Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
File:                     ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json)
Hash identifier:          J6r6tQauqHQm0YwfNVYjqpTtF2n/9/myzwhqpeM/2hk=
Subject key identifier:   E5:BF:FD:6F:64:59:55:F2:AF:EE:4C:05:65:93:5D:A9:0B:54:2E:02
Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
Certificate issuer:       /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Certificate serial:       184C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
Manifest number:          1844
Signing time:             Tue 04 Nov 2025 16:36:41 +0000
Manifest this update:     Tue 04 Nov 2025 16:36:41 +0000
Manifest next update:     Tue 11 Nov 2025 16:36:41 +0000
Files and hashes:         1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: ZQPPc88J1cg6jvhUu27QjazKjw/L1VsXynG/aLTuAK0=)
                          2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: nE2SMAFaQ2lno0OXjrXqdk80Cil1YlPktKv0bTOPaBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
                          rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6220 (0x184c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
        Validity
            Not Before: Nov  4 16:36:41 2025 GMT
            Not After : Nov 11 16:36:41 2025 GMT
        Subject: CN=690a2b99-02ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:af:d3:ab:8c:10:04:18:ef:96:1d:b9:e9:
                    74:c7:9a:27:79:a5:27:ac:a3:94:b2:a2:95:00:d2:
                    c8:0f:68:d9:86:cf:95:68:cb:53:d9:53:15:3a:48:
                    0c:2a:39:7f:38:ef:b8:cc:50:85:ee:ca:fd:18:e9:
                    61:04:e4:c1:6c:f7:da:9a:45:71:21:d9:28:53:d3:
                    97:e6:41:06:59:ea:df:73:2e:04:80:18:d5:aa:62:
                    85:a2:3c:4c:ed:11:e9:0a:73:64:ae:34:ad:be:4e:
                    7c:0d:ce:4a:75:5a:36:76:5c:53:9c:b3:8c:9a:1d:
                    dc:dd:5d:86:eb:39:0e:0c:05:03:41:63:b8:7d:13:
                    0c:a1:de:81:f9:ca:4b:61:75:c6:60:2f:5e:65:2a:
                    db:f1:92:99:b7:bf:7d:02:20:32:26:8d:ac:3d:db:
                    75:1b:a2:52:67:fb:a2:c8:d1:79:29:fe:28:ac:6e:
                    82:e5:bf:c4:b8:9e:26:bb:87:7d:6a:92:dd:74:dc:
                    6c:15:4a:dd:dc:2f:7c:b6:69:ef:aa:e7:c6:f0:be:
                    3e:e2:da:4d:08:06:59:e2:80:ea:6f:7d:61:89:7f:
                    52:a0:e5:85:8c:66:5f:60:0e:61:ef:f2:35:d7:fd:
                    ed:26:05:91:9f:59:e3:ac:67:af:9a:a5:8d:8b:8c:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BF:FD:6F:64:59:55:F2:AF:EE:4C:05:65:93:5D:A9:0B:54:2E:02
            X509v3 Authority Key Identifier:
                keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0f:82:f4:92:66:40:87:3e:2b:9a:4d:4d:8b:b3:1f:c3:21:
         7d:db:ea:5f:35:c3:f4:4e:2a:6e:a7:82:ae:b9:7c:1c:a4:56:
         7e:f9:84:da:3f:36:ac:5d:82:4a:3b:27:80:c3:09:2f:06:41:
         af:e7:a0:be:f6:b2:75:d8:a2:f9:e9:0f:25:8e:bf:6c:9a:bd:
         af:3c:19:b6:68:a2:f5:f2:ac:77:c9:d0:d1:19:3c:6f:da:0a:
         c7:28:ef:8d:a6:06:f6:61:f6:ca:23:2b:e8:7e:b3:f9:ea:45:
         95:73:53:bc:ac:27:77:8a:ba:38:69:4e:09:58:4c:e3:c7:20:
         5f:86:a7:31:1f:33:51:9c:f3:dd:28:b1:27:12:2c:ad:b1:65:
         da:4f:e5:04:29:a6:33:6e:37:42:7c:09:33:c0:9b:8b:2f:6c:
         d1:4b:be:93:a4:40:d6:24:c7:48:65:1f:03:3a:18:04:cf:89:
         da:1f:3c:08:86:83:40:67:2e:47:ce:ab:42:2a:41:93:44:04:
         52:b1:af:d1:fa:23:5a:24:dd:dc:31:ed:2b:3b:ff:15:60:62:
         10:71:fe:70:f9:3a:d9:60:3c:8c:b5:4c:74:7d:ba:ee:67:b2:
         42:ee:fe:1b:6b:67:3b:9d:4c:33:d7:b9:c3:5d:c5:f5:4e:8e:
         a3:70:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:18:18 2025 by rpki-client