Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File:                     64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier:          wc1IcW9GYuK4HC9P/pZ5EkarVQkxnZtL1kpg4UgyrZg=
Subject key identifier:   BA:19:54:E9:F2:E9:D4:A8:BC:D8:52:80:46:44:C3:83:4E:8F:69:66
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0DCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number:          0DA0
Signing time:             Tue 04 Nov 2025 18:01:16 +0000
Manifest this update:     Tue 04 Nov 2025 18:01:15 +0000
Manifest next update:     Tue 11 Nov 2025 18:01:15 +0000
Files and hashes:         1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: gMVQT6EvtRNqm44CDu440I856EiC+DOgpxmGzZ7FxUA=)
                          2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: yCxqzmWa893doOfv6hENPdTITWlM9j+UWoyn6s0IOuA=)
                          3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc=)
                          4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: UjEhrY6BSDNfZnVVPw3EjbmEipeGvEYmxIV0JR9ypjw=)
                          5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3530 (0xdca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Nov  4 18:01:15 2025 GMT
            Not After : Nov 11 18:01:15 2025 GMT
        Subject: CN=690a3f6c-1daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:c6:a1:9e:83:e0:f0:3a:1b:ea:bc:16:42:
                    ed:9d:6e:bd:88:8c:77:26:e3:6f:7b:ab:2c:27:9c:
                    40:d8:e0:32:f0:2c:8a:05:31:15:fe:ac:0f:28:8b:
                    d0:33:9c:40:57:0d:31:d8:bb:8f:8d:fc:7a:9a:e0:
                    1b:bb:f8:d8:81:b3:6c:ed:d3:7a:65:ee:22:0f:bc:
                    5a:33:1d:4d:d2:e2:2b:d4:bd:28:bc:1a:ce:f7:1d:
                    40:d3:92:c2:17:d0:9d:3c:f1:22:67:d0:60:57:6c:
                    48:4d:42:59:d3:c3:f5:12:dd:e4:6f:36:c1:82:66:
                    ed:e5:12:24:a4:8a:ca:3c:84:2e:61:57:bc:04:7a:
                    1c:bc:95:30:15:51:c6:7f:08:ce:08:ea:80:81:25:
                    38:46:03:93:82:a3:fb:f7:d9:d4:b0:69:bc:1e:0d:
                    ed:30:5d:aa:06:8f:98:28:f1:7e:74:82:04:d2:65:
                    3d:8c:09:37:ed:30:6a:52:23:5f:03:5b:34:2c:16:
                    18:0d:6d:1e:32:f7:ce:5f:32:8c:ed:a5:f7:0d:f6:
                    72:1b:0d:64:1d:b4:fa:e3:8e:2e:ab:0e:36:6e:d7:
                    f8:0a:bc:f1:8c:0a:4a:0a:c4:12:9c:b8:42:aa:5d:
                    1d:19:30:55:fd:cc:d5:95:b4:07:ad:36:36:8e:51:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:54:E9:F2:E9:D4:A8:BC:D8:52:80:46:44:C3:83:4E:8F:69:66
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7c:4d:05:47:8a:f5:a2:e9:5a:d5:ca:fc:98:e8:0a:48:65:
         a2:34:6d:de:a2:31:fb:e2:ef:bd:e8:b1:e7:49:7c:64:e2:29:
         8a:c1:5b:4c:0e:2b:5b:d7:6f:d4:ef:d2:46:94:3f:50:94:42:
         2b:32:91:53:c7:69:80:c9:12:c2:d9:0c:c5:5c:14:f1:cc:1d:
         2c:4f:9a:01:a6:c0:8e:e4:8e:7e:29:e9:9f:5f:e6:8c:04:b4:
         29:d1:db:e8:f4:9d:7d:ec:f2:db:8d:04:a2:d3:bb:79:f8:8e:
         cc:31:e4:6f:3b:31:9a:c3:5a:22:7e:07:e3:4a:4f:e8:5d:1b:
         1b:6e:4a:d3:0b:74:ea:2f:69:dc:1f:79:cf:b5:1c:c6:69:b5:
         7f:fe:84:44:13:74:52:5e:87:c1:0d:c7:48:cc:c6:02:5a:97:
         b8:d8:a3:ec:12:c6:c5:38:b9:e5:45:5a:f9:a1:ad:28:a6:6f:
         aa:8b:35:d9:53:33:cf:55:42:ce:df:fe:68:15:9b:c9:b0:46:
         47:de:fa:27:8e:c6:73:92:5a:ec:a9:ca:33:fd:60:a3:c7:45:
         b7:cb:3a:b1:d1:43:40:a0:06:24:91:a0:4f:4e:29:d0:80:68:
         a2:d6:34:35:ce:fb:1c:ef:db:e4:ba:e2:99:c7:7e:3d:ec:5f:
         24:20:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:30 2025 by rpki-client