Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File:                     e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier:          Wm+NpzOMOnlu78prBIbk5LcxSTGhWbwMOew7T/CnA8Y=
Subject key identifier:   A5:2E:95:D5:4C:AA:C4:7E:87:1F:12:33:D4:DD:0A:02:DF:1D:8D:9B
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer:       /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number:          A2
Signing time:             Mon 03 Nov 2025 06:24:35 +0000
Manifest this update:     Mon 03 Nov 2025 06:24:35 +0000
Manifest next update:     Mon 10 Nov 2025 06:24:35 +0000
Files and hashes:         1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: X8Q4W+H2pEu5j6KMSQ9XTShrrlFiLOcph+MLtlBe+iA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
        Validity
            Not Before: Nov  3 06:24:35 2025 GMT
            Not After : Nov 10 06:24:35 2025 GMT
        Subject: CN=69084aa3-6f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:09:b4:af:15:25:7b:37:b1:49:97:87:27:
                    29:d6:70:28:01:ec:4b:a5:9b:91:81:ce:16:94:84:
                    f4:8b:f7:6f:ac:24:72:98:24:b5:57:f3:45:b8:d3:
                    a8:bf:ac:32:42:9e:34:c0:94:23:d5:04:ce:42:b1:
                    86:8b:68:a6:ce:48:af:52:69:b4:87:ce:78:73:34:
                    58:c6:5b:5f:3d:0b:6d:1c:b3:c9:22:94:ba:45:ed:
                    dc:03:78:16:f2:88:a9:79:60:40:31:dc:fe:f4:2f:
                    8e:7c:aa:44:70:9c:97:f6:d5:77:2a:f3:df:31:ae:
                    97:c4:fa:7a:56:72:cb:24:ad:e4:f2:29:2d:6c:14:
                    d1:70:0b:ed:42:1a:db:f8:e3:69:46:7e:15:85:da:
                    4f:43:99:24:cc:34:9c:7d:a6:64:a8:86:b8:17:20:
                    e8:db:89:f7:62:cc:ea:30:52:1a:cb:0e:bb:23:37:
                    84:e2:4e:c7:c8:03:b2:71:8c:9b:d0:ed:ca:7a:f4:
                    8b:c2:7c:e6:fc:47:3d:b3:ba:ff:5a:17:5b:a5:7c:
                    73:50:40:ef:d5:1e:e8:47:90:9d:de:c5:65:ed:6e:
                    b2:32:5e:86:58:f6:2d:94:ec:31:a8:92:10:d2:21:
                    6f:a1:7f:50:68:be:2a:a7:8f:27:d4:43:0e:02:7d:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2E:95:D5:4C:AA:C4:7E:87:1F:12:33:D4:DD:0A:02:DF:1D:8D:9B
            X509v3 Authority Key Identifier:
                keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:50:97:39:0f:85:06:c1:e7:0e:81:8e:27:a1:f5:1e:46:
         6f:81:73:c8:a2:15:0b:31:44:14:43:a3:91:86:58:e8:fc:da:
         a3:06:90:a0:64:f9:c3:c6:6f:50:51:1c:05:73:09:c6:fd:44:
         1d:3c:16:0f:87:6f:51:73:90:38:21:61:7f:a4:8f:db:a3:07:
         98:85:ad:fc:70:de:fa:24:b4:28:1c:ae:44:ca:cd:ca:79:78:
         4a:a9:3e:64:96:f5:b2:00:46:6d:be:81:e9:41:a4:a4:e8:49:
         86:da:42:d0:aa:da:49:3c:2d:c6:cd:a3:49:ad:26:46:da:11:
         82:86:a7:48:6d:1c:3d:aa:96:35:80:a8:52:8f:98:12:5a:82:
         ae:f7:9c:be:11:43:20:b4:18:be:65:c6:a5:30:46:28:3f:12:
         0f:af:19:15:1a:1a:1e:bc:c1:c9:06:7a:71:6c:a6:f1:2b:3c:
         9b:f0:1f:b3:fc:11:6c:82:59:93:04:9a:a5:45:f5:18:8b:f6:
         93:77:ac:6d:e9:0f:e2:85:51:b8:ff:76:21:01:f0:f9:96:d0:
         31:f1:0f:8b:76:f1:69:ac:83:3d:59:93:e0:9c:23:ce:f6:b8:
         bb:81:2b:4d:f7:17:a1:a9:6f:f2:df:17:9e:d1:3a:c9:98:f4:
         1f:a8:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:24:01 2025 by rpki-client