Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          LrXB0Lh7nXIg7+WneD9/rMHdvJFxECykx7DvsTqKsUA=
Subject key identifier:   34:11:BD:51:8E:E4:FD:E6:48:75:E3:92:72:62:AD:C5:BC:0A:0C:0F
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          AE
Signing time:             Mon 03 Nov 2025 06:08:23 +0000
Manifest this update:     Mon 03 Nov 2025 06:08:22 +0000
Manifest next update:     Mon 10 Nov 2025 06:08:22 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: 1kKTp6NB3BbzOypVfqeOPMdhTI61ZQiiioVdUcWFhwY=)
                          2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=)
                          3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=)
                          4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Nov  3 06:08:22 2025 GMT
            Not After : Nov 10 06:08:22 2025 GMT
        Subject: CN=690846d6-f182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:84:5e:39:54:7e:9d:56:43:3a:2f:50:ac:
                    53:57:24:dd:26:e7:5c:4a:0e:8d:8d:42:85:07:3b:
                    aa:c4:90:af:d3:38:f7:d0:41:c1:bb:11:5b:39:8d:
                    56:ae:07:db:b5:e4:d1:3c:a7:8a:09:18:9c:5c:ba:
                    73:91:c6:6d:25:a1:0b:22:08:c1:dc:a2:a5:02:1c:
                    1e:6c:69:d1:70:d3:d4:3d:55:c9:da:55:95:96:37:
                    ab:85:6b:50:6d:79:8a:d8:58:d4:f8:aa:62:41:53:
                    70:89:a5:e2:47:bb:d8:eb:72:8e:a2:a9:7e:fc:f3:
                    37:75:78:73:82:75:e9:77:1e:a0:90:96:44:f2:84:
                    6b:0e:93:7a:8a:3a:17:bf:71:47:54:d8:e2:e6:bc:
                    9d:53:5d:52:71:5d:32:f7:b8:2b:f5:09:85:c7:af:
                    46:16:96:1f:1f:df:81:d3:47:88:3e:bf:9e:1e:50:
                    e4:28:c9:25:e6:31:3f:79:88:b3:c4:e6:f1:3b:40:
                    6d:31:e3:6e:fd:37:47:06:43:9e:d2:d5:f4:50:45:
                    0b:40:db:b7:7b:e8:cd:3b:70:58:7d:1f:cb:36:21:
                    4e:38:a8:65:8a:35:90:eb:9a:2f:3d:a8:0d:1f:45:
                    b9:26:89:53:8e:a7:db:c8:b1:92:32:f5:1a:2e:7d:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:11:BD:51:8E:E4:FD:E6:48:75:E3:92:72:62:AD:C5:BC:0A:0C:0F
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:62:00:a6:37:7f:b8:a4:b6:ff:24:36:4e:85:cd:08:c4:e3:
         fa:90:8a:96:5b:75:15:8c:a3:5b:22:94:7a:c9:13:dc:30:cf:
         2d:dc:41:50:ea:83:77:8b:74:2a:12:e5:b4:35:b7:57:ef:36:
         64:eb:74:e2:9b:fb:f3:62:6b:1b:00:39:ef:4b:6f:7e:ff:2b:
         49:b6:22:0e:9b:94:4b:6b:71:a7:73:57:a2:5d:c6:49:0c:b5:
         d4:9f:5e:a1:56:f9:4b:30:55:e6:f2:e3:4c:05:7c:ef:c0:49:
         e2:54:d6:77:2b:bb:3a:a5:8a:34:17:c3:b7:23:ef:9f:fb:6e:
         79:61:8f:0b:bb:78:5b:e7:a5:47:70:dd:52:6e:a8:bc:01:66:
         41:9b:b2:2c:45:d1:ba:50:f2:d9:42:43:32:68:6b:ba:65:ab:
         ad:42:1f:42:eb:b2:ee:0c:a3:c5:5e:75:e5:21:12:3a:e8:06:
         d8:fc:bf:72:f7:1e:72:87:e5:d2:7b:a3:37:64:39:75:fe:0a:
         0f:48:61:55:85:1d:84:0c:90:c5:29:67:10:d4:dc:49:6c:f0:
         80:ff:3a:c2:8c:61:8a:01:bf:df:07:6d:c2:0b:ce:40:36:af:
         2b:74:5f:37:94:b6:1c:51:5b:fd:b2:b5:84:63:d2:f4:66:6b:
         7f:93:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:36:08 2025 by rpki-client