Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File:                     EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier:          qIZcRVtDRobis3w2fo2w3fRe/7DGvQ3YKj7aynmz5zU=
Subject key identifier:   06:3C:C2:7A:8B:6E:A1:7E:CD:1B:A1:E2:25:8E:0A:5A:B4:58:05:6B
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number:          D0
Signing time:             Wed 05 Nov 2025 05:55:58 +0000
Manifest this update:     Wed 05 Nov 2025 05:55:57 +0000
Manifest next update:     Wed 12 Nov 2025 05:55:57 +0000
Files and hashes:         1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: mZ4nz+KnhZ1lo8G87jw3s5+UpdxYcrdxjd+G9pw/VkU=)
                          2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: I6/Xug9sgzfx9zXpY7A6l18h25D10MEv3RG9NdPO5Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Nov  5 05:55:57 2025 GMT
            Not After : Nov 12 05:55:57 2025 GMT
        Subject: CN=690ae6ed-30f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:a5:08:42:ca:68:44:c7:ef:07:9a:f1:bb:
                    9e:c1:2e:4e:39:f3:55:1f:19:6f:33:f5:63:69:e5:
                    bc:df:df:9c:ba:92:45:21:e3:f6:15:88:6e:84:da:
                    e7:63:f8:64:8b:cd:a6:09:99:f7:87:89:9c:ce:b3:
                    06:72:93:1d:f0:92:c6:08:c5:5f:fd:c7:17:08:b9:
                    18:e1:21:ba:08:7a:a7:37:5f:fd:6f:57:f1:b1:e2:
                    83:f7:bc:00:d3:f7:75:0d:bd:49:73:bc:f6:a9:79:
                    7d:1c:7a:e9:52:f0:57:b2:ba:17:75:13:9c:b8:03:
                    eb:4e:c0:29:5a:e4:1a:7a:0f:eb:ed:97:39:41:2a:
                    13:40:b9:86:60:60:f6:da:e9:d9:90:01:6f:cb:a4:
                    6a:cc:5c:01:08:c6:78:3f:80:55:e6:9c:4b:5f:b6:
                    6d:83:52:01:6c:e7:94:d7:5a:3e:24:c1:38:25:1f:
                    40:ee:d9:1e:fc:31:08:44:9f:61:c2:80:2b:cf:46:
                    1e:ee:9d:80:84:19:f3:98:bc:a9:70:fa:bf:91:fa:
                    7b:a5:58:56:e7:03:8f:02:f9:4e:32:db:00:2e:08:
                    a4:c3:50:1c:ff:15:fd:a0:c1:79:5a:6d:79:fa:8a:
                    55:7c:92:f0:ae:82:57:b2:0f:da:4b:e7:23:48:96:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:C2:7A:8B:6E:A1:7E:CD:1B:A1:E2:25:8E:0A:5A:B4:58:05:6B
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1e:9b:35:8f:f1:86:25:27:73:2f:d4:a1:fb:50:25:c3:fb:
         28:1a:ba:ba:21:e4:20:1c:c6:fd:c7:6d:d3:04:47:cf:0c:83:
         55:71:8a:00:f7:77:a4:01:54:e7:45:91:7e:83:50:e7:bd:d3:
         30:9c:8c:53:b5:1b:16:50:1f:8d:e7:da:dc:a0:57:3f:39:52:
         56:c8:2d:a2:ee:9f:a2:58:06:73:67:cc:c8:ae:eb:e8:67:98:
         4d:e8:e5:43:52:91:84:f3:e2:6a:77:7d:58:63:65:6d:5b:5b:
         fc:d0:2f:0b:ff:67:71:b5:64:60:60:c3:d7:7b:df:b2:84:f7:
         0f:77:17:44:3a:99:10:6c:11:75:16:62:91:6e:19:c8:b7:24:
         f9:73:2f:03:bb:60:c8:15:76:f3:70:04:a5:63:ac:32:15:67:
         d8:df:2a:f5:a8:cd:2a:63:d8:88:57:9c:ad:77:f0:1d:73:72:
         6b:8a:cc:78:de:c5:dd:17:a9:6b:c4:a4:af:c2:a5:88:b2:5c:
         32:d7:33:9e:79:62:c4:d7:b9:e4:d3:fa:2a:32:d2:04:c0:6a:
         1f:4c:57:83:4c:14:bd:74:17:0d:04:c9:b9:7f:0c:d0:43:a7:
         c0:31:b3:01:b1:db:71:6e:9d:79:bf:e2:1f:c4:da:a4:24:b8:
         9d:88:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:42 2025 by rpki-client