Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File:                     EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier:          vD1kT8N3wwhV0YRxEIIqa0kED0lxreYnugaorLZrd8I=
Subject key identifier:   FF:C7:C5:24:F4:31:17:8A:DF:F0:B6:BC:FF:76:30:AF:BE:7C:7A:20
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number:          06AF
Signing time:             Tue 28 Oct 2025 22:01:09 +0000
Manifest this update:     Tue 28 Oct 2025 22:01:08 +0000
Manifest next update:     Tue 04 Nov 2025 22:01:08 +0000
Files and hashes:         1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: 09xCpml2aM0CbhnlVWFS13gUZHUCUPBNHO/tZh/vOik=)
                          2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=)
                          3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Nov 2025 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Oct 28 22:01:08 2025 GMT
            Not After : Nov  4 22:01:08 2025 GMT
        Subject: CN=69013d24-5229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:21:10:a3:15:69:aa:ac:db:7b:9f:47:a1:
                    15:91:c9:f6:ce:ec:92:8f:11:07:4c:b9:42:7c:5a:
                    36:c1:97:7e:13:ba:c0:3c:d8:ba:05:e5:ae:ed:e6:
                    77:13:3f:c4:98:d7:b7:86:17:ff:5e:4c:50:e2:d0:
                    fb:c5:2b:14:1d:0a:cd:f1:ae:7e:9e:b1:f0:d3:5b:
                    7d:e4:14:0e:15:ce:ce:e0:3d:94:11:a2:0d:bf:97:
                    e9:50:89:61:88:93:af:02:71:d1:f9:e6:37:14:e1:
                    c1:33:9b:ad:53:08:1b:ea:f0:0c:1f:83:0d:2d:ec:
                    aa:3b:c1:e0:13:e0:c0:c8:71:8f:65:86:24:8f:2f:
                    d9:97:49:db:1f:a0:99:03:6e:4d:69:33:aa:0c:4d:
                    ba:52:cb:4a:5a:06:c0:b7:f5:4c:e6:28:71:97:9e:
                    19:bc:da:4c:4b:84:fe:f2:8b:22:52:70:69:cc:69:
                    72:38:52:b0:d8:43:e8:b8:1e:70:20:17:03:52:ff:
                    a5:15:ab:e3:3d:f8:ad:d6:d0:23:d4:41:96:14:12:
                    c5:8a:b8:12:89:cd:80:6c:b5:8c:29:2a:70:c3:15:
                    a5:0a:37:0e:17:4b:22:07:e4:50:34:74:ef:0d:00:
                    ce:c4:b5:eb:13:c5:5f:3f:72:fa:a2:2a:6a:32:be:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:C5:24:F4:31:17:8A:DF:F0:B6:BC:FF:76:30:AF:BE:7C:7A:20
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:09:71:ce:1d:ff:3e:54:cd:16:38:44:cf:67:64:30:12:
         50:13:f9:f4:a7:28:7f:d3:cf:25:1d:d4:97:3b:03:8b:d0:e1:
         47:74:75:fd:bb:43:6a:1e:bf:19:c1:cf:e3:f7:35:1c:65:8f:
         db:6d:03:20:ed:07:1f:54:df:5d:33:c5:66:a9:0b:4f:40:0c:
         cd:5f:02:3e:f6:86:79:94:61:b1:34:14:c4:fe:fc:77:5f:fa:
         a5:53:93:f2:ba:be:54:a9:87:8e:7d:96:64:da:36:5e:33:11:
         5b:58:43:f0:25:4e:95:50:e5:af:3a:d4:76:f6:aa:89:c6:34:
         31:91:73:60:a5:1a:4c:67:d7:e5:a6:1c:05:c7:2c:43:d6:f4:
         78:48:a5:0e:9b:25:44:ef:36:41:1b:a2:bc:9e:45:d9:80:1d:
         62:b7:1e:60:bc:11:64:e5:f4:51:3f:77:f4:77:7a:db:0d:26:
         c9:95:0a:78:78:26:67:8b:c6:72:27:23:c0:7f:e9:34:2d:14:
         77:21:77:57:3c:86:be:1c:3e:57:1a:46:a0:a6:8d:5e:27:32:
         02:6a:73:1b:2a:f6:61:03:fc:42:d9:b1:10:36:27:49:60:85:
         04:ab:a9:5e:f1:5f:cf:7b:6b:6b:c8:20:36:79:0b:17:e5:f9:
         79:8c:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:43:23 2025 by rpki-client