Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File:                     EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier:          cDl+hIreP7VnvH6XKUg9oCxt1ANcqX3ugZJduLGG2hQ=
Subject key identifier:   4C:93:6C:B6:78:95:CD:09:0E:96:8F:69:AD:5B:39:76:37:38:BB:81
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number:          CF
Signing time:             Mon 03 Nov 2025 05:46:25 +0000
Manifest this update:     Mon 03 Nov 2025 05:46:24 +0000
Manifest next update:     Mon 10 Nov 2025 05:46:24 +0000
Files and hashes:         1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: YO4pMj5iPv7pKZyTGhO9bJZsqITyRvl8WE9q3INJlik=)
                          2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: I6/Xug9sgzfx9zXpY7A6l18h25D10MEv3RG9NdPO5Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Nov  3 05:46:24 2025 GMT
            Not After : Nov 10 05:46:24 2025 GMT
        Subject: CN=690841b0-25e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:61:f9:34:9b:74:b9:47:de:ce:3a:48:8f:
                    29:96:64:b4:cc:c1:b2:2d:2b:27:da:f2:54:8c:a1:
                    13:82:f3:10:ba:99:86:4e:11:45:90:65:4a:63:0e:
                    e0:9f:27:f7:62:7e:fc:54:39:b4:c5:c7:cb:a6:8c:
                    b0:f7:0f:53:c4:23:a3:40:75:45:c3:a9:a0:20:a2:
                    6a:42:86:14:10:f2:5b:a8:a5:73:f1:ba:53:d9:f9:
                    d2:66:84:66:cc:cd:de:7e:82:50:78:e4:04:82:22:
                    68:c4:6c:f3:98:f8:d2:54:ef:76:db:76:d7:ef:2a:
                    42:ff:86:87:9a:e1:f9:11:b1:3e:56:0e:ca:5b:16:
                    76:b7:ca:92:ea:3d:79:6c:f2:20:2d:f6:22:39:57:
                    41:f2:42:3c:25:6c:d0:fc:1c:9d:d0:da:c2:75:4b:
                    3a:70:75:e7:c2:14:8e:4a:d9:b4:4b:22:8e:88:93:
                    a5:11:fd:45:34:f3:55:aa:f9:a0:61:5f:4e:cf:5e:
                    98:cc:3d:2e:f3:c8:6f:58:38:68:59:79:94:2f:00:
                    1e:ea:e4:d5:43:a8:06:7e:65:aa:bb:85:64:38:ea:
                    5c:5e:52:cb:3c:aa:07:b2:fc:89:58:97:32:e8:d2:
                    12:7f:ba:a2:43:ee:21:89:d4:5d:62:8a:40:0c:fc:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:93:6C:B6:78:95:CD:09:0E:96:8F:69:AD:5B:39:76:37:38:BB:81
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:42:30:84:b6:5d:ba:e9:f4:df:bd:d7:79:48:c9:05:1c:
         70:b2:8f:e5:34:38:2b:e8:4d:fd:02:3c:97:c5:9e:86:31:d7:
         98:04:45:f7:89:a9:97:b9:a0:2e:88:c7:d4:5f:fe:f0:02:72:
         04:b6:75:a5:a8:b7:cf:33:16:6a:53:40:d6:67:74:2b:7b:fd:
         76:24:33:73:4d:52:1a:74:15:1d:91:1b:36:61:8b:7a:b2:22:
         fc:96:15:62:84:51:e8:31:0e:e4:b3:76:8c:a4:31:0d:18:39:
         46:a6:fa:37:ad:31:b9:82:6e:ba:35:50:0f:88:6f:fc:60:ce:
         d6:84:7a:12:ce:c5:68:e2:89:ae:ac:b8:c4:46:b5:e1:b3:e3:
         0d:cf:2d:fb:80:f2:f4:0d:29:a9:d5:c8:2b:d5:89:58:12:a6:
         1e:80:cb:03:b5:83:17:d7:32:6e:37:db:fa:50:73:46:fa:69:
         83:46:6e:19:b5:d8:44:af:2f:70:2f:14:b1:3f:d1:30:ba:09:
         a6:cd:09:cd:c9:60:a7:53:77:24:61:df:ee:71:a7:62:1f:61:
         0a:b3:be:09:61:cd:d4:c4:b3:25:6b:57:16:7d:7d:08:f8:7b:
         1a:ba:73:e3:da:2c:08:72:eb:33:c0:97:cb:ad:04:bc:35:c6:
         ba:e3:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:06 2025 by rpki-client