Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File:                     IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier:          TxqZW9wFcyhPd9Q2lxtpWSZU763Ub4XlhuhHeOYHmjc=
Subject key identifier:   5B:6C:CE:9F:D5:CF:5F:2F:62:44:69:35:89:29:CF:A6:99:1D:FB:35
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number:          E9
Signing time:             Mon 03 Nov 2025 05:23:29 +0000
Manifest this update:     Mon 03 Nov 2025 05:23:29 +0000
Manifest next update:     Mon 10 Nov 2025 05:23:29 +0000
Files and hashes:         1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: 5SukCT+I2jHj212R2F6zuLw+9ZpOcyTGpE8y5h6IAnM=)
                          2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: U+YpJjsdpIii+x7KSl554lHw0RtKScpC+wz0GcX2Ss0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
        Validity
            Not Before: Nov  3 05:23:29 2025 GMT
            Not After : Nov 10 05:23:29 2025 GMT
        Subject: CN=69083c51-5953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ba:87:38:02:09:82:b5:07:9d:08:01:6c:bf:
                    7a:40:5d:db:93:15:70:3b:fb:9f:f9:4e:48:0f:12:
                    99:65:c5:05:8d:04:2c:70:b7:72:a0:96:c5:01:c2:
                    37:85:29:d4:1c:dc:0e:e5:f5:37:84:0e:f4:5b:78:
                    8e:ef:18:fa:eb:2d:d9:08:e2:1d:8c:f1:d1:01:08:
                    dc:97:46:9e:46:93:6c:62:01:6d:43:76:51:44:da:
                    06:b4:f7:6f:91:6b:36:07:7e:e3:2b:42:9a:32:1e:
                    96:ec:f1:34:5b:a6:37:3d:fa:17:68:ba:ca:2d:85:
                    da:53:73:3c:a3:83:4c:b2:7c:6f:ab:95:92:97:d2:
                    3a:c9:d2:57:fe:07:48:32:3b:d9:ea:45:06:4b:ba:
                    b2:bd:89:9f:84:ac:68:d2:8d:f0:40:a0:8b:fa:d1:
                    65:e2:bb:a3:92:0e:8e:15:60:ff:95:d6:16:93:1d:
                    fa:31:c3:0f:b9:db:e5:9c:55:b2:6e:da:a3:8e:1c:
                    86:64:84:ad:58:1f:18:41:d8:9b:17:8c:92:4d:80:
                    9a:fa:a9:77:a9:a2:ef:95:69:a0:f0:5b:b1:35:9c:
                    6e:05:c5:f5:45:d5:c6:8d:a0:e4:ee:b6:d5:46:a9:
                    43:f5:45:b0:58:70:eb:f3:f3:ff:bf:6b:a2:4e:61:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:CE:9F:D5:CF:5F:2F:62:44:69:35:89:29:CF:A6:99:1D:FB:35
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:52:21:a9:f8:68:0e:2f:d5:c4:eb:c2:52:0d:60:59:3b:
         e0:7d:60:ae:a0:2a:3e:23:ed:67:d5:95:1a:c5:af:b7:1e:0b:
         26:ec:eb:91:52:5b:31:72:eb:8f:e1:e3:44:c1:da:53:56:61:
         27:6a:f3:64:82:35:97:87:81:49:4e:cf:13:f4:de:d0:5e:bb:
         0a:c9:2a:45:e7:91:b3:38:32:12:a2:5e:1b:16:71:e1:e9:ba:
         b5:6b:82:ae:7d:44:72:83:d0:ea:73:74:ab:a6:36:44:49:a8:
         59:27:5a:8b:66:72:27:e7:b5:4b:b0:96:58:84:09:52:b7:27:
         d3:24:c2:3d:be:44:2c:38:bd:1c:f2:f9:53:89:9f:3a:cd:e6:
         f7:e7:ad:d5:68:fe:c4:1d:f4:79:bb:87:59:46:22:6e:cd:a3:
         92:12:57:ae:18:0e:2f:5b:fc:1c:03:41:6b:fa:81:b1:2d:98:
         66:56:e2:47:b5:95:c5:ff:4c:36:78:66:1b:4b:d6:d4:03:fa:
         6b:fb:59:ba:02:d7:ca:43:e3:85:6e:c3:19:82:6b:e4:14:ab:
         6b:69:a1:1b:6f:49:4a:25:d0:26:4a:b1:14:c2:95:24:c1:26:
         08:16:02:c8:3f:4b:10:89:c3:82:94:99:96:be:b5:14:0f:ee:
         6b:a1:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:54 2025 by rpki-client