Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
File:                     e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json)
Hash identifier:          DD55i/HDr3E354LTgVOYzUymkMlDv90txVwGPOGAuKQ=
Subject key identifier:   51:7D:7F:7A:1A:94:D7:95:B4:A4:8D:DE:43:EB:EE:22:B9:8A:2D:E1
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
Manifest number:          068A
Signing time:             Tue 04 Nov 2025 22:32:06 +0000
Manifest this update:     Tue 04 Nov 2025 22:32:05 +0000
Manifest next update:     Tue 11 Nov 2025 22:32:05 +0000
Files and hashes:         1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: YWAfK5fAsyJX6yTBcPaXFGkltt1f/M7/TjXuWbL9Qwc=)
                          2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=)
                          3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Nov  4 22:32:05 2025 GMT
            Not After : Nov 11 22:32:05 2025 GMT
        Subject: CN=690a7ee5-2dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:99:0a:ed:07:f5:53:f7:2f:eb:9f:53:66:
                    19:af:56:c8:68:ee:b2:2c:fe:23:5b:94:0c:05:a6:
                    8b:44:18:33:67:31:90:de:08:a4:b9:5b:19:74:1c:
                    bf:b0:12:b7:ed:16:a1:66:90:e2:20:74:9e:86:3b:
                    37:c4:6b:11:00:c4:d9:f4:e5:f9:e6:f0:70:66:d5:
                    7a:9e:d7:94:ac:06:6d:f2:b1:a1:e5:01:04:53:64:
                    d9:f2:aa:df:7b:32:bc:2f:14:8b:da:2f:88:ae:bb:
                    d2:15:8b:40:2c:bb:8a:a9:82:ad:0d:df:d8:27:22:
                    70:8b:a9:52:2e:ba:82:df:bf:94:bb:32:e4:4c:eb:
                    5d:58:2c:09:c7:80:6f:60:1b:31:8f:ca:a0:b6:71:
                    07:4d:7d:5c:cb:15:7f:4b:b0:a3:48:06:67:f8:d0:
                    3d:2e:4d:b6:e2:c9:a7:aa:ca:7c:1a:bf:ac:75:21:
                    e3:a9:32:82:26:cd:59:42:3f:87:89:b9:dc:4a:10:
                    bc:e0:33:9d:b9:c3:9f:10:db:52:54:20:51:c1:b0:
                    54:97:16:de:25:01:9f:21:ff:1d:71:79:48:0c:9c:
                    87:f7:1b:fb:bc:fd:19:84:19:29:87:bc:68:74:5e:
                    01:12:74:ba:76:07:64:fb:f4:53:7d:97:de:80:83:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7D:7F:7A:1A:94:D7:95:B4:A4:8D:DE:43:EB:EE:22:B9:8A:2D:E1
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:28:ea:97:60:40:56:0a:00:b9:de:00:66:3b:94:75:1a:
         b7:70:f0:ee:14:e1:60:d2:02:b8:43:cd:f5:7a:79:76:a7:11:
         49:db:57:05:1f:5e:4c:eb:9a:00:66:79:63:e1:53:03:a7:56:
         ad:6d:e3:4a:65:fc:55:12:80:a5:b4:56:50:ab:32:e4:7f:3e:
         1b:10:ef:90:69:73:37:8f:25:6b:92:db:46:1f:66:5f:54:86:
         ac:45:a0:9f:ca:24:32:c2:67:ff:b4:42:35:88:e1:ca:30:25:
         f2:4c:03:76:cd:09:a5:3b:66:4d:c8:4e:7f:16:55:40:ee:74:
         eb:24:8b:66:4b:d8:1c:cd:46:c3:7d:4d:8f:13:4d:d2:6e:e8:
         54:d4:9a:a9:ee:ca:62:b6:16:f3:06:da:9e:95:7a:19:41:4d:
         61:b8:42:6c:ad:49:f6:4b:cf:19:c8:f8:2a:52:25:d8:0b:7a:
         e3:82:aa:17:cf:93:70:46:9b:09:c3:f1:1e:83:a5:45:97:c8:
         f2:ae:b6:19:24:39:c9:9f:67:4b:d5:77:4b:00:89:c5:47:80:
         b3:3b:74:71:59:cd:57:cf:c2:a5:43:31:2c:22:43:1f:00:8a:
         a9:3a:5a:16:ce:f5:4c:fc:b2:a5:8d:4b:c9:c7:08:8b:fa:32:
         d0:6b:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:18 2025 by rpki-client