Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
File:                     Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json)
Hash identifier:          YO6hzD767O5AVPyrZvH3VZvIlQJj9uRI8EWRmlxTgW8=
Subject key identifier:   EE:E0:A5:A9:CB:67:D1:1D:DA:0D:0A:E8:A4:49:AA:BF:1A:E8:D2:DD
Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Certificate issuer:       /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
Manifest number:          011D
Signing time:             Wed 05 Nov 2025 05:19:56 +0000
Manifest this update:     Wed 05 Nov 2025 05:19:55 +0000
Manifest next update:     Wed 12 Nov 2025 05:19:55 +0000
Files and hashes:         1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: bwA5FsGKJJiMECYvipTJb+/WWPT0Cr71kG4QskFrItk=)
                          2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: 6CoZctRh+5TN7bimUtTXkZuJtbaIJypN9r/nRbV8PTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl
                          rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
        Validity
            Not Before: Nov  5 05:19:55 2025 GMT
            Not After : Nov 12 05:19:55 2025 GMT
        Subject: CN=690ade7b-1d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:56:9a:13:eb:4f:6e:fb:9d:95:06:2a:28:
                    92:0f:4f:76:b7:44:88:c5:35:7b:0b:c0:e0:31:4c:
                    aa:42:a2:53:75:03:de:6a:30:c8:55:78:f5:81:73:
                    71:74:7e:8e:11:71:82:c2:4c:93:39:f6:76:b8:e5:
                    50:83:8f:f6:80:c7:13:60:88:85:f7:cf:36:19:77:
                    a6:be:16:a8:0f:c9:d4:b6:5e:d5:7a:e5:06:60:39:
                    0e:a4:bc:ae:ae:ab:c2:3e:c6:7d:fe:77:ff:50:95:
                    4a:e0:26:f3:ba:c1:d6:77:22:d5:1b:74:d8:fb:dc:
                    06:34:79:69:95:ca:0b:41:7b:9f:4e:d2:17:ee:b1:
                    1e:79:c6:a0:bf:01:dd:07:f8:85:ce:0d:1a:e1:f5:
                    d9:73:82:ac:e4:c9:76:be:b5:a3:51:8d:ef:64:a4:
                    4e:4c:12:99:fe:d8:98:5c:af:65:86:29:bf:a4:76:
                    83:d7:d3:60:86:48:23:4f:fc:ae:6b:08:ce:f5:ee:
                    e6:ae:49:80:9f:9b:0b:55:80:ce:eb:97:a6:86:8b:
                    93:0c:4f:98:b5:48:6c:66:a8:94:b6:01:ce:dc:c7:
                    65:f5:d5:ff:3e:ff:5e:b1:67:84:d8:d4:dc:ef:2d:
                    7b:d1:61:a3:4c:bc:e6:5a:fb:98:ae:a3:10:cc:6e:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E0:A5:A9:CB:67:D1:1D:DA:0D:0A:E8:A4:49:AA:BF:1A:E8:D2:DD
            X509v3 Authority Key Identifier:
                keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:91:25:3a:a7:08:fe:09:e4:26:7d:03:42:a4:28:4c:3a:74:
         6a:a3:3e:b3:75:b3:60:81:19:f3:71:58:33:06:26:6b:9c:4f:
         5f:e1:cd:48:43:9f:10:ff:b0:2a:fa:87:62:e7:45:c6:b9:02:
         b3:ca:d0:e1:9b:88:e6:b7:0b:79:7f:5d:49:8f:a1:9e:e4:37:
         a7:70:1f:bc:81:5a:9d:1b:5f:19:7c:8f:a5:da:b5:51:fa:3e:
         a3:50:b3:1a:af:66:13:b4:11:91:b0:01:8e:be:93:da:d2:21:
         aa:43:89:f0:24:e5:c8:67:6d:d4:e7:9b:0e:88:24:aa:3a:bd:
         95:66:62:da:64:99:47:f3:02:a8:14:43:cd:01:88:40:f3:c7:
         f5:b6:22:33:22:70:2a:d4:e7:3e:50:0f:42:a2:34:bf:1b:12:
         b9:9f:ab:09:50:9c:f8:e0:95:fb:78:e1:9b:f2:ac:9d:11:22:
         2d:a3:38:47:17:5a:46:15:e8:75:44:45:3b:ea:9a:7a:f7:25:
         2e:5d:18:76:24:45:0b:9a:67:d8:30:5c:24:fe:b3:ba:21:b5:
         24:77:d2:72:db:ab:dc:61:d3:a1:f7:0b:34:04:12:ca:71:c0:
         1b:66:71:15:52:d0:75:f2:f3:f0:4a:cb:6f:bd:db:49:22:c9:
         ff:d0:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:21 2025 by rpki-client