Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File:                     EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier:          7U9SeB3AtxsDOajmNi/A1HVvzbCju2Wse7Vga29e8pU=
Subject key identifier:   0B:B7:69:9A:2F:B6:06:FC:90:9F:43:B7:F0:77:E4:75:4B:76:E5:62
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number:          87
Signing time:             Tue 17 Jun 2025 05:32:25 +0000
Manifest this update:     Tue 17 Jun 2025 05:32:25 +0000
Manifest next update:     Tue 24 Jun 2025 05:32:25 +0000
Files and hashes:         1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: Vpq1g83ITco+3arxu0VaHhOkhJ66UZlM2T/JrSv5qe4=)
                          2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: SeTQQGcAoZNzDdKTl845UbiLxIJADttYLuIhYuZbrRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 05:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Jun 17 05:32:25 2025 GMT
            Not After : Jun 24 05:32:25 2025 GMT
        Subject: CN=6850fde9-fd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:ac:94:4e:e0:d5:6a:9f:a9:75:70:12:35:
                    ab:de:51:25:56:13:37:8c:c5:aa:24:a3:16:5a:e8:
                    48:db:a0:89:d7:24:49:37:51:4b:15:05:9b:27:97:
                    c3:95:9e:7c:07:e7:92:97:ad:de:7b:19:c2:fa:b4:
                    9a:d3:16:98:bb:ec:75:14:77:4a:64:54:b6:07:25:
                    48:b5:60:51:2e:12:78:43:8a:5a:00:52:1b:39:c4:
                    b1:02:0e:bf:b5:b4:0b:81:71:3c:41:86:b2:3d:88:
                    f0:ed:7e:b0:de:04:93:04:b2:b4:5c:9c:ec:30:82:
                    91:dd:56:2d:ac:40:a1:9a:a3:14:e2:19:0e:d1:5b:
                    3c:a0:b6:c1:0f:f5:6b:7d:52:92:24:62:b5:12:56:
                    a9:3d:40:b0:f7:29:af:42:10:d7:83:ef:07:da:63:
                    16:1c:85:db:3d:74:30:1c:b4:d8:de:64:ef:28:9a:
                    7f:94:a8:62:f8:3f:0b:f5:84:23:65:2b:a3:3b:ee:
                    2f:2a:f4:af:8b:a7:57:1b:e5:38:f5:0f:33:28:d1:
                    7f:9e:ed:2a:a0:55:42:61:0f:23:5e:1b:c9:c5:5c:
                    36:63:f5:ac:9c:a2:ae:58:6f:25:33:ce:03:b5:b3:
                    ec:21:4f:64:2b:f2:f3:c3:31:cd:de:54:1d:91:62:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B7:69:9A:2F:B6:06:FC:90:9F:43:B7:F0:77:E4:75:4B:76:E5:62
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:a3:58:be:98:6b:d4:5d:cc:86:1d:9d:c4:f8:2c:0b:15:
         dc:4a:2e:5e:a9:04:ab:e8:0f:a1:0f:a4:61:cf:cb:d0:af:06:
         d0:6a:43:2f:e7:b6:ae:09:f4:89:b5:29:5b:fe:f8:99:ec:7b:
         74:81:87:cc:64:ad:a3:52:02:9b:fd:31:d7:a1:15:bc:98:4f:
         84:d1:8f:50:cd:3b:6f:76:f8:bd:e4:10:81:3a:63:f4:29:e9:
         53:e5:4a:f5:f5:f9:5f:b8:5e:39:7b:00:f4:9d:d0:d4:0a:69:
         75:11:88:77:d3:b9:81:2f:2f:3d:85:e3:50:a2:c8:6a:0b:39:
         28:0d:d7:63:fd:2d:15:bb:8f:91:11:65:16:26:e2:d2:d0:4c:
         92:8e:a5:ea:83:01:e9:72:ab:40:26:ab:4f:a5:dc:a2:ac:c6:
         72:1c:79:37:28:7a:08:9c:8c:df:f9:d2:77:02:8c:5a:ec:12:
         83:8b:9c:94:ac:8b:5f:4f:c8:eb:16:e9:32:e0:78:b4:2f:e0:
         2d:48:b1:c5:e8:bc:b6:93:ce:0d:2f:db:24:65:74:4a:0c:ee:
         b9:b3:d6:e4:c2:0b:90:24:60:97:e5:d0:45:87:9e:fe:f3:e6:
         5e:da:ad:be:e8:5a:18:67:d1:96:c7:26:70:70:da:b7:1c:58:
         55:f4:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:05:53 2025 by rpki-client