Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
File:                     EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json)
Hash identifier:          PNPheN3y2Nzi2/AA1AsDdTuUH9yCSbctQqWBM6qYVSE=
Subject key identifier:   58:DD:22:95:77:8E:C8:67:53:CF:23:E0:41:4E:73:5F:2C:E7:F2:FD
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0C38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
Manifest number:          0C27
Signing time:             Tue 04 Nov 2025 18:48:35 +0000
Manifest this update:     Tue 04 Nov 2025 18:48:34 +0000
Manifest next update:     Tue 11 Nov 2025 18:48:34 +0000
Files and hashes:         1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: TYmtS3a1WtwqAEh8TGSTjp3TDueNs1b7yATezaQLJFU=)
                          2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: VwYkO4aw10BWT9DeTWUnPuWdaTnoYansb3oXYCyJ7q8=)
                          3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 0F+0eba6EEMNLZkH8foyD5Z/QmGl/1jnrtcvnRt8Txg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3128 (0xc38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
        Validity
            Not Before: Nov  4 18:48:34 2025 GMT
            Not After : Nov 11 18:48:34 2025 GMT
        Subject: CN=690a4a82-b1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:f5:f1:c7:98:a1:ee:17:e9:14:ce:b7:cd:
                    a6:05:94:73:df:31:58:d5:fc:95:fe:f7:5e:92:4a:
                    dd:35:97:f4:a2:a6:f1:8a:18:11:ec:40:65:10:ff:
                    53:f4:d5:7d:a6:ee:0c:2b:59:b3:a5:22:ff:ec:33:
                    51:7d:6c:23:eb:08:95:17:37:35:f1:f9:ae:69:0a:
                    69:63:78:b8:20:b7:a0:c4:48:83:00:a3:93:63:8e:
                    b3:71:98:dd:13:07:5d:3b:3b:3e:58:5a:42:85:4e:
                    74:c9:2e:8d:64:0c:b1:cb:6c:7c:31:3e:17:25:44:
                    d6:92:dc:42:f3:dc:e1:f5:20:26:46:99:d0:ed:20:
                    0d:2c:2f:34:0b:fd:43:85:ee:07:d0:36:3a:f2:23:
                    32:57:61:6c:7c:d4:95:04:66:36:10:dd:6e:8d:7c:
                    98:a7:f1:ca:90:1b:4c:db:48:8b:bd:8a:8a:43:b4:
                    f5:83:d3:08:dc:2c:48:6c:62:fe:9e:97:6e:d6:18:
                    57:5f:90:b4:85:d9:ad:3e:18:78:1c:61:92:0f:e7:
                    d4:ad:18:68:b8:c3:8f:5b:76:92:c5:5d:bf:93:a8:
                    ce:86:1f:1c:85:4f:79:cd:79:f1:4c:24:28:a8:f8:
                    72:c9:56:f1:a5:bb:18:99:81:15:56:78:a5:7e:d7:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DD:22:95:77:8E:C8:67:53:CF:23:E0:41:4E:73:5F:2C:E7:F2:FD
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:d5:f4:e7:d5:f9:9e:f7:47:48:2f:ea:d2:f6:ea:b7:36:
         b0:55:70:8e:f3:b3:e7:e6:b2:65:10:d3:3e:7d:d5:2d:67:a9:
         94:a0:c1:f0:3f:c1:f8:51:98:50:2b:9c:a7:a9:10:02:32:d6:
         41:68:6e:4e:cc:05:84:05:96:f7:29:a2:2a:af:81:83:34:c6:
         ff:2d:46:17:ea:53:17:6a:b5:0a:01:58:bd:61:3e:f6:d4:9a:
         41:3f:8e:09:bf:da:9f:1a:88:4f:b1:f7:de:bb:dd:7a:60:6f:
         94:52:f1:e9:54:8e:45:fc:bc:ce:28:21:9d:6c:be:77:93:86:
         d9:1d:e5:45:c6:41:87:8d:aa:d2:2b:39:8c:94:a3:1d:c5:7a:
         11:2f:19:0a:3b:d2:02:cb:53:de:c8:4a:ff:3d:70:1e:ce:ab:
         94:ae:fe:25:95:f5:99:a6:9e:cd:af:fb:00:58:57:7d:8d:76:
         46:a1:7c:fb:7b:0c:76:ed:7b:5a:c4:51:a5:ca:8d:4a:33:0a:
         e1:a0:d1:be:fa:9f:81:d3:09:29:60:35:3f:7e:7e:cb:45:65:
         46:19:2c:03:16:3e:f7:f5:f4:de:f1:c1:ed:97:60:c6:22:25:
         33:1a:f4:2b:72:5a:7a:eb:12:ac:43:db:d9:d1:47:ed:f4:a1:
         6f:1e:c7:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy
NzRCOUQxQTgwHhcNMjUxMTA0MTg0ODM0WhcNMjUxMTExMTg0ODM0WjAYMRYwFAYD
VQQDEw02OTBhNGE4Mi1iMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Dn18ceYoe4X6RTOt82mBZRz3zFY1fyV/vdekkrdNZf0oqbxihgR7EBlEP9T
9NV9pu4MK1mzpSL/7DNRfWwj6wiVFzc18fmuaQppY3i4ILegxEiDAKOTY46zcZjd
EwddOzs+WFpChU50yS6NZAyxy2x8MT4XJUTWktxC89zh9SAmRpnQ7SANLC80C/1D
he4H0DY68iMyV2FsfNSVBGY2EN1ujXyYp/HKkBtM20iLvYqKQ7T1g9MI3CxIbGL+
npdu1hhXX5C0hdmtPhh4HGGSD+fUrRhouMOPW3aSxV2/k6jOhh8chU95zXnxTCQo
qPhyyVbxpbsYmYEVVnilftc0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjdIpV3
jshnU88j4EFOc18s5/L9MB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB
NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4
OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCy0dX059X5nvdHSC/q0vbqtzawVXCO87Pn5rJlENM+fdUtZ6mUoMHw
P8H4UZhQK5ynqRACMtZBaG5OzAWEBZb3KaIqr4GDNMb/LUYX6lMXarUKAVi9YT72
1JpBP44Jv9qfGohPsffeu916YG+UUvHpVI5F/LzOKCGdbL53k4bZHeVFxkGHjarS
KzmMlKMdxXoRLxkKO9ICy1PeyEr/PXAezquUrv4llfWZpp7Nr/sAWFd9jXZGoXz7
ewx27XtaxFGlyo1KMwrhoNG++p+B0wkpYDU/fn7LRWVGGSwDFj739fTe8cHtl2DG
IiUzGvQrclp66xKsQ9vZ0Uft9KFvHsfq
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:14 2025 by rpki-client