Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File:                     eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier:          8D1Q9ecDpAEd0aJKvtTLd4kMm3eZhPmuS0Eil5HN/yg=
Subject key identifier:   A6:81:4F:66:32:C9:1A:6A:C0:F4:1F:7C:2C:08:C0:8C:87:FA:E8:79
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number:          01E1
Signing time:             Wed 05 Nov 2025 02:50:17 +0000
Manifest this update:     Wed 05 Nov 2025 02:50:17 +0000
Manifest next update:     Wed 12 Nov 2025 02:50:17 +0000
Files and hashes:         1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: obWYJagdqTz1MtHtEMLUlFQRCmcJM6QeJLrZvIuB4e0=)
                          2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: xpJQj3FLnsfznpdCwuN3h/+cdNnHyzN0YqXddFix6QE=)
                          3: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: 2GHJ1eE18Gw1U3Nhz428VPqQLi1QexDRz0jLOu9pd2U=)
                          4: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: vA9puEUvhfG2n8dLVkfh+qkvE8ijdTRvg0CgqQT4yNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: Nov  5 02:50:17 2025 GMT
            Not After : Nov 12 02:50:17 2025 GMT
        Subject: CN=690abb69-7019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:71:15:a2:2d:b8:da:65:fa:ff:c6:b1:b7:
                    ae:7a:dd:87:c0:d0:f0:33:32:91:ea:1b:14:eb:a9:
                    98:64:32:de:6a:dd:4a:8e:73:c3:da:68:b9:db:9c:
                    d6:75:7b:47:ae:ba:d9:c5:dd:e8:fa:51:23:fa:85:
                    96:a3:10:a0:ea:50:61:bc:dc:0c:f3:24:12:9e:f0:
                    2f:83:74:10:b1:71:01:8d:80:16:10:0c:2f:60:29:
                    f9:2c:31:c2:8a:c6:4f:b9:03:69:67:a5:90:12:a1:
                    ea:12:0b:4f:6a:d8:3b:e1:dc:22:95:e2:d1:04:aa:
                    6a:89:b6:ba:24:1b:25:d5:b8:40:3a:16:be:6c:b1:
                    68:9d:7d:f5:f7:10:0e:9c:03:36:ad:51:06:8a:be:
                    af:e2:9d:0a:51:a6:29:63:23:11:7a:9b:cb:bd:d3:
                    eb:bb:a2:76:04:90:fb:2d:e0:39:61:98:bf:25:27:
                    4f:d4:f3:43:8b:c2:61:75:ee:09:a5:a5:8e:1a:7e:
                    c3:34:3e:58:f1:86:f9:81:67:d1:a2:b1:1d:97:43:
                    4f:f6:5c:b5:96:a5:e6:72:b1:b1:cf:2c:85:31:48:
                    f6:6c:7c:b8:56:e2:f0:9b:12:25:b6:c0:36:64:77:
                    53:92:3a:7c:5b:2e:16:f4:89:1b:14:b2:8f:7e:55:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:4F:66:32:C9:1A:6A:C0:F4:1F:7C:2C:08:C0:8C:87:FA:E8:79
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:be:ae:b6:f4:8a:f1:96:51:32:0f:df:51:e2:7d:9b:d6:4d:
         4e:67:9c:66:6b:bb:61:4f:97:1c:e6:a3:50:f8:17:d8:a8:95:
         53:65:07:73:ed:a0:6a:cd:f0:3e:35:61:89:7b:d1:2d:eb:bf:
         48:a1:19:fa:37:b6:76:25:50:cd:04:dc:0f:17:37:bb:e7:95:
         4d:63:e2:71:c1:ff:d7:0c:f5:80:32:ef:af:02:45:ac:b8:78:
         13:0a:bc:71:b3:9a:6f:bd:86:87:7d:e9:2b:4a:1e:be:a3:66:
         bf:e4:1c:9d:a7:22:3c:aa:7d:98:20:64:14:44:4d:af:3a:fc:
         34:44:7f:0b:e1:e3:28:0c:24:fe:b0:73:c3:ee:74:ce:4f:a1:
         1d:64:9c:a6:cf:38:e0:3f:ac:79:3a:9a:fd:ee:47:33:5e:cb:
         31:51:a1:86:c5:3c:fa:de:82:cc:ff:76:6b:40:cd:bf:7e:92:
         fd:7a:8d:d7:b7:1b:09:a3:5a:7b:f6:34:fd:8b:9d:f7:6a:bb:
         be:c4:18:72:e5:be:34:bc:e7:43:ec:fe:db:61:ae:61:00:64:
         8a:bf:a7:02:38:a5:4b:c2:84:06:63:b5:43:9f:93:46:6c:7a:
         ee:e3:91:6d:c5:15:aa:61:3b:cd:e7:f2:6e:23:32:09:49:50:
         47:8b:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:24 2025 by rpki-client