Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File:                     9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier:          obwx2m2tqAW4xvDyuG1Wa/3FZYctVBOulB6X42YvBgc=
Subject key identifier:   75:EF:0A:5F:20:81:84:BB:28:98:70:3F:F0:C2:3F:A2:46:E3:22:42
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer:       /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number:          E7
Signing time:             Mon 03 Nov 2025 05:23:17 +0000
Manifest this update:     Mon 03 Nov 2025 05:23:17 +0000
Manifest next update:     Mon 10 Nov 2025 05:23:17 +0000
Files and hashes:         1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: e9VuQK31qDzWl5KA4CH0RHYkcxPgDcDoHnuWoEA8JYw=)
                          2: 485D1C1AABD111F09DF58512C4F9AE02.roa (hash: C+jNBE8aLOWYMKAuhubBOnivrdc2tpfTJOZLFUiLBvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
                          rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
        Validity
            Not Before: Nov  3 05:23:17 2025 GMT
            Not After : Nov 10 05:23:17 2025 GMT
        Subject: CN=69083c45-632b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:ca:11:f6:6b:c1:dd:f7:ba:d4:92:76:8c:
                    ba:42:1a:38:d4:36:6d:86:4a:4d:e4:d1:58:90:15:
                    c3:a7:2e:f0:c6:76:15:32:80:b2:96:94:65:ff:f4:
                    31:15:a7:b1:c5:88:9a:ba:f3:6f:8d:54:f9:ff:fc:
                    90:09:d7:84:46:47:55:ed:e4:27:88:c3:02:f9:3b:
                    68:57:47:8a:a3:ad:8f:39:6a:32:c8:58:bd:d9:80:
                    c4:2c:6b:de:9f:e8:f1:97:71:4d:fa:2d:8a:54:df:
                    bf:60:5c:fc:6f:fb:c2:9d:e4:65:75:5f:bd:22:73:
                    e6:40:fc:6d:0c:a4:53:3b:cc:26:c3:24:9c:54:ea:
                    eb:81:78:fb:ff:b1:2e:86:97:27:c1:50:e3:03:f3:
                    52:a4:98:77:bd:9a:ff:b2:53:79:0f:f1:24:f0:16:
                    20:62:99:5a:44:41:3f:a5:96:20:62:c2:58:41:2a:
                    34:48:d9:0e:cf:98:f9:0e:c7:e8:2e:f0:34:cd:58:
                    19:a9:53:79:19:e0:51:ee:74:4c:0d:9c:2e:98:af:
                    00:62:2b:1a:6c:87:6d:c8:0e:21:5a:00:3d:03:5c:
                    7f:88:7b:33:ff:d0:ac:09:1c:23:90:d8:ce:84:61:
                    53:49:9a:3e:3e:cf:10:4f:41:45:53:12:17:b5:3f:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EF:0A:5F:20:81:84:BB:28:98:70:3F:F0:C2:3F:A2:46:E3:22:42
            X509v3 Authority Key Identifier:
                keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:fa:26:1b:f7:2e:b0:b2:3b:3b:b6:87:10:8a:56:42:23:
         70:26:71:af:d4:99:9b:93:4a:d5:08:6d:07:6c:99:42:f3:ca:
         6f:bd:0e:b8:d0:26:21:ee:2a:c2:42:76:e4:94:35:51:fa:ef:
         42:46:21:b3:b5:a5:c7:a5:ba:29:2b:6d:39:6e:26:90:76:28:
         69:d0:c3:07:e5:6b:7c:17:4b:42:a3:ef:c2:4b:eb:6e:55:1c:
         ce:a4:71:2a:4c:7a:18:7f:f0:f9:39:76:0f:4a:41:1c:65:4a:
         a1:64:1a:bb:fe:c9:e5:59:64:d5:f8:e5:ae:90:9d:3e:d4:c8:
         9a:2c:72:f8:35:fd:4b:2d:ac:6a:18:87:c8:7b:e8:4f:3b:4e:
         2c:b7:75:c4:52:80:6d:a3:07:12:68:c4:7c:5a:40:ba:2c:fa:
         bf:43:c4:7e:3f:ec:24:94:e0:ca:85:c2:ae:f3:c9:03:0e:af:
         ce:79:13:62:0c:aa:0e:d7:42:6b:42:39:60:79:d0:10:c8:10:
         66:dd:b4:b2:dc:a0:43:b4:2e:6b:a6:bb:bf:d8:7c:1e:64:22:
         8c:20:83:6a:3f:9d:4d:87:32:ef:8b:2e:94:1f:39:dc:41:bc:
         20:0e:84:de:29:f1:e9:ae:4e:72:c8:38:96:e3:4c:3a:b6:d5:
         7b:50:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:17:05 2025 by rpki-client