Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
File:                     6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json)
Hash identifier:          0nkMmdlHrkgZIKJ40h/JlH3fbnedCz+bCeet9BF3BEA=
Subject key identifier:   EC:BF:82:BB:53:47:F1:CA:BE:85:AD:EF:80:8C:F9:3B:FF:7C:B0:6A
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Certificate issuer:       /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
Manifest number:          E3
Signing time:             Wed 05 Nov 2025 05:38:15 +0000
Manifest this update:     Wed 05 Nov 2025 05:38:15 +0000
Manifest next update:     Wed 12 Nov 2025 05:38:15 +0000
Files and hashes:         1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: 7eAniD8UJmHIBibGuYZJrU1xfE3X+tRm+HYy4H+alGQ=)
                          2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W86JdspaifMIg33JDT0CjRhdsWrcUOOO2qpo/ordp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
                          rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
        Validity
            Not Before: Nov  5 05:38:15 2025 GMT
            Not After : Nov 12 05:38:15 2025 GMT
        Subject: CN=690ae2c7-3dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:28:be:1e:db:78:b6:78:45:89:1e:14:96:
                    e9:89:03:cb:8d:4b:50:07:25:d5:7a:2b:08:34:08:
                    49:ed:77:25:b7:a6:5f:15:77:80:95:2e:3e:c0:2f:
                    66:9a:a2:3b:de:f0:b6:6f:41:6a:34:9a:60:3f:69:
                    b4:2b:b0:aa:bc:5f:bf:69:d9:18:2d:ce:1f:0c:6e:
                    ed:ee:bd:b2:32:13:bc:b6:69:1e:78:0d:36:86:7e:
                    d2:64:c5:b3:91:a7:e8:2d:67:5a:bc:75:cf:16:f4:
                    e4:79:5e:23:15:46:3b:dc:8e:4b:3c:d2:a7:9a:4b:
                    86:92:56:73:6f:1b:53:4d:eb:cc:82:dc:6f:94:36:
                    a3:ca:ed:10:d0:8a:47:81:da:89:73:f4:d6:82:b9:
                    0b:81:1b:e7:b5:df:73:12:ad:4f:db:40:16:ea:37:
                    80:54:1f:25:94:16:52:9d:bd:16:89:09:4f:d5:24:
                    31:bb:4f:9d:9e:70:fa:da:07:6b:95:3a:85:16:97:
                    cb:7c:a5:56:8b:0d:35:2a:71:eb:df:1f:3b:a6:3b:
                    70:a0:0b:33:9f:c2:cc:16:b6:01:01:45:e7:fb:6d:
                    3c:42:10:9b:e0:de:07:77:2b:0e:33:a4:ab:80:b7:
                    d8:94:42:d8:84:1c:17:31:c1:10:ec:09:9c:9a:ab:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BF:82:BB:53:47:F1:CA:BE:85:AD:EF:80:8C:F9:3B:FF:7C:B0:6A
            X509v3 Authority Key Identifier:
                keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:7c:e0:9c:16:4d:2b:bd:40:9d:b1:c2:07:2a:86:82:34:
         4c:86:9b:75:93:39:8e:07:34:ca:a2:b7:c9:80:d0:0b:1b:35:
         ab:84:bb:8c:19:e2:1c:e1:00:a9:3d:1b:a4:2a:e3:9e:cb:66:
         8c:77:4d:f0:7b:00:65:eb:82:f3:dc:f0:6d:c9:c3:1c:47:41:
         3d:62:d7:19:ed:8f:74:73:43:c3:99:4d:55:69:e3:aa:14:ce:
         51:30:d6:c8:78:a1:98:99:c4:f4:d5:c2:37:ea:27:6c:94:ce:
         a7:f3:8d:57:c8:38:a2:87:fd:e0:c4:ec:92:92:e4:5c:cb:e3:
         5c:3a:f3:e8:f9:f6:eb:c5:ce:44:25:b9:94:53:18:60:89:b7:
         dc:50:4c:65:34:4c:1e:78:78:09:32:79:e3:72:4f:eb:33:ae:
         6e:d8:9a:6a:b4:63:cb:0e:48:f5:ee:85:40:e9:b8:a1:99:02:
         66:79:55:f7:87:15:61:ca:69:18:96:fb:51:04:a5:1f:29:83:
         5c:66:9c:54:5a:7e:23:d2:2b:fa:35:2b:18:fe:ff:a0:4c:33:
         46:9d:d9:29:c6:fd:4c:e9:c2:3f:a1:ce:50:64:6d:81:fa:eb:
         5f:32:bc:a9:82:c6:f3:d5:91:6c:fe:76:47:67:4e:05:b7:ba:
         e0:d4:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:46 2025 by rpki-client