Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
File:                     E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json)
Hash identifier:          EJ0ZJ3EflCmvgZlvMlDv20EcfzzXITKv09iis8EgEhk=
Subject key identifier:   0C:E6:B4:1E:49:51:73:8F:5C:A4:A9:25:2D:56:F2:BE:CC:F2:0A:56
Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09
Certificate issuer:       /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
Manifest number:          0236
Signing time:             Mon 03 Nov 2025 01:49:43 +0000
Manifest this update:     Mon 03 Nov 2025 01:49:43 +0000
Manifest next update:     Mon 10 Nov 2025 01:49:43 +0000
Files and hashes:         1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: gpXZZUxrekfvMYqWk3cUafYdjFbDjumz+0/R1Mss4HA=)
                          2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl
                          rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
        Validity
            Not Before: Nov  3 01:49:43 2025 GMT
            Not After : Nov 10 01:49:43 2025 GMT
        Subject: CN=69080a37-098b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:d4:6a:e9:be:cb:f1:06:a5:1e:04:24:39:
                    1c:8e:3c:07:03:6f:f4:48:b1:ae:3b:72:c8:f7:d8:
                    c0:13:06:a4:d3:ec:70:4d:df:e7:a3:8b:00:ea:d1:
                    95:a5:0b:ef:aa:6e:e7:b2:3e:ec:f0:6e:68:e6:49:
                    f6:7a:04:a0:b8:60:1a:0a:ce:af:2a:06:41:b9:f9:
                    8f:1a:ff:36:94:e0:7f:75:6e:23:60:d6:3d:58:03:
                    fb:0f:29:c9:9c:08:f7:c3:77:e6:eb:37:52:f5:9a:
                    bd:00:df:2e:3b:ae:c5:12:11:f8:e6:43:77:05:a3:
                    01:1f:70:a8:a4:39:ce:7c:8c:35:50:ba:5d:e1:c4:
                    46:b9:f2:78:53:3a:96:78:4c:3c:24:ee:57:67:76:
                    aa:cf:a7:ad:ba:11:93:09:3e:aa:4d:24:3b:10:b3:
                    11:42:f3:af:1f:23:8d:2b:ad:75:af:07:c0:bd:e5:
                    36:02:56:8d:47:91:e7:4c:35:75:53:99:79:e6:35:
                    a3:83:a2:b4:17:5b:ab:ac:8f:89:58:05:01:6c:39:
                    7e:94:f5:94:6e:c2:45:7c:4e:ee:e3:3a:40:8d:2e:
                    ae:17:f9:20:f9:58:46:8f:1a:31:a8:21:dd:0b:64:
                    b5:8d:1c:e1:89:13:66:b0:60:03:71:78:f4:ae:d2:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E6:B4:1E:49:51:73:8F:5C:A4:A9:25:2D:56:F2:BE:CC:F2:0A:56
            X509v3 Authority Key Identifier:
                keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:65:68:bf:97:ed:09:10:ec:69:0b:6b:ab:22:ca:b2:6e:96:
         65:94:8e:a9:d2:93:e7:68:f9:da:86:98:8c:44:c1:4a:f0:d8:
         ca:10:ae:69:9a:fc:a7:2c:75:b3:ab:1d:ee:81:e0:79:a1:38:
         17:50:a3:5e:c1:de:72:2f:06:14:d7:cf:10:12:49:e2:e8:ae:
         25:58:d9:07:d9:64:46:f0:65:3f:19:e1:d1:8f:21:05:1a:16:
         61:88:eb:fd:9d:69:20:18:e4:3f:6f:73:c0:af:eb:75:d8:d8:
         27:76:69:62:73:83:d7:41:d1:47:25:6c:20:46:29:b4:3e:b5:
         16:60:bc:8d:ec:da:4e:b0:46:2f:d7:9e:e8:ed:48:4c:5b:30:
         52:5e:8b:5b:cd:9f:69:3d:da:50:73:68:59:96:63:ed:f4:a0:
         4a:0d:7b:f8:9c:0f:87:7c:d7:36:0f:0a:49:f1:37:0a:43:2f:
         53:63:67:54:fd:87:30:d2:da:d1:77:05:65:fc:5e:b8:a5:54:
         89:0a:f3:0a:90:81:9b:b7:6d:3f:3a:bd:ce:38:d1:51:76:02:
         15:be:70:a3:59:5c:01:c8:24:c7:07:f7:6e:af:09:29:85:51:
         8b:be:2b:cd:c2:9e:a9:c1:8b:0c:b0:d5:f1:c2:e4:fd:ca:5a:
         af:f3:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:07:38 2025 by rpki-client