:cb:62:62:97:c2:8a:79:39:49:de:a4:70:43:
         e3:3f:fc:61:33:65:a1:9f:0f:bd:d7:f7:76:ff:e4:4c:29:c9:
         59:ed:25:7b:d0:83:b6:64:90:c7:ad:6e:15:58:d1:8c:91:82:
         de:e4:74:ea:84:a8:6c:5e:5c:ef:dd:4e:f9:56:24:43:e0:ef:
         da:de:0c:d0:b5:de:8c:9c:93:6b:d3:06:7c:b2:5c:0a:52:84:
         ce:a5:8b:ff:5b:23:45:2c:79:1c:9c:8e:fa:07:f2:1b:4e:f8:
         f9:c1:c6:0c:41:00:63:67:d2:61:50:9e:ae:3e:3c:d1:b4:c8:
         9b:26:52:ba:55:04:98:50:3c:f2:1c:50:95:88:52:78:76:79:
         a4:23:15:54:02:cc:02:e8:f1:f4:aa:e9:76:9b:e5:a6:6c:98:
         08:90:69:a7:90:d3:6b:26:c1:cb:ba:be:3e:fd:df:2f:5b:02:
         f3:02:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:06:14 2025 by rpki-client