Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
File:                     EU3kpq3-T6GGFcVHcV67T_WUbvY.mft (raw, json)
Hash identifier:          YWi8GHD0tL2wpdPsMHujTQZeCWeYRmWW1A0ttNIHAL8=
Subject key identifier:   62:5F:E0:D5:14:32:D9:8D:8E:9B:C5:B1:06:B6:D1:C5:65:33:84:A8
Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6
Certificate issuer:       /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
Manifest number:          0185
Signing time:             Wed 17 Sep 2025 04:06:34 +0000
Manifest this update:     Wed 17 Sep 2025 04:06:33 +0000
Manifest next update:     Wed 24 Sep 2025 04:06:33 +0000
Files and hashes:         1: EU3kpq3-T6GGFcVHcV67T_WUbvY.crl (hash: VBQd6Z0Ikrlus9UsUmiCS4FH7/d0TVwBNVXJNddC6Ic=)
                          2: AA15C0AEE84311EE8683D32CC4F9AE02.roa (hash: yuRBt0z2GkF5H4ZbsyGbH4wIDriWm9Wns8YyYPbQ6Ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl
                          rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91530ED, serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
        Validity
            Not Before: Sep 17 04:06:33 2025 GMT
            Not After : Sep 24 04:06:33 2025 GMT
        Subject: CN=68ca33ca-db63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:96:7e:1c:df:ac:41:bf:14:69:59:df:a1:
                    e6:69:77:3e:c0:84:7e:8a:0e:85:70:72:4c:77:6c:
                    ba:2f:99:46:71:32:d5:31:8d:96:1a:56:aa:8a:63:
                    ff:f6:1a:ff:43:8a:d1:dc:64:16:ea:45:30:2d:22:
                    86:6a:38:29:cd:8f:1c:73:1f:d1:b3:a5:75:1d:67:
                    a4:63:85:62:2b:b7:2c:1d:23:a2:5c:a5:25:9e:dd:
                    a6:0f:c7:a1:cb:0f:66:fe:02:1b:58:40:15:6e:35:
                    25:64:08:54:31:49:b9:ec:a3:11:28:b0:00:c2:86:
                    13:5d:b5:7a:11:37:2a:27:65:61:6d:05:ab:32:76:
                    e4:4d:67:49:13:6b:3e:db:11:bb:8b:21:12:c0:dc:
                    6f:09:21:f8:93:8e:19:e6:b6:17:7a:48:bc:f9:ba:
                    29:7e:32:b0:f7:0b:8c:47:3b:41:64:60:aa:0e:92:
                    9c:98:fa:1c:40:d0:54:a2:57:91:02:78:a2:55:16:
                    eb:7b:41:b8:c2:62:50:20:e0:a1:d1:1b:ea:b5:b6:
                    0e:8a:8d:c6:8c:9c:0c:18:7e:79:27:9f:01:39:04:
                    fe:cf:9c:2e:a4:fd:7f:db:08:bc:2c:dc:69:f5:89:
                    c2:d4:3b:86:71:57:99:f4:68:24:3f:90:35:46:e3:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:E0:D5:14:32:D9:8D:8E:9B:C5:B1:06:B6:D1:C5:65:33:84:A8
            X509v3 Authority Key Identifier:
                keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:95:dc:cf:c4:e8:45:c1:42:09:76:90:0a:10:b1:0f:d5:
         d5:fc:b0:5f:9f:85:0e:b6:0e:23:e3:cb:63:b4:ce:d3:07:07:
         d5:c0:76:4c:55:8d:06:e2:10:82:67:cd:22:4c:8c:4a:3e:69:
         11:82:aa:7a:33:d2:8e:f9:72:a3:84:3d:a0:01:84:bc:6c:cc:
         c0:3b:7b:af:d1:c9:13:64:03:fc:51:06:ea:05:e2:37:d4:ac:
         a8:92:61:ca:ec:50:e4:25:1f:83:f1:49:a0:27:1f:30:6d:18:
         c6:f0:6f:6e:6c:0a:e3:23:cf:be:95:4b:62:a6:6f:70:31:ce:
         7a:26:72:6a:4a:25:b4:8e:ef:ce:b6:df:81:cb:93:74:93:53:
         8b:1d:c1:02:90:00:15:8d:95:a1:ad:54:a8:ad:ba:a7:0a:0b:
         a0:85:40:65:00:54:90:be:3c:71:c8:62:7d:87:7d:52:58:e4:
         f5:96:0c:ea:85:19:01:7f:86:01:0e:da:86:47:11:b0:2b:e8:
         aa:f2:7d:18:81:dc:67:6b:46:53:e5:1b:cc:fe:96:d8:6b:98:
         d6:d2:3f:66:a6:64:7f:f2:0d:f3:a8:ee:72:a2:72:0c:db:45:
         34:64:3b:fa:49:07:3c:e9:ca:9b:c1:ca:63:ca:1d:d8:7b:08:
         be:43:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:58:31 2025 by rpki-client