Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File:                     EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier:          GxuJnCsTT+kQNphP4szwVTyUTWMv/haMGg5HAEcMXpc=
Subject key identifier:   BD:DF:D4:86:FB:13:A0:EE:65:8B:F7:FC:9D:81:A1:26:A0:3D:89:DE
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer:       /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial:       207D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number:          2075
Signing time:             Sat 14 Jun 2025 15:56:18 +0000
Manifest this update:     Sat 14 Jun 2025 15:56:18 +0000
Manifest next update:     Sat 21 Jun 2025 15:56:18 +0000
Files and hashes:         1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: WDh7w0ojOaMnkzoDySwpasWAW6N1HNTGMXT3CzfTpSA=)
                          2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: 4cmAc73Ya3K4uXCXYcHrxMilUHhYgfgcQY7RcTrdD4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8317 (0x207d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
        Validity
            Not Before: Jun 14 15:56:18 2025 GMT
            Not After : Jun 21 15:56:18 2025 GMT
        Subject: CN=684d9ba2-6a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:a7:a6:df:de:38:49:44:fc:96:54:57:a3:
                    42:ab:28:66:18:5d:69:45:7f:29:58:33:0e:8c:bc:
                    f1:29:1f:5e:42:d3:cd:3d:1e:86:21:74:79:f3:57:
                    b3:26:d0:75:83:38:96:1a:dd:92:55:d5:61:40:b8:
                    e9:bb:33:a5:f3:89:b3:45:41:22:2f:15:4e:66:51:
                    f7:ab:db:42:52:47:e2:dd:36:27:64:b4:19:fd:ee:
                    b5:9b:70:fb:8b:e8:86:ff:96:ab:6e:82:66:ca:a1:
                    f9:58:cd:20:ca:f0:51:56:78:c9:02:aa:a5:aa:b6:
                    f2:7e:b5:c0:18:01:b2:55:36:f0:27:55:cd:ea:21:
                    3a:88:5b:9b:fd:31:53:21:d4:18:36:66:f3:15:79:
                    35:30:28:7b:56:95:f7:66:0f:7c:03:2d:cc:f2:40:
                    9b:ed:06:5c:f4:bc:df:2f:03:8b:ea:1b:93:7a:db:
                    93:a4:b9:af:f4:62:65:f0:f3:27:d2:a2:8d:de:79:
                    e6:3d:0b:97:77:80:8d:bc:68:39:89:f8:a7:32:65:
                    2c:55:6e:67:60:43:73:bd:4d:19:1a:b3:4b:88:d0:
                    0a:75:30:d9:9f:d1:e6:2e:b0:1d:8d:6f:c6:b4:d4:
                    ac:e4:21:d3:22:b8:d0:e2:9a:3e:dc:71:c2:b5:0a:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DF:D4:86:FB:13:A0:EE:65:8B:F7:FC:9D:81:A1:26:A0:3D:89:DE
            X509v3 Authority Key Identifier:
                keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:5e:85:d7:61:a0:47:f6:58:52:67:e1:01:45:ca:0e:88:
         f1:4f:07:29:21:6b:dd:bd:96:ef:aa:33:17:2c:d3:49:f6:02:
         06:70:f5:e8:14:23:c8:62:a4:0e:7d:4b:7b:8f:b4:f7:62:93:
         fa:ae:c5:aa:e9:4f:49:ca:19:af:89:0e:c3:3f:d5:03:c0:e0:
         28:fb:92:19:cd:2e:44:a5:c3:79:ee:da:e4:bf:75:3f:d9:7f:
         a4:52:7f:76:3b:f2:59:18:59:f6:c5:ac:ab:bc:0c:70:52:95:
         1d:2d:69:a0:40:f5:16:23:ef:9b:b4:de:2f:46:d4:4b:69:db:
         ad:23:12:59:fd:d3:7d:f9:31:80:72:ab:f3:10:6a:03:15:25:
         f4:6c:71:22:f2:d7:9c:0b:81:c6:fa:dc:d2:8c:fb:db:2d:c2:
         f0:90:7a:7f:22:84:20:4a:06:cd:08:64:7f:b5:e9:05:02:61:
         a5:b8:12:a0:49:5d:5f:ea:05:16:ea:15:b7:f8:d0:b0:60:fe:
         64:0a:f3:6e:67:04:bb:29:fb:ff:56:32:49:20:12:fa:1b:f1:
         2b:b2:c2:2d:4c:8d:b1:e5:37:b8:08:8a:2c:34:27:bc:34:fc:
         4d:fe:ca:f4:37:c2:fc:7a:bc:e1:ec:96:88:ae:01:27:2a:5b:
         02:27:60:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB
QzFDM0E1RTcwHhcNMjUwNjE0MTU1NjE4WhcNMjUwNjIxMTU1NjE4WjAYMRYwFAYD
VQQDEw02ODRkOWJhMi02YTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymSnpt/eOElE/JZUV6NCqyhmGF1pRX8pWDMOjLzxKR9eQtPNPR6GIXR581ez
JtB1gziWGt2SVdVhQLjpuzOl84mzRUEiLxVOZlH3q9tCUkfi3TYnZLQZ/e61m3D7
i+iG/5arboJmyqH5WM0gyvBRVnjJAqqlqrbyfrXAGAGyVTbwJ1XN6iE6iFub/TFT
IdQYNmbzFXk1MCh7VpX3Zg98Ay3M8kCb7QZc9LzfLwOL6huTetuTpLmv9GJl8PMn
0qKN3nnmPQuXd4CNvGg5ifinMmUsVW5nYENzvU0ZGrNLiNAKdTDZn9HmLrAdjW/G
tNSs5CHTIrjQ4po+3HHCtQrCMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3f1Ib7
E6DuZYv3/J2BoSagPYneMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw
REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x
aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATn16F12GgR/ZYUmfhAUXKDojxTwcpIWvdvZbvqjMXLNNJ9gIGcPXo
FCPIYqQOfUt7j7T3YpP6rsWq6U9JyhmviQ7DP9UDwOAo+5IZzS5EpcN57trkv3U/
2X+kUn92O/JZGFn2xayrvAxwUpUdLWmgQPUWI++btN4vRtRLadutIxJZ/dN9+TGA
cqvzEGoDFSX0bHEi8tecC4HG+tzSjPvbLcLwkHp/IoQgSgbNCGR/tekFAmGluBKg
SV1f6gUW6hW3+NCwYP5kCvNuZwS7Kfv/VjJJIBL6G/ErssItTI2x5Te4CIosNCe8
NPxN/sr0N8L8erzh7JaIrgEnKlsCJ2Cx
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:13:50 2025 by rpki-client