Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File:                     ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier:          YjuVv7gPcIbVbDI8c7rgcShsQPVL6bRBBmPPDEjdktA=
Subject key identifier:   06:A3:7B:98:A1:11:CB:DA:C8:C7:9D:E2:59:16:E9:E1:0D:F5:A0:96
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer:       /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial:       03EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number:          03E5
Signing time:             Wed 05 Nov 2025 00:38:08 +0000
Manifest this update:     Wed 05 Nov 2025 00:38:07 +0000
Manifest next update:     Wed 12 Nov 2025 00:38:07 +0000
Files and hashes:         1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: NyOfWHauRsgcR9Z9XafVUQN1VTJ7Uo4XMJ4nPGY3GaA=)
                          2: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (hash: Yw6khJ43zV0yhFLOubPvbZbVWU58is2F1BhtT8qiLaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
                          rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
        Validity
            Not Before: Nov  5 00:38:07 2025 GMT
            Not After : Nov 12 00:38:07 2025 GMT
        Subject: CN=690a9c6f-ef36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:92:e5:19:bc:9f:db:64:94:cf:3b:98:b2:
                    4c:60:eb:2c:b3:50:53:dd:80:e2:30:f6:26:e2:d9:
                    b3:e4:47:79:4e:44:1c:e5:ac:cd:99:6d:73:24:da:
                    ec:da:76:a8:db:ce:18:9d:85:bf:3f:0f:2c:f9:ea:
                    e7:18:e6:07:c3:cf:56:41:73:e6:8a:40:80:cf:69:
                    ce:fa:95:25:f1:46:d1:6d:96:c6:cf:aa:7d:83:35:
                    b3:24:24:5a:fd:80:8c:dd:01:3a:09:ce:9e:fd:f6:
                    e8:27:68:c2:ec:17:d3:85:09:fa:bf:ac:6a:bb:9b:
                    41:66:39:1a:c7:d0:e4:5f:8a:ad:2f:5c:4a:18:61:
                    cd:1d:cf:0e:5e:7d:c1:e9:57:0d:44:68:e6:20:e6:
                    52:a3:2b:f5:ec:e6:b7:2c:1c:3d:b0:91:1d:7d:db:
                    59:80:2c:70:af:9f:d5:a5:53:4a:02:96:90:89:d2:
                    e3:08:41:b7:8c:50:14:49:5d:0f:84:8a:0e:39:d7:
                    e5:88:75:69:49:e5:93:e2:40:11:29:9f:01:f5:92:
                    0e:96:0a:05:aa:04:7c:59:57:7e:4e:7a:75:0a:5c:
                    7b:4f:be:b5:61:30:d9:af:b9:67:c5:52:ec:a6:f5:
                    61:da:63:94:56:62:af:ff:f6:8d:3f:06:b1:f7:25:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A3:7B:98:A1:11:CB:DA:C8:C7:9D:E2:59:16:E9:E1:0D:F5:A0:96
            X509v3 Authority Key Identifier:
                keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:77:72:8e:e3:91:c6:53:e5:ed:8e:c3:c6:81:f6:24:63:ba:
         c7:08:d5:db:ff:55:3b:01:9d:07:41:38:9c:12:c7:b7:19:13:
         46:05:ce:7b:10:8e:e1:fa:5f:22:24:a1:d9:89:aa:99:31:34:
         cd:36:15:03:9f:52:ea:cd:e9:5a:b0:ba:19:49:e0:f1:36:0e:
         4d:11:90:4f:0b:f0:ba:e3:2f:c4:2e:b7:5a:3c:be:f7:8b:06:
         c8:b9:2d:d9:77:2b:9d:92:9f:03:5a:57:65:cd:31:76:70:1c:
         26:6e:d5:8f:1f:72:86:35:e2:e4:04:4f:87:f3:f0:75:f2:ce:
         f2:fb:5b:ee:f1:52:47:38:1a:25:9b:75:d0:7b:31:10:db:88:
         4b:08:62:f5:a8:5d:78:55:3d:36:19:14:62:f3:0d:41:f3:1e:
         8d:16:f0:eb:a2:d8:c7:9b:30:02:1d:3a:0c:b9:ca:d7:24:8d:
         cf:05:9f:4a:e1:79:50:8c:5d:3e:7d:06:25:35:86:a1:0f:ee:
         ea:40:11:04:17:4c:36:2a:5f:6d:ec:54:c9:82:75:ff:01:3c:
         93:c7:ff:5a:b3:ae:68:2f:eb:8c:c0:c2:75:85:2c:9c:58:23:
         42:45:ca:2f:24:8b:8e:26:80:5a:48:ec:89:36:e4:fa:56:5f:
         71:38:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:30:43 2025 by rpki-client