Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File:                     eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier:          gn34D77jvrxXuVkjOovpXHSWtnoeksouA7kG4u5Zh24=
Subject key identifier:   E1:B9:2A:62:6D:9E:8B:6A:2D:BA:DF:AF:F2:5E:A6:36:DE:C9:5D:E8
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number:          0205
Signing time:             Sat 09 Aug 2025 02:41:21 +0000
Manifest this update:     Sat 09 Aug 2025 02:41:21 +0000
Manifest next update:     Sat 16 Aug 2025 02:41:21 +0000
Files and hashes:         1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: LD4hSCyTBCt/yk0rZSY5SgY3z+VRMryxoZG90jBhdS4=)
                          2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: lL1Uo6lKBPims7sIcK6Rx8lWBhL0RLQ4pwqUL45ZkTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Aug  9 02:41:21 2025 GMT
            Not After : Aug 16 02:41:21 2025 GMT
        Subject: CN=6896b551-fd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:9d:e7:e6:37:b4:ac:77:17:72:d4:56:88:
                    4c:d7:da:3f:99:49:df:2a:00:b8:a2:e6:22:c9:bc:
                    3a:84:e2:0c:4d:01:d5:5c:80:76:e1:5c:c3:a1:47:
                    85:5c:14:86:92:76:37:0b:9d:fb:aa:6c:76:bf:ac:
                    29:af:12:45:e8:a2:c1:71:a8:b1:6d:4b:ab:e2:58:
                    86:23:de:54:0d:f8:3d:cc:82:0c:ee:3e:3b:fd:63:
                    50:f0:e5:09:eb:23:4f:c0:ba:0c:ba:81:80:f5:c2:
                    a7:9e:d4:5a:8b:e3:d6:c6:e0:7e:75:7c:1d:0e:dd:
                    db:1b:0c:59:cf:18:8d:97:3e:5b:24:39:a9:a0:93:
                    30:9f:e6:64:1b:2d:64:68:b8:0f:83:2c:5f:62:df:
                    fa:44:1c:4e:e8:2f:b6:2a:88:90:6e:e0:2c:16:41:
                    d5:a2:2e:a4:f1:66:2f:02:ba:f9:ce:15:2b:de:fb:
                    ac:c2:a5:92:7a:2e:04:12:77:31:09:d1:a7:a9:5a:
                    6c:16:1d:1f:1c:be:2a:43:eb:84:12:c9:3b:7a:f3:
                    0f:c3:cf:da:03:ba:87:f8:15:92:77:4a:94:42:96:
                    87:6b:a1:68:5a:3e:38:89:e6:8e:35:98:f3:18:1a:
                    a8:f1:1c:3d:dc:cf:e2:d3:72:83:04:77:5a:1a:36:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B9:2A:62:6D:9E:8B:6A:2D:BA:DF:AF:F2:5E:A6:36:DE:C9:5D:E8
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:61:ca:ce:ce:57:d0:a2:31:ef:fa:ae:fb:78:1d:5a:4f:
         d4:5b:03:21:e7:d0:f1:e2:19:ef:d8:76:73:75:95:57:34:c2:
         ac:df:b2:e0:1b:4d:7a:46:e9:cc:5a:4f:e7:a6:0b:8d:05:b0:
         0d:4d:78:ad:8a:9d:22:f4:f1:e4:dc:ff:c9:c6:3d:94:2c:61:
         92:53:b9:db:b8:64:e3:52:e8:e7:d8:a3:42:bd:de:c7:47:ed:
         59:2c:da:7a:16:1a:00:71:bb:ef:08:3b:b7:62:28:68:02:bc:
         24:c9:a8:b0:dd:a4:66:76:b0:d0:45:4e:6c:33:e0:f9:9a:af:
         25:54:12:65:f5:1d:bf:cd:07:9b:9e:bd:86:b8:5f:3a:87:19:
         ba:11:c1:2c:b2:68:4b:1c:71:27:e2:2d:6d:69:3e:e0:b9:92:
         6c:c2:24:7b:64:9f:e1:34:c0:ad:62:ed:a6:f6:d9:24:4b:03:
         1f:7f:fa:5a:a0:ec:27:8d:8d:fd:e5:6e:43:9a:67:8b:c0:7a:
         a1:c6:cd:84:23:18:b3:2f:1c:9d:bf:b8:e0:28:26:9b:10:c6:
         a1:e1:5d:d7:57:65:89:7f:dc:1c:b4:78:4d:7f:cd:51:bc:d3:
         9f:69:95:0d:b8:6d:8f:83:c3:4c:84:7b:64:1f:59:4e:11:7a:
         5d:a1:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:23 2025 by rpki-client