Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File:                     EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier:          T8ntLik4cXcS8g2m81RQIk4IU+EjQA0lNoiE9WQT9yU=
Subject key identifier:   8B:17:49:BB:D8:8C:27:89:88:CE:92:AB:07:8B:54:02:85:87:AA:E4
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number:          A2
Signing time:             Sat 09 Aug 2025 06:44:32 +0000
Manifest this update:     Sat 09 Aug 2025 06:44:32 +0000
Manifest next update:     Sat 16 Aug 2025 06:44:32 +0000
Files and hashes:         1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: Tyy28hAF6u1ZbcQM+qXRATeLZZ9QmY9P0krIoK26Y/w=)
                          2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: SeTQQGcAoZNzDdKTl845UbiLxIJADttYLuIhYuZbrRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Aug  9 06:44:32 2025 GMT
            Not After : Aug 16 06:44:32 2025 GMT
        Subject: CN=6896ee50-ead2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:bf:2e:6a:81:78:1a:78:21:32:31:06:35:
                    37:ba:20:72:6b:f0:e3:93:c5:c1:20:9e:f9:45:54:
                    b6:59:41:45:c6:10:51:35:cf:d5:e7:55:04:a8:31:
                    67:3a:6b:f4:86:12:e7:22:1b:f9:48:90:d0:f3:88:
                    3e:9b:b9:6c:45:33:a3:e8:f0:3c:7e:19:0b:57:f3:
                    3d:af:c6:df:1d:3d:26:3d:43:e5:59:19:96:91:56:
                    44:1c:59:8b:4e:af:bc:dc:d5:ba:6d:2c:73:dc:da:
                    f4:20:21:37:5f:4f:3a:e4:d3:e2:d8:98:cb:09:e6:
                    73:6d:9b:18:6c:eb:df:b9:bd:4e:d2:61:dc:db:07:
                    a7:a3:eb:df:90:a3:ca:8b:10:8e:76:8f:1a:58:7b:
                    55:90:75:01:ca:34:d8:e8:3a:90:89:88:1f:ac:b6:
                    f0:7d:2d:b7:46:5b:28:ab:b4:52:a3:e7:fe:4f:cf:
                    c1:8e:3f:bf:1e:f8:07:52:39:63:1c:cb:97:d3:33:
                    47:57:93:15:40:df:82:03:2a:a2:92:53:b5:d5:93:
                    1e:5d:1b:f7:43:c4:8e:b6:50:78:ac:9c:94:0f:e1:
                    f6:d8:95:e2:c2:56:0b:b3:81:0b:e1:96:31:65:8d:
                    22:0b:c0:57:7b:05:3c:b3:33:ed:2a:8c:48:a5:7a:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:49:BB:D8:8C:27:89:88:CE:92:AB:07:8B:54:02:85:87:AA:E4
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b8:14:22:33:2d:6c:4e:1b:5a:1f:e5:9e:e5:84:a8:6b:97:
         a7:3e:67:0f:7e:e9:79:29:3c:41:57:a5:e3:79:3e:8d:f4:21:
         46:21:f0:4d:a6:b4:ff:bc:c8:a1:4a:78:95:7d:98:44:a2:0a:
         37:e5:84:6c:01:49:13:b3:70:89:e2:aa:2d:76:50:de:16:6c:
         ef:af:82:7c:77:90:98:7e:6d:3a:01:bd:7f:de:15:bb:92:70:
         60:b9:45:7e:c1:1b:85:f6:27:19:8a:ca:83:1e:92:30:2c:fb:
         22:f2:ed:43:6b:c6:23:5e:e8:aa:d4:0a:92:24:6e:06:f9:2c:
         15:38:ed:68:11:08:cc:40:30:74:1e:94:69:65:76:db:6e:f0:
         95:9e:b2:33:35:6c:74:35:c0:07:6e:b7:38:d2:cc:aa:17:f2:
         81:8c:77:2f:89:c9:d2:9d:f8:1c:4e:3c:44:68:32:1c:25:19:
         7b:25:35:bb:30:2c:41:62:60:2f:fc:13:5e:ec:9a:80:c2:39:
         23:19:b8:05:a8:a3:0e:57:59:78:e5:48:2b:16:57:e7:5c:bc:
         a9:63:74:9f:65:98:cd:00:52:86:47:12:75:8b:c7:3b:83:fc:
         7e:74:eb:86:37:22:83:37:33:b9:b6:f0:d1:9c:1b:c0:6b:df:
         34:f2:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:16 2025 by rpki-client