Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
File:                     euliL4NM9MbPWtGpivB9UBVFpL8.mft (raw, json)
Hash identifier:          qJBRUX/tJx7u7R6GNpOdAJt+K30vvwmTooM7xwKuA9M=
Subject key identifier:   56:2E:1D:6B:56:42:9C:78:48:7F:6E:81:0D:98:56:85:49:CA:43:17
Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
Certificate issuer:       /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Certificate serial:       0A9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
Manifest number:          0A8D
Signing time:             Mon 20 Oct 2025 20:21:49 +0000
Manifest this update:     Mon 20 Oct 2025 20:21:49 +0000
Manifest next update:     Mon 27 Oct 2025 20:21:49 +0000
Files and hashes:         1: euliL4NM9MbPWtGpivB9UBVFpL8.crl (hash: tnae92y1Y5F0QbrI3+9Mhv9l05ky76QUEkbD5cOgHbQ=)
                          2: 53F9A80E8C8C11F0877C6061C4F9AE02.roa (hash: tHI2ZV2W30lsiHLJ0QkTh5JWa/tEoNDCdLp8gmfckPY=)
                          3: 944D40F08C8C11F087CFCD6EC4F9AE02.roa (hash: 0IvXjMJBfm3i6AFy8jbVU3EPInvuKLYUqwk2ObobIMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl
                          rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2714 (0xa9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142661, serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
        Validity
            Not Before: Oct 20 20:21:49 2025 GMT
            Not After : Oct 27 20:21:49 2025 GMT
        Subject: CN=68f699dd-25ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:b4:ed:ce:b6:9e:95:2b:23:50:9a:a7:62:
                    ab:53:56:8c:47:23:21:8e:cb:dc:98:42:40:6a:67:
                    06:ac:2b:46:df:8e:66:67:b5:a6:f5:30:a8:12:56:
                    b0:f1:cd:81:4c:b0:2c:94:df:f5:87:35:a8:f9:64:
                    78:39:a8:a2:67:ea:d0:b9:c7:83:c6:54:eb:43:26:
                    4e:19:d0:60:0b:33:6c:28:78:5d:22:62:9c:56:f4:
                    2f:3d:95:e1:a0:c8:0f:23:b3:d7:ab:f0:0f:61:16:
                    03:18:00:18:bd:ec:eb:f9:9f:9e:d5:aa:a5:59:9f:
                    54:78:66:18:90:82:f4:e7:76:98:59:6b:f8:55:98:
                    42:f9:9f:24:45:22:13:b0:a5:66:80:18:99:77:47:
                    00:e1:8f:39:9d:7b:b2:a7:4a:0f:93:a0:9c:28:3f:
                    db:1f:7b:1e:da:58:70:e7:14:b8:b5:13:93:20:b2:
                    8b:2e:4b:14:0a:bc:19:50:96:42:bc:51:89:73:02:
                    46:3a:4e:2b:c0:18:82:ee:8b:28:9e:55:a2:98:59:
                    28:58:24:d8:e4:b2:89:6a:15:82:6a:41:c2:47:e9:
                    ca:4b:bd:11:57:04:99:52:44:e3:cb:6c:5f:ba:67:
                    58:16:a8:6f:71:7d:94:1a:0e:67:96:59:3c:6a:40:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2E:1D:6B:56:42:9C:78:48:7F:6E:81:0D:98:56:85:49:CA:43:17
            X509v3 Authority Key Identifier:
                keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:89:0f:1c:80:f6:40:ab:a9:e7:99:d6:64:df:d0:8d:12:5e:
         c5:5c:39:18:59:77:3f:5a:ef:a0:93:bd:d2:c6:27:3c:03:83:
         28:89:16:55:f2:4e:f2:2e:88:51:11:53:bc:95:eb:84:8e:29:
         d8:0d:3d:f7:ef:9f:78:3c:b4:a3:9d:33:1a:f0:3a:56:eb:93:
         d8:fb:37:46:b5:16:8a:51:92:0a:bd:d7:63:93:6c:8a:8c:c4:
         ee:a8:14:48:27:c1:2d:40:3b:e2:43:96:db:0d:ea:47:83:20:
         88:23:ee:4a:95:4c:f1:09:ea:d2:d7:09:83:b8:59:6d:97:c0:
         36:5f:f7:29:9d:52:de:bb:53:0f:fc:af:4c:e5:8a:f5:0b:2f:
         66:b0:6f:44:c1:e8:f0:37:62:6f:8c:52:a3:1e:c6:43:1a:e2:
         e1:e9:64:71:5d:f9:31:98:f5:d1:11:d0:1f:01:04:35:b6:15:
         60:7a:34:70:eb:d1:2e:d0:50:1c:0b:bc:56:b5:11:3f:cd:4d:
         23:5d:af:50:77:ac:88:62:7d:7f:39:d9:dd:d3:c0:40:b9:e6:
         52:3a:da:6d:a1:0f:1c:69:47:57:a4:0d:18:9a:d2:69:ee:80:
         c3:46:9f:6b:2d:69:bc:c9:21:c9:15:ac:db:f9:2f:f9:de:e1:
         5e:41:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:16 2025 by rpki-client