Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
File:                     EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json)
Hash identifier:          ovHLHbM8QdvYnFpaxq653VJzczdMfmGvEdhhwd7lqEk=
Subject key identifier:   A1:82:F8:3B:63:26:9B:7B:63:40:B0:EB:45:66:27:A8:3B:43:B5:05
Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
Certificate issuer:       /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
Manifest number:          0211
Signing time:             Wed 05 Nov 2025 02:22:30 +0000
Manifest this update:     Wed 05 Nov 2025 02:22:29 +0000
Manifest next update:     Wed 12 Nov 2025 02:22:29 +0000
Files and hashes:         1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: tZSWUni+sj6dmSfrFRGCUYJB1gIPy/YHJImOWdXKdLM=)
                          2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: IC3AfPJAu9lJ+ZRFCon08xXeYgQkKIdq6UvBnBDHiaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
        Validity
            Not Before: Nov  5 02:22:29 2025 GMT
            Not After : Nov 12 02:22:29 2025 GMT
        Subject: CN=690ab4e5-203d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:b7:d1:98:73:26:d1:e1:09:62:9c:fc:32:
                    77:29:d1:66:52:28:d4:cd:0d:d7:7c:9a:2d:19:0f:
                    ab:c6:cd:19:1e:f4:40:01:e5:04:5f:2e:fb:fd:77:
                    84:4c:81:eb:59:f6:25:66:d0:d1:c3:21:ef:a6:f7:
                    54:9e:45:14:fb:04:f0:b3:6f:0e:8a:6f:27:a8:e0:
                    d8:e4:6e:30:30:f8:1b:8f:27:40:d2:8e:4e:69:a3:
                    77:07:55:f5:ff:f0:a1:44:78:e8:1f:f9:11:a6:04:
                    6e:a9:f0:d5:ed:3a:d2:e0:d0:88:f4:1f:71:1b:78:
                    c4:ab:73:db:d2:00:a8:75:90:08:c2:a9:e3:6e:63:
                    4f:f0:29:83:e2:95:58:c0:73:38:80:f1:46:a8:c4:
                    a9:44:5e:cf:d1:d9:fb:02:89:c7:50:39:e9:49:f8:
                    25:f5:5c:21:78:ca:ae:45:c4:29:18:96:10:27:7e:
                    a2:47:7b:d5:5e:6e:bd:71:9d:32:da:2e:ab:5b:4d:
                    a6:37:8b:d0:87:54:d7:4e:81:43:4c:e8:65:01:1b:
                    66:ce:0a:9d:3e:e7:63:e9:3e:6f:b4:66:35:45:cb:
                    da:09:31:ee:b7:01:94:35:a4:f9:e2:c1:f3:32:38:
                    56:40:ed:f7:b1:6b:ad:0a:29:80:49:00:77:0d:df:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:82:F8:3B:63:26:9B:7B:63:40:B0:EB:45:66:27:A8:3B:43:B5:05
            X509v3 Authority Key Identifier:
                keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:3b:9d:1a:b2:2f:5f:7e:70:3c:3b:3c:8f:77:b8:ca:75:
         9b:a6:18:db:a1:73:20:98:24:24:33:b0:77:45:b8:b5:83:2f:
         2b:51:2f:98:d1:56:4e:98:8c:06:31:17:16:65:87:22:69:94:
         a2:c3:ac:90:4a:20:4b:37:31:e8:2c:9e:e2:13:81:e9:72:07:
         d4:60:f9:14:2b:dc:7f:1f:cd:f3:e2:ff:72:07:76:81:19:57:
         12:26:8a:73:0c:c0:90:a7:3c:f2:27:60:6f:a5:87:36:76:29:
         b6:ee:2e:26:27:83:1a:3b:a0:ea:4a:19:50:9a:c2:0c:e3:22:
         19:c7:74:7c:62:c2:fa:f7:26:1c:55:a4:3b:19:66:6c:ed:be:
         a1:ae:82:61:3a:5d:bc:f9:25:7f:b6:d8:6f:b6:a2:a1:ef:db:
         a3:98:57:d9:56:23:b6:06:be:cd:c2:9d:30:49:dc:fc:2c:39:
         f8:0c:ee:09:e3:53:ae:68:ae:f6:ee:86:5e:09:bf:50:e0:20:
         09:03:3c:1b:84:d6:d7:2e:9c:a9:fc:4c:67:e6:1a:58:d4:59:
         bf:4e:f6:6f:fb:f8:07:ff:8f:3d:65:9d:30:c7:4e:47:88:a9:
         57:e8:f2:58:dc:e3:ef:48:87:05:cb:33:65:34:aa:5c:b2:e9:
         92:7b:44:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURBMjYxMTAvBgNVBAUTKDExQUMzMzY3OEQxODMzM0NGRUJENDk4OTJCNTY4OTlF
MjdFQTYzNDgwHhcNMjUxMTA1MDIyMjI5WhcNMjUxMTEyMDIyMjI5WjAYMRYwFAYD
VQQDEw02OTBhYjRlNS0yMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA48W30ZhzJtHhCWKc/DJ3KdFmUijUzQ3XfJotGQ+rxs0ZHvRAAeUEXy77/XeE
TIHrWfYlZtDRwyHvpvdUnkUU+wTws28Oim8nqODY5G4wMPgbjydA0o5OaaN3B1X1
//ChRHjoH/kRpgRuqfDV7TrS4NCI9B9xG3jEq3Pb0gCodZAIwqnjbmNP8CmD4pVY
wHM4gPFGqMSpRF7P0dn7AonHUDnpSfgl9VwheMquRcQpGJYQJ36iR3vVXm69cZ0y
2i6rW02mN4vQh1TXToFDTOhlARtmzgqdPudj6T5vtGY1RcvaCTHutwGUNaT54sHz
MjhWQO33sWutCimASQB3Dd+GuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGC+Dtj
Jpt7Y0Cw60VmJ6g7Q7UFMB8GA1UdIwQYMBaAFBGsM2eNGDM8/r1JiStWiZ4n6mNI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi85QjA3MjBBNDhG
RUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16ei12VW1KSzFhSm5pZnFZ
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Vhd3paNDBZTXp6LXZVbUpLMWFKbmlmcVkwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REEyNi85QjA3MjBBNDhGRUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16
ei12VW1KSzFhSm5pZnFZMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtNjudGrIvX35wPDs8j3e4ynWbphjboXMgmCQkM7B3Rbi1gy8rUS+Y
0VZOmIwGMRcWZYciaZSiw6yQSiBLNzHoLJ7iE4HpcgfUYPkUK9x/H83z4v9yB3aB
GVcSJopzDMCQpzzyJ2BvpYc2dim27i4mJ4MaO6DqShlQmsIM4yIZx3R8YsL69yYc
VaQ7GWZs7b6hroJhOl28+SV/tthvtqKh79ujmFfZViO2Br7Nwp0wSdz8LDn4DO4J
41OuaK727oZeCb9Q4CAJAzwbhNbXLpyp/Exn5hpY1Fm/TvZv+/gH/489ZZ0wx05H
iKlX6PJY3OPvSIcFyzNlNKpcsumSe0Ti
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:05 2025 by rpki-client