Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
File:                     eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json)
Hash identifier:          axP0iPOxWPf3Q47yk0BwALT9owbw1OUCB95Rezda6ww=
Subject key identifier:   DB:94:2E:14:9D:90:A4:B7:96:29:D7:E2:8D:58:E5:37:9D:17:2F:F5
Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79
Certificate issuer:       /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
Certificate serial:       34F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
Manifest number:          34E6
Signing time:             Tue 04 Nov 2025 15:09:01 +0000
Manifest this update:     Tue 04 Nov 2025 15:09:01 +0000
Manifest next update:     Tue 11 Nov 2025 15:09:01 +0000
Files and hashes:         1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: aZgZWvRpwzz0hwgXZHVOPGK4Mi50P7kw10ohknSdT8c=)
                          2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: X9eXSdNteijjOyH5Tq4HYgNjanvwxWhbUObPceXYMyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl
                          rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13556 (0x34f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91775B7, serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
        Validity
            Not Before: Nov  4 15:09:01 2025 GMT
            Not After : Nov 11 15:09:01 2025 GMT
        Subject: CN=690a170d-e805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:b0:7a:0a:7c:c2:63:22:f8:63:b8:a7:b8:
                    ab:cc:94:a5:ce:e4:6d:00:cd:9d:a5:cb:84:a8:ae:
                    8f:34:fc:32:86:f7:df:59:13:09:7d:4d:b7:8d:f5:
                    fd:53:a3:ed:2b:9d:68:dd:ec:b4:59:70:cc:68:de:
                    a8:d4:bd:23:9d:1b:ae:53:e2:0a:2f:65:d5:47:9b:
                    33:ff:1d:0d:60:1f:4a:5d:83:3a:3d:3a:42:b9:20:
                    fa:d2:b6:aa:60:df:8c:0d:63:5d:af:39:b7:ee:c5:
                    1c:5f:3d:70:6b:17:a9:20:a9:4e:bc:23:1f:14:4d:
                    ac:d0:79:40:bb:ff:b6:e7:7d:98:5b:ea:59:eb:a8:
                    ff:fe:31:16:50:3d:7f:73:fd:5c:be:e2:41:33:25:
                    fe:fc:16:b8:65:a4:d2:a8:5b:f0:c0:9a:6f:bb:ed:
                    14:00:5e:01:02:96:c3:da:f9:70:ca:3e:6f:a7:e2:
                    53:6d:63:a4:b7:a7:c1:67:bd:ff:72:88:18:a7:f5:
                    dd:65:87:88:98:a3:23:65:d9:47:1d:a0:8a:22:3e:
                    fb:4c:f6:2a:0f:17:4c:5d:fb:ff:03:b8:97:54:32:
                    d4:6d:60:79:4f:02:76:3c:7f:2a:c3:58:29:ce:53:
                    22:6d:76:e8:c3:07:be:d4:18:36:af:27:66:23:99:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:94:2E:14:9D:90:A4:B7:96:29:D7:E2:8D:58:E5:37:9D:17:2F:F5
            X509v3 Authority Key Identifier:
                keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:8d:49:d3:87:2e:9b:e4:9d:f8:1d:cd:91:24:2c:b9:f6:
         61:83:1b:14:42:97:2a:8c:af:3d:7b:c7:2b:1f:55:11:8f:e5:
         0f:c9:60:a8:0c:3b:42:85:be:5f:7d:cd:5b:5e:0b:8b:d1:38:
         7b:99:77:0a:4a:3f:52:3c:86:05:da:7b:d7:b9:51:55:06:8d:
         59:6c:4f:aa:d3:6d:90:82:42:0c:7a:12:17:63:b7:98:d2:5d:
         4c:12:2a:ff:b4:1e:5f:53:c5:9d:ba:c7:43:f6:6b:c4:85:5f:
         f3:07:4e:bd:57:f3:d8:28:9d:28:18:6d:1e:76:63:39:ad:ea:
         93:58:f4:0e:9b:4c:3a:ab:e0:c6:00:72:a8:fe:32:cc:00:72:
         fa:04:fa:23:94:e1:e3:69:3c:21:a5:51:ba:e1:ad:9b:de:4e:
         5f:aa:1d:6e:68:ff:4d:ad:a0:5e:4b:70:1b:4a:e0:79:59:d5:
         d8:86:df:ce:8d:36:ee:52:e1:e1:b7:2c:f9:0b:0a:03:32:64:
         99:3c:41:a0:a4:02:fe:5f:db:5c:ac:36:be:48:d8:b0:72:52:
         1b:db:4b:bb:66:cc:4f:1a:3a:04:e9:68:95:ab:e3:d4:c2:f3:
         f9:f1:35:eb:55:be:4e:be:96:ad:7c:95:d9:48:ce:6d:09:dc:
         c0:1d:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:09 2025 by rpki-client