Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
File:                     neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json)
Hash identifier:          35AIr3VJlVatcJDLWxFycu/YYz5BxvFCGbqYtxSMbT8=
Subject key identifier:   EA:D5:7D:5C:97:0A:1E:36:6A:13:04:50:9B:CE:73:26:CB:3D:B8:35
Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
Certificate issuer:       /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
Manifest number:          01FE
Signing time:             Wed 05 Nov 2025 02:32:47 +0000
Manifest this update:     Wed 05 Nov 2025 02:32:46 +0000
Manifest next update:     Wed 12 Nov 2025 02:32:46 +0000
Files and hashes:         1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: d3uqZfFmVP3Wo9Mzc4/2EMpaOsYlUSxWbGxCvcYUOS8=)
                          2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: z1DiM+Sb1v9sxtvB7lwEWlS9RqjVAOPpk9d0UUYugp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
                          rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E81, serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
        Validity
            Not Before: Nov  5 02:32:46 2025 GMT
            Not After : Nov 12 02:32:46 2025 GMT
        Subject: CN=690ab74e-0947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:0b:a5:12:d0:ee:31:05:d8:e5:62:b1:67:
                    b4:6b:49:cb:52:42:54:64:eb:e3:40:5f:25:68:54:
                    7e:e6:ba:a6:26:58:61:33:da:27:9f:89:68:b5:39:
                    60:43:20:ae:6a:77:88:90:db:a8:3a:a2:3c:e5:1b:
                    25:7f:c3:d0:af:73:e5:a5:86:96:a7:09:f0:4f:82:
                    98:26:0d:37:ad:59:28:b3:2b:d9:5f:f3:f6:f8:a9:
                    05:05:7a:84:ee:95:6c:fb:57:3f:bf:3e:87:0f:4e:
                    ab:54:57:d8:8e:2a:5b:47:fd:f5:65:75:2a:93:b3:
                    d5:cf:36:9b:66:0a:e5:ee:4c:d9:32:8b:40:44:9c:
                    32:7d:8f:ef:8e:f9:72:0b:bf:37:b2:b8:bd:db:34:
                    98:df:cd:24:02:bd:24:3f:db:b0:47:dc:0d:70:82:
                    5b:28:7b:ad:7d:de:5c:86:75:6e:63:b4:e4:e3:8d:
                    51:2e:3f:c8:67:53:eb:90:ab:01:f1:5c:03:0b:54:
                    13:b4:de:4d:27:56:65:f8:84:fb:5f:5f:e3:bf:cf:
                    5c:d0:fc:90:bb:7c:5e:cc:0e:6c:79:13:29:b2:40:
                    ac:be:e7:cd:a5:d0:2b:39:4b:92:75:4f:ca:c7:f5:
                    a9:88:88:b7:34:44:f5:a8:e5:1f:af:55:7f:6c:60:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D5:7D:5C:97:0A:1E:36:6A:13:04:50:9B:CE:73:26:CB:3D:B8:35
            X509v3 Authority Key Identifier:
                keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:f8:78:25:a7:5d:87:17:6f:c5:8a:49:1f:91:b3:8f:5e:
         59:a8:68:b0:43:7c:2a:8c:29:e2:36:84:ed:db:4b:a0:c5:ea:
         d5:eb:42:d1:e2:fb:f2:02:15:91:71:26:1d:3e:3d:10:a6:89:
         6d:69:2c:23:d4:84:3a:c5:db:4b:0f:ff:37:5e:53:7a:70:fb:
         9e:8e:d1:2e:72:f5:aa:20:dd:90:ed:47:c1:53:17:ab:3d:99:
         03:0a:ab:50:35:80:20:ee:c5:ca:f7:17:75:93:8d:51:9c:bf:
         c0:ba:92:97:23:fa:58:c8:45:fa:2d:15:69:fe:62:98:13:d8:
         6a:01:e2:90:41:72:ed:5a:5d:bc:9c:6f:93:7d:79:7f:5c:bf:
         87:b5:f3:c8:3e:90:d7:4f:60:37:90:ec:6c:8c:b1:1d:0f:80:
         c4:1e:25:38:b8:23:e2:24:d2:1a:5a:ed:46:3b:e5:7c:e1:31:
         2a:66:1d:a7:94:47:de:4f:f6:98:8b:f2:1a:89:bb:53:7f:1c:
         8b:ed:21:77:4f:7c:15:49:58:6c:13:91:ca:e7:82:4d:9e:fd:
         e2:f3:b9:97:3b:da:c2:6e:39:80:cc:eb:35:65:ef:c0:65:48:
         94:67:fa:3e:cd:a9:91:4e:62:cb:2c:ff:f2:6f:d6:dc:a3:06:
         66:0e:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:00 2025 by rpki-client