Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
File:                     EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json)
Hash identifier:          phuVlEcTl+TXk6SR0Nm+KdadWk14ZBaKyE7COO4olJc=
Subject key identifier:   EB:19:02:F9:14:95:17:FF:05:C0:7F:03:8C:87:71:4C:F0:A9:12:BA
Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4
Certificate issuer:       /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
Manifest number:          45
Signing time:             Mon 03 Nov 2025 07:23:45 +0000
Manifest this update:     Mon 03 Nov 2025 07:23:44 +0000
Manifest next update:     Mon 10 Nov 2025 07:23:44 +0000
Files and hashes:         1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: KHwHqqn+2cxGx3SCRxYM5YYfEXb4e7K+4+KFZUOQaZQ=)
                          2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: wa4TR1fvKETfK3e7ugA2YaJ41gq/9kU5OrG3vVI95Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
        Validity
            Not Before: Nov  3 07:23:44 2025 GMT
            Not After : Nov 10 07:23:44 2025 GMT
        Subject: CN=69085881-c764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:48:ff:7a:cf:df:ce:9a:b7:10:33:ee:fd:
                    9f:e8:9f:f8:99:21:f0:da:f4:ce:e5:e6:45:ca:7b:
                    f7:aa:12:97:31:8f:9c:ce:c0:50:a3:d0:fc:01:3b:
                    17:68:d5:bd:3e:1c:fe:fb:02:3c:97:f0:6f:57:43:
                    6f:c4:78:52:54:49:b1:10:ba:fe:3c:4b:f7:92:fc:
                    28:dc:d8:37:b5:f7:08:85:4f:04:b0:d9:5a:63:11:
                    6f:fa:3b:30:dc:50:69:af:ad:b7:f4:e4:35:aa:10:
                    23:a9:99:10:75:a4:81:87:22:db:82:a2:19:23:94:
                    c4:92:8b:1a:b6:d6:73:93:b9:a2:d5:c5:80:c2:a5:
                    7e:0e:4b:38:2c:b8:cd:76:9a:f8:df:04:e2:c0:38:
                    4c:16:ee:ba:c8:27:db:67:fa:f5:49:14:9b:2c:25:
                    df:07:15:2d:a1:57:52:6f:38:a4:89:a7:cc:3a:00:
                    05:c7:54:f4:c3:22:5b:9c:35:75:63:f0:d5:73:e2:
                    49:ce:43:ae:e1:48:d8:87:bc:90:cc:4f:55:97:db:
                    bf:09:b6:89:1c:a8:fe:c8:43:21:f8:57:49:e9:70:
                    f2:8f:72:66:18:a0:57:4b:3e:f8:2c:ff:a4:81:44:
                    b1:7d:66:c0:6c:07:3e:c8:88:c9:14:39:d0:57:0e:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:19:02:F9:14:95:17:FF:05:C0:7F:03:8C:87:71:4C:F0:A9:12:BA
            X509v3 Authority Key Identifier:
                keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:99:6a:5d:b8:a0:ae:82:67:04:bf:ee:e6:b7:1f:6a:2c:17:
         6d:5d:42:9b:d5:0f:d7:34:bf:ea:52:02:27:8a:7f:fa:11:25:
         ea:95:b4:67:b6:63:e8:9a:08:46:bf:22:78:83:04:74:cd:ee:
         fd:9a:f2:87:c6:ea:14:9e:50:7b:b6:61:90:f8:49:ac:e7:1f:
         12:44:72:85:87:d7:d4:de:58:d7:6d:2f:37:db:f4:bd:89:f0:
         db:a2:b2:03:c2:27:b7:9d:27:b0:d0:13:11:e0:a4:c4:94:3d:
         70:95:62:46:d0:76:df:35:e3:4a:95:ac:7e:0f:a6:9e:65:7e:
         cd:88:88:2e:fb:59:bc:01:9a:4c:a0:a1:79:4a:28:38:20:ef:
         3b:80:9f:0c:0c:ca:38:7b:05:31:7c:fe:b5:9b:9d:7b:20:cd:
         53:e1:dc:cd:57:56:1e:dd:66:d1:ad:34:6e:17:95:e2:c3:74:
         7d:f5:86:2d:95:83:8c:3b:e8:56:b9:e8:7a:2c:8a:92:90:7e:
         c6:52:0e:48:05:40:ef:39:a5:97:ea:88:32:3b:68:cd:c5:b1:
         6f:55:ff:ee:d3:91:9a:94:fb:d0:be:6f:c0:d0:b7:e3:3d:8c:
         15:7a:5e:10:f8:3c:cb:29:c0:c9:8e:bd:bd:5b:b3:a6:9a:20:
         51:67:00:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
ODYxRTExMC8GA1UEBRMoMTIyNkVFMTIyMjkzODMxQjY1MUYxNUI4QkMxRjEwNTVE
QjQyODlDNDAeFw0yNTExMDMwNzIzNDRaFw0yNTExMTAwNzIzNDRaMBgxFjAUBgNV
BAMTDTY5MDg1ODgxLWM3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/lEj/es/fzpq3EDPu/Z/on/iZIfDa9M7l5kXKe/eqEpcxj5zOwFCj0PwBOxdo
1b0+HP77AjyX8G9XQ2/EeFJUSbEQuv48S/eS/Cjc2De19wiFTwSw2VpjEW/6OzDc
UGmvrbf05DWqECOpmRB1pIGHItuCohkjlMSSixq21nOTuaLVxYDCpX4OSzgsuM12
mvjfBOLAOEwW7rrIJ9tn+vVJFJssJd8HFS2hV1JvOKSJp8w6AAXHVPTDIlucNXVj
8NVz4knOQ67hSNiHvJDMT1WX278JtokcqP7IQyH4V0npcPKPcmYYoFdLPvgs/6SB
RLF9ZsBsBz7IiMkUOdBXDplDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6xkC+RSV
F/8FwH8DjIdxTPCpErowHwYDVR0jBBgwFoAUEibuEiKTgxtlHxW4vB8QVdtCicQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NjFFLzQ1Q0VERjQ4NTQx
RTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0bEh4VzR2QjhRVmR0Q2lj
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRWlidUVpS1RneHRsSHhXNHZCOFFWZHRDaWNRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
NjFFLzQ1Q0VERjQ4NTQxRTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0
bEh4VzR2QjhRVmR0Q2ljUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEGZal24oK6CZwS/7ua3H2osF21dQpvVD9c0v+pSAieKf/oRJeqVtGe2
Y+iaCEa/IniDBHTN7v2a8ofG6hSeUHu2YZD4SaznHxJEcoWH19TeWNdtLzfb9L2J
8NuisgPCJ7edJ7DQExHgpMSUPXCVYkbQdt8140qVrH4Ppp5lfs2IiC77WbwBmkyg
oXlKKDgg7zuAnwwMyjh7BTF8/rWbnXsgzVPh3M1XVh7dZtGtNG4XleLDdH31hi2V
g4w76Fa56HosipKQfsZSDkgFQO85pZfqiDI7aM3FsW9V/+7TkZqU+9C+b8DQt+M9
jBV6XhD4PMspwMmOvb1bs6aaIFFnABo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:33 2025 by rpki-client