Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
File:                     epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json)
Hash identifier:          OYQj3oNxwsuqNYEq3ZGsYUhkDdRLbpm62ulcVtilBHo=
Subject key identifier:   29:11:8C:F4:62:54:F7:B9:4A:A5:24:7C:6E:73:01:37:0F:4F:86:58
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Certificate issuer:       /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
Manifest number:          03BB
Signing time:             Mon 03 Nov 2025 00:38:28 +0000
Manifest this update:     Mon 03 Nov 2025 00:38:27 +0000
Manifest next update:     Mon 10 Nov 2025 00:38:27 +0000
Files and hashes:         1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: FEaQpfyivslT43lrOHPoh5YdyKypjd6V+Mk6u6T1L+k=)
                          2: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: yhzK504aM0ZwukBm9Hp58v17YprcHumNvrbx2tCi/3c=)
                          3: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: xVfI/UuhEZlLBdOOX14MKLf7WRwvv4GN5zS12Efh5N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
        Validity
            Not Before: Nov  3 00:38:27 2025 GMT
            Not After : Nov 10 00:38:27 2025 GMT
        Subject: CN=6907f983-ef4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:f6:9f:a8:bb:c6:e4:9d:a9:7a:65:95:8e:
                    b8:c3:1f:5d:00:7f:5b:e0:d8:ee:78:96:25:b5:f0:
                    22:2b:b7:93:43:1f:28:b8:4e:73:f5:52:f5:6c:e3:
                    1d:96:3c:e1:a1:c9:b0:85:16:e5:fa:d7:3f:6d:2c:
                    80:ce:93:14:d4:cb:91:5e:fd:1b:ca:d7:27:43:12:
                    1b:4c:64:24:a1:a0:9f:84:eb:bf:3e:43:e2:e2:33:
                    88:ed:9d:75:3f:b7:6a:e7:47:8c:c2:bb:71:b1:98:
                    e7:e7:0b:b7:66:d3:09:cd:7d:39:99:4d:3d:f9:7b:
                    9c:d1:39:e2:b8:55:2b:25:f8:95:78:19:68:fc:7c:
                    c1:9b:9e:68:80:e9:31:cc:e8:02:6a:64:29:65:eb:
                    52:d7:9a:d9:09:28:39:6b:da:d5:66:af:0e:89:e4:
                    e7:68:d5:a0:7c:0c:4f:73:c0:7d:7d:ed:c8:c8:43:
                    dd:3a:6c:04:57:26:2f:bb:ca:11:84:60:51:5f:db:
                    0d:73:b5:1e:28:6e:2e:f1:98:86:1a:fd:37:df:09:
                    35:a1:ef:fc:85:d0:00:bd:d7:71:c7:56:80:8e:71:
                    ac:01:23:ab:44:21:72:08:fb:4e:9b:5d:4b:4b:b3:
                    0d:3b:cc:b2:9f:43:64:f5:8a:ac:f6:0d:db:36:57:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:8C:F4:62:54:F7:B9:4A:A5:24:7C:6E:73:01:37:0F:4F:86:58
            X509v3 Authority Key Identifier:
                keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:16:7b:e3:74:4a:c2:bc:42:ba:a4:f5:87:c0:c3:2c:2a:1f:
         d1:86:31:6e:30:5f:2e:2c:57:f2:dd:22:46:90:10:2b:ef:d4:
         c7:62:7d:29:d3:f1:ae:a7:16:a0:55:86:8e:88:a0:4d:41:95:
         24:22:29:bf:46:e5:ae:3d:8f:45:55:30:de:28:d6:42:03:b1:
         3a:8e:7d:5b:38:17:83:a9:42:67:f1:d7:77:83:04:da:83:4a:
         2e:c2:b6:5c:16:cf:58:93:df:5c:e8:31:3a:cb:f8:60:6d:28:
         c7:89:1f:ef:4b:a6:96:e8:62:c0:d6:8f:3e:94:54:25:73:b9:
         c8:86:ee:89:5e:65:11:c3:aa:f9:0d:79:2e:c6:6c:8f:27:c0:
         00:af:0d:e3:ae:9a:f7:b3:ff:81:89:2a:55:3a:de:a0:da:d0:
         1f:35:85:20:e0:78:2e:32:71:5b:93:2a:ae:9d:5d:85:ed:a5:
         ed:95:3e:bc:03:38:7d:d9:46:3d:e3:a3:be:95:39:15:1a:dd:
         28:81:92:2b:d2:e6:d0:d3:b6:e5:26:36:a7:0e:f3:61:7c:eb:
         70:74:b3:ed:8a:9f:a4:b0:53:78:be:ce:77:a4:fb:cb:7b:b6:
         ec:fe:a1:1f:93:88:3a:a1:f6:47:31:28:6a:95:9c:c2:96:1f:
         96:c2:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:39 2025 by rpki-client