Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          2DcDIJcguNBT8D1+OohqQUFggVqfe4MNWm3DSf1ZOa8=
Subject key identifier:   6F:12:97:9C:8E:73:58:25:42:3E:6B:C1:13:CF:E2:07:03:74:0F:AE
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          04
Signing time:             Mon 03 Nov 2025 08:05:38 +0000
Manifest this update:     Mon 03 Nov 2025 08:05:38 +0000
Manifest next update:     Mon 10 Nov 2025 08:05:38 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: e4Dov/MrM3LZa0j9NHPeahE4/KRh7LbsB9somPdvcHI=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: b+1hqemSQst2M7DCyOrAvb7h4SpsImJMoRs35hPQsyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 08:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: Nov  3 08:05:38 2025 GMT
            Not After : Nov 10 08:05:38 2025 GMT
        Subject: CN=69086252-dbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:4e:c7:e6:c3:31:e3:f8:25:ab:c7:ed:a3:
                    e7:38:4b:17:bd:df:f4:b9:e8:ca:ff:d8:9f:87:c9:
                    81:94:cb:ca:f1:11:6f:bf:82:9e:2d:e5:0a:89:0f:
                    4f:7b:40:9c:36:d9:f8:5f:61:02:3a:40:d4:9b:fa:
                    4f:95:5d:11:a0:d0:67:2b:80:43:d8:c2:97:f5:80:
                    f9:bd:57:ae:85:75:26:28:8e:32:f4:b1:59:cf:97:
                    df:3a:66:80:6b:e9:d4:9b:05:bd:f2:81:2d:19:44:
                    da:2b:d1:73:a7:be:1d:07:e5:b6:8a:fc:57:cf:52:
                    d8:7e:6a:94:f2:57:23:fd:03:2a:02:76:da:2c:0e:
                    a0:d5:d0:8d:9b:eb:18:87:fa:b8:23:01:99:29:fc:
                    c1:36:06:01:da:dd:8e:16:a4:49:7c:6f:7e:15:18:
                    d9:2e:5e:f6:fc:75:f1:5a:30:56:cd:02:4e:e3:1f:
                    49:3a:2b:26:77:67:6a:11:cb:c1:a8:b8:86:2f:7b:
                    05:82:95:1f:a0:a7:9e:da:06:d7:99:64:28:57:9c:
                    b1:81:1e:36:a0:43:00:3b:33:b3:a7:60:5e:24:3d:
                    24:f3:df:7a:0a:56:77:a5:24:a7:e4:2d:23:3a:6b:
                    02:8a:e3:6e:60:63:76:59:b8:7c:e4:87:bb:fe:41:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:97:9C:8E:73:58:25:42:3E:6B:C1:13:CF:E2:07:03:74:0F:AE
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:be:5e:c5:e6:84:e0:99:7c:1c:eb:10:c3:93:fb:e9:37:5b:
         d9:f9:8e:9a:d8:29:40:80:71:83:b7:f8:46:d3:1d:87:30:d2:
         eb:61:de:11:d0:0f:45:1e:5c:ff:b2:a9:de:fb:88:28:61:60:
         21:cc:e5:b6:8a:80:fd:0b:ef:e6:45:98:a0:44:1d:56:3b:71:
         d3:dc:18:d0:6a:ca:51:a1:7f:ec:d8:95:b1:4d:7b:11:aa:41:
         fe:db:59:17:f6:58:be:36:e6:69:b6:94:31:ac:f4:2d:1e:8e:
         c6:d0:f5:24:32:43:a5:66:43:76:c3:31:99:0f:a8:95:20:b7:
         54:6c:40:52:9a:43:13:ab:16:f6:67:60:97:40:d0:fe:b9:9e:
         cb:da:50:f4:f6:1d:59:1c:35:f0:d4:aa:eb:f9:29:52:a3:ba:
         e3:fe:1d:b8:e0:27:95:b2:c0:32:1d:c3:5e:84:ff:64:2a:d7:
         7d:9b:a7:5e:a1:42:87:55:11:7e:1a:d1:49:21:16:01:7f:8c:
         ad:6c:f2:38:d5:d5:d7:84:21:da:65:79:81:e4:8c:c1:44:fd:
         23:d1:73:3a:16:53:59:25:6d:1b:52:55:e8:1d:d5:a5:87:fa:
         10:21:08:ef:62:45:97:fa:a6:f5:26:c7:eb:64:0f:b4:89:cb:
         22:38:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:48 2025 by rpki-client