Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
File:                     EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json)
Hash identifier:          yHT18+u6TZ92dqxBP+kvsYjJeON0XBBfTArhxeKChnw=
Subject key identifier:   E4:D5:AF:8D:53:41:E4:18:8C:4B:76:94:5B:31:BF:C6:99:0B:CA:A1
Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15
Certificate issuer:       /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
Manifest number:          015C
Signing time:             Mon 03 Nov 2025 04:06:12 +0000
Manifest this update:     Mon 03 Nov 2025 04:06:11 +0000
Manifest next update:     Mon 10 Nov 2025 04:06:11 +0000
Files and hashes:         1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: EeYhjxcXq4BR08J/WuyIMF497wWqONmh3R3EDeNj5cQ=)
                          2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl
                          rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
        Validity
            Not Before: Nov  3 04:06:11 2025 GMT
            Not After : Nov 10 04:06:11 2025 GMT
        Subject: CN=69082a33-c4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:10:94:f6:2f:0e:ea:df:ac:df:e2:e3:fb:
                    2e:b5:c5:9e:8e:45:08:49:58:d5:18:f5:ee:54:ea:
                    e0:95:9e:89:1c:70:ee:d1:61:1c:c4:92:e1:2c:76:
                    83:b5:7c:ac:81:a1:0a:5d:fd:57:a5:5d:71:8d:1c:
                    1e:23:20:d6:81:f6:7e:5b:94:34:54:c3:d9:24:46:
                    8b:95:8f:a7:af:85:ff:64:5b:15:1a:77:35:a3:95:
                    6b:1d:8d:53:94:4d:53:af:35:60:36:f1:c4:ef:fd:
                    ce:fe:4c:e2:6d:4a:6e:fe:87:b4:57:e6:84:a1:1a:
                    a9:8e:28:24:5b:f9:70:60:9b:80:cf:87:c3:72:0b:
                    53:48:2c:5f:8c:37:bc:8a:c9:13:ef:06:e4:e0:f4:
                    47:5c:57:48:b3:13:dc:cc:41:86:28:27:f0:b1:8c:
                    79:c6:96:0c:f6:22:b8:28:83:6b:65:28:a8:89:0e:
                    4f:b6:98:9a:28:69:c3:78:d8:9d:69:4b:f6:91:60:
                    19:83:7d:49:2f:07:4c:72:a2:d0:3b:98:70:71:c8:
                    73:6a:7e:26:b5:71:29:07:99:14:f0:72:9a:24:7e:
                    4b:58:a3:08:c5:f2:2b:02:5e:d6:d5:52:7f:4f:a7:
                    c4:1e:aa:3d:2b:2c:03:38:ec:45:23:4e:c3:60:fb:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D5:AF:8D:53:41:E4:18:8C:4B:76:94:5B:31:BF:C6:99:0B:CA:A1
            X509v3 Authority Key Identifier:
                keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:14:e5:18:d3:fc:d3:8d:d5:d2:eb:63:ae:fb:60:29:23:
         ab:f9:a5:1f:e1:d8:ce:3a:f1:f6:76:b7:a6:ac:31:91:24:5d:
         36:d0:78:fe:47:a8:45:26:cf:39:b3:ce:e5:90:c4:7d:ca:03:
         44:37:9f:67:9f:fa:8a:eb:52:bc:54:a7:dc:0d:bc:d2:5c:85:
         8e:a5:84:77:c5:31:cb:1a:76:c6:a0:0b:88:10:e3:d2:36:ca:
         71:d4:cf:27:a2:2d:96:cd:b6:fa:63:08:43:97:64:2d:66:e7:
         93:af:e2:51:ae:ad:eb:a7:91:41:d7:3d:e7:d2:30:35:3a:db:
         da:fc:23:62:f8:2c:0c:7c:f6:e9:11:73:71:bc:10:22:ce:81:
         1a:00:bf:30:7e:d5:51:13:3b:02:22:09:c2:6e:57:d5:c3:09:
         59:1a:39:70:9b:03:82:20:b5:44:62:33:c4:8d:dd:b3:de:1d:
         30:a8:95:5d:e7:01:3d:2c:0b:e1:48:60:f2:ee:20:c9:6e:ea:
         48:8d:1d:6f:c6:de:c9:f0:dc:06:b2:09:75:06:38:c2:38:30:
         d8:e8:23:0c:4a:37:93:ec:9a:c9:1d:53:2c:0f:df:35:d3:35:
         a8:f5:7a:47:77:20:ce:cf:39:ef:bd:b5:61:40:d0:e5:82:28:
         0b:bf:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:53 2025 by rpki-client