Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
File:                     eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json)
Hash identifier:          SajInI7FBZzAFIs2WG5QWaUcWT47254WmXrSlSGr4wo=
Subject key identifier:   F0:07:AC:BA:30:DF:29:CF:D7:F2:3B:56:0A:14:3C:71:27:00:80:5F
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Certificate issuer:       /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial:       037F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
Manifest number:          0378
Signing time:             Wed 05 Nov 2025 00:57:17 +0000
Manifest this update:     Wed 05 Nov 2025 00:57:17 +0000
Manifest next update:     Wed 12 Nov 2025 00:57:16 +0000
Files and hashes:         1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: vEljDHsu7JxMGMXJ/Qv0T/75AAcivcOVob6G6DT6QBc=)
                          2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
        Validity
            Not Before: Nov  5 00:57:17 2025 GMT
            Not After : Nov 12 00:57:16 2025 GMT
        Subject: CN=690aa0ed-1606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:0c:30:aa:b1:16:59:b9:ca:08:33:49:b8:
                    44:70:78:b8:a5:32:3e:bc:44:51:cb:41:1b:77:3e:
                    ed:45:8f:e7:3f:70:4a:6b:cd:99:c1:47:17:7e:ab:
                    de:ef:c3:87:79:3f:94:0d:5e:58:ea:89:67:b4:88:
                    b9:e3:50:44:bf:51:ba:52:1d:08:e4:98:80:38:6b:
                    3e:04:dc:ac:fd:4c:36:91:58:5f:a2:a8:a0:07:9f:
                    b4:7a:bd:df:1f:aa:d7:09:1f:b7:8b:8a:6e:da:8b:
                    03:9c:82:f8:b2:ea:5b:f9:a7:55:ae:1a:77:21:69:
                    29:4d:dc:a9:bc:75:28:67:e1:b9:6f:db:ae:25:11:
                    12:1c:91:23:14:42:16:96:fb:16:cf:63:94:bf:f0:
                    47:67:37:5a:88:f9:05:77:f9:9f:01:8c:30:59:aa:
                    da:77:e6:ff:0f:b0:f7:6f:a0:32:53:bc:b1:58:e3:
                    ac:97:e1:79:e7:b7:e5:d1:06:6f:c2:03:c0:7b:9a:
                    01:1c:36:0f:c5:80:33:4b:40:72:e7:85:43:cd:87:
                    8f:ae:36:d8:48:6f:55:0a:ad:59:d1:2a:a0:07:82:
                    64:56:d6:50:f7:f8:be:d5:4e:be:65:c8:50:40:38:
                    cf:ea:21:b7:91:61:6b:35:d1:d8:5a:a6:68:70:d3:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:07:AC:BA:30:DF:29:CF:D7:F2:3B:56:0A:14:3C:71:27:00:80:5F
            X509v3 Authority Key Identifier:
                keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:20:da:76:47:8a:8e:81:47:23:43:40:ef:ff:3b:37:82:
         92:4b:0b:72:e5:3e:b3:b6:df:d0:b3:3f:1e:54:81:c3:4b:67:
         7e:e4:b5:fe:4c:f9:88:9c:6a:3b:6f:45:ff:62:04:df:f8:ec:
         bc:a4:10:3a:5b:fa:9e:ef:56:e4:90:ef:99:01:c1:b4:6b:82:
         35:31:a6:31:ab:79:a7:7c:81:e7:92:ad:61:83:9e:a6:a5:2a:
         89:9d:c9:a6:12:bc:a5:70:d8:b6:dd:27:98:dd:87:46:ed:80:
         b7:e3:47:a5:ae:6d:fa:01:da:77:20:ad:da:cb:bb:c0:16:76:
         49:c7:59:43:2f:d6:72:94:10:88:45:40:28:42:92:6d:07:29:
         f0:89:f3:8e:4f:6c:79:31:3e:d6:de:1d:a7:d5:d1:be:3f:1e:
         e3:7d:bf:c5:a8:47:83:5a:fb:fb:00:b9:a6:9e:47:da:57:82:
         48:a2:5a:12:a3:2a:a3:45:f9:38:d0:4b:ae:d1:4c:f9:f0:7e:
         6f:c4:8c:6f:4f:05:e6:f4:d5:d2:43:d6:a9:ab:70:9b:56:83:
         13:08:5f:54:8d:e5:7c:a5:d7:31:f3:aa:1a:72:a9:c4:cb:96:
         51:79:23:a9:d3:e0:d1:48:b2:4e:de:2a:a9:79:c4:ae:8e:40:
         c4:16:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:56:55 2025 by rpki-client