Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.mft
File:                     eunVrFs9BnJZUcHdpUTv0rjvbus.mft (raw, json)
Hash identifier:          BWSwiESezssKO0pGg8oimeWJ0C9mmnd4iwKPo7UJV+o=
Subject key identifier:   B2:B3:11:35:DF:4C:E0:19:FD:64:93:14:D9:59:AF:32:01:E9:40:6C
Authority key identifier: 7A:E9:D5:AC:5B:3D:06:72:59:51:C1:DD:A5:44:EF:D2:B8:EF:6E:EB
Certificate issuer:       /CN=A9197277/serialNumber=7AE9D5AC5B3D06725951C1DDA544EFD2B8EF6EEB
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eunVrFs9BnJZUcHdpUTv0rjvbus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.mft
Manifest number:          0153
Signing time:             Mon 03 Nov 2025 04:11:58 +0000
Manifest this update:     Mon 03 Nov 2025 04:11:57 +0000
Manifest next update:     Mon 10 Nov 2025 04:11:57 +0000
Files and hashes:         1: eunVrFs9BnJZUcHdpUTv0rjvbus.crl (hash: QUNIBC5IQAjKM1Q5CH1NGa5TFzt6KFbxKA94TIXv8/A=)
                          2: 2EE29686B57211EEBB68526DC4F9AE02.roa (hash: 1S+tDZ3oGz8vt8WMwOaNqMob8vw4//uKoksHe6qpn/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eunVrFs9BnJZUcHdpUTv0rjvbus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277, serialNumber=7AE9D5AC5B3D06725951C1DDA544EFD2B8EF6EEB
        Validity
            Not Before: Nov  3 04:11:57 2025 GMT
            Not After : Nov 10 04:11:57 2025 GMT
        Subject: CN=69082b8d-4622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:d0:a6:6b:93:f5:e7:8c:e8:ac:8f:7c:38:
                    b3:44:50:00:dc:0b:84:bc:8c:19:72:08:07:4d:39:
                    da:80:51:72:e4:25:8f:1d:02:bb:9a:97:e6:e8:54:
                    7d:58:47:7d:4e:c2:0c:d2:00:8c:db:ca:30:23:75:
                    fa:6c:1f:1b:3c:0e:36:8c:51:1e:aa:8d:1c:a5:3d:
                    f6:cf:88:21:39:bd:b7:dc:cd:ad:6c:a3:0a:37:55:
                    7a:4d:2b:66:f1:8f:85:ce:5c:af:21:15:ff:75:c1:
                    f7:7b:44:20:21:2e:57:eb:12:25:a1:d9:1f:7c:8f:
                    37:01:96:2f:36:7f:5f:45:a1:52:dc:6a:db:1f:9e:
                    88:c7:72:b6:f1:a9:17:af:db:e7:a2:72:61:d5:dd:
                    4c:6a:66:ee:76:98:fe:45:46:dc:e2:5c:40:e4:ba:
                    2c:b5:8f:87:6f:56:9e:5c:ee:82:7c:9e:35:7d:a1:
                    e0:ad:2f:fb:0d:3f:9d:1a:02:ce:23:e1:dc:2d:62:
                    df:9a:0f:98:ee:2f:b1:e2:cd:a7:c8:c9:a4:cc:cf:
                    38:e7:53:7d:2d:2b:23:d4:95:d7:b8:5f:78:38:ff:
                    57:eb:bf:2c:54:06:82:0c:12:94:1c:ed:67:d3:61:
                    f7:ea:71:17:44:0e:6a:f6:2c:36:83:b0:2d:98:9f:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B3:11:35:DF:4C:E0:19:FD:64:93:14:D9:59:AF:32:01:E9:40:6C
            X509v3 Authority Key Identifier:
                keyid:7A:E9:D5:AC:5B:3D:06:72:59:51:C1:DD:A5:44:EF:D2:B8:EF:6E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eunVrFs9BnJZUcHdpUTv0rjvbus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:31:06:1d:b9:6a:8f:00:e3:e2:c7:6f:2d:a0:53:08:6d:8a:
         ce:55:39:c0:95:59:d2:34:e6:ed:76:0c:43:17:51:84:67:86:
         36:06:71:1d:59:5b:ae:79:23:8e:f0:f3:58:fb:57:81:4b:bb:
         47:ff:0e:b5:67:34:bf:de:10:7b:ba:e0:1b:e5:e3:20:f8:94:
         ee:35:22:a0:fb:dd:3d:53:20:5f:42:95:fb:0c:ac:3d:c6:11:
         82:4e:61:aa:82:cd:8a:b7:77:06:f8:8b:9c:7f:bb:11:39:f1:
         78:71:4b:6d:ca:e3:55:96:7d:0a:21:83:20:98:16:7e:5e:50:
         6f:23:02:06:52:15:d5:18:b2:b9:30:c7:ee:ff:1d:d3:07:15:
         59:47:16:db:40:c9:c8:01:b9:e5:a9:76:64:d7:8a:25:6a:2b:
         36:67:7b:ba:3b:3d:96:73:9c:c2:83:b4:f2:1b:50:15:97:12:
         40:73:97:bf:ee:5a:37:6b:d6:d5:0b:47:fb:d9:34:72:0a:3d:
         77:5a:fc:92:04:9e:97:6d:db:19:26:e9:53:c4:d5:c6:38:c0:
         e1:df:71:a2:bc:a2:ec:3d:6b:05:ae:32:ad:1f:e4:68:49:c5:
         a4:74:c3:22:0a:06:36:e7:42:6e:4d:89:17:9a:3c:fb:76:63:
         22:7e:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:08 2025 by rpki-client