Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          BozDIM6ynySU0372dH6FZuc+IJqnpXw0OFb7zyK53zs=
Subject key identifier:   78:6C:32:E3:AC:89:EF:F3:B4:90:69:AB:F1:C2:0D:AC:FC:D8:E1:D4
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       3537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          3508
Signing time:             Tue 04 Nov 2025 14:34:10 +0000
Manifest this update:     Tue 04 Nov 2025 14:34:09 +0000
Manifest next update:     Tue 11 Nov 2025 14:34:09 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: Yer2fmvEYrCXBXELhR6ct2CiZPpHYiPUMMjYU4UTBWc=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: CUUb/coZVwybMNB3Q6DnZxhNxSXx7mieErXaIHIRyww=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: sRvMLmzA3faCvCgnj9Kc1Nyq/athaxPg1qdQG6qTSjA=)
                          4: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: pLIkppbdFI2Dvba2mWRCPANXKzDe4Q3IfvnPWtwGOsc=)
                          5: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: gkYrWkhbDnSZnPzaW3pf3edvz0FUTHjNjGt5hZNgUcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Nov  4 14:34:09 2025 GMT
            Not After : Nov 11 14:34:09 2025 GMT
        Subject: CN=690a0ee2-7516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:30:5c:0e:b6:92:cc:e7:a5:33:f2:07:c0:
                    0e:97:0a:d2:c0:1b:1f:d6:e1:80:19:fa:de:3b:b6:
                    da:cb:ca:81:43:25:0b:58:96:3e:e3:fd:ce:3d:f6:
                    5c:4d:7d:c8:4c:1e:b4:a3:83:3f:26:6c:bf:81:f1:
                    71:39:94:8a:3c:d4:f3:39:42:6e:58:95:2d:16:ca:
                    34:6d:e8:c5:c7:ca:7f:20:ba:48:90:75:ab:3b:8e:
                    9d:7a:42:65:f7:01:b8:af:49:86:ec:4d:e9:1e:37:
                    35:bf:3f:d8:d8:06:51:75:36:11:49:5b:5f:7f:70:
                    c3:a7:d3:e7:32:01:15:98:eb:15:fa:f0:15:39:03:
                    57:9e:dd:25:6c:45:0c:f4:07:c2:6d:96:59:f4:49:
                    54:38:8f:db:11:a2:c3:34:5e:33:3d:3a:5f:a8:fe:
                    65:92:26:44:ff:b8:68:a4:2e:16:54:d8:24:30:54:
                    34:52:46:11:97:87:72:11:0c:a6:93:5b:40:02:11:
                    e5:56:2e:88:36:d4:ff:05:5d:f5:ec:d6:d6:0b:d2:
                    2c:ad:95:24:9f:39:65:ff:bc:89:30:86:19:47:f7:
                    82:32:e5:49:26:bc:5f:02:36:4d:ec:ec:9c:8e:b4:
                    00:e8:64:78:57:cf:b3:4a:0e:d5:eb:fb:21:41:5a:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:32:E3:AC:89:EF:F3:B4:90:69:AB:F1:C2:0D:AC:FC:D8:E1:D4
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:55:81:ea:1b:49:48:a4:c8:ef:48:1d:c4:af:da:d1:26:
         f3:85:f9:44:9b:3b:07:ae:5b:53:77:2d:92:cd:f9:4b:a9:81:
         52:96:86:51:48:d7:e7:94:6f:f0:60:40:97:bd:92:67:74:de:
         b4:a3:37:bf:50:65:f6:48:54:2b:31:8d:87:9a:04:c8:1c:64:
         a3:4c:ca:f0:b9:60:b8:36:78:42:38:8c:65:84:6b:fc:89:bb:
         4c:3c:71:18:2c:5b:e5:58:78:b0:37:72:b7:5d:06:7a:bf:35:
         c9:01:d9:b3:af:01:fd:8a:e1:92:95:6d:2f:a5:a3:eb:d2:18:
         e8:eb:f9:bd:ef:4d:a0:5b:e8:43:ed:5f:ff:45:89:ed:94:33:
         4e:b8:53:28:40:c8:a4:69:51:5d:93:56:c5:ef:79:7f:f1:2e:
         0f:4f:9e:91:2d:d0:4d:a4:71:ee:a2:65:22:17:9d:86:a0:ef:
         bc:dc:08:c5:2c:34:6a:ee:aa:c1:4c:a1:f5:23:16:cb:9b:9b:
         c2:27:d4:4e:dd:16:c1:9e:f3:73:48:bf:90:2e:44:84:84:db:
         37:75:9f:e3:c6:31:68:e5:63:0b:e5:f9:83:d3:d7:cc:aa:5d:
         12:93:0d:be:09:82:18:c3:19:85:21:74:84:e9:4a:fa:7f:33:
         74:f7:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:42 2025 by rpki-client