Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json)
Hash identifier:          GnhaJoFVKczPyJOmMWjKKGSG7OQz6ESG7rGgPFCxnVE=
Subject key identifier:   1D:46:E8:5B:8A:E0:80:D1:C8:D5:A7:FF:09:3E:DF:11:3A:42:B1:A3
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       2370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
Manifest number:          235B
Signing time:             Fri 08 Aug 2025 15:54:48 +0000
Manifest this update:     Fri 08 Aug 2025 15:54:47 +0000
Manifest next update:     Fri 15 Aug 2025 15:54:47 +0000
Files and hashes:         1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: UyQfvceO2k6I0J5qrFOP4OF5MIWpIzTbnuL/G+g4qvc=)
                          2: 384962A2709511EFB3C2992DC4F9AE02.roa (hash: 2qRtl+2vbaSdK6Wey0VbloBnqojKQ9B99jR5Bas2V80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9072 (0x2370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: Aug  8 15:54:47 2025 GMT
            Not After : Aug 15 15:54:47 2025 GMT
        Subject: CN=68961dc7-b4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:fa:fc:63:e6:56:00:3b:f0:6d:75:b2:e4:
                    4a:b3:81:fb:ca:d2:55:93:78:dc:48:30:32:ca:14:
                    0a:65:bf:48:19:c6:29:93:ee:d6:0d:9a:87:83:ff:
                    d7:e4:7c:08:33:ed:7a:b2:c1:21:7a:6f:91:6d:db:
                    56:7a:8b:ba:8b:af:89:94:95:98:7a:8b:63:bc:67:
                    48:ad:f6:c5:8d:aa:18:d8:95:20:51:b9:46:73:66:
                    98:b9:ef:80:e3:59:3b:38:04:fe:68:49:b3:c5:b1:
                    97:c5:a2:b7:8e:4f:62:85:b1:83:55:ed:ba:1e:4a:
                    72:0c:ca:f1:40:30:22:fe:97:b3:ae:06:6b:2f:3d:
                    1d:2d:32:89:7e:70:7c:e2:29:3d:9f:0c:8f:31:06:
                    28:d2:4d:a5:af:49:bc:61:ed:1a:be:ec:e7:16:23:
                    b0:b9:3b:96:13:43:72:ff:98:90:31:f6:cc:cb:ff:
                    14:82:7d:83:b4:2e:7e:50:0f:99:ea:f7:9a:f8:dd:
                    85:58:17:b2:e7:28:37:ae:9f:d4:86:25:2a:b4:b4:
                    06:e9:fc:6a:ce:44:37:27:4b:a4:11:1e:8b:fb:d1:
                    66:5d:d1:7e:a9:cb:81:15:7d:5e:0e:da:7e:88:08:
                    d7:7f:d4:d0:bf:f9:d7:2f:16:7b:2c:43:e4:fd:f8:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:46:E8:5B:8A:E0:80:D1:C8:D5:A7:FF:09:3E:DF:11:3A:42:B1:A3
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:89:74:5e:27:95:23:eb:ef:fc:ec:96:28:5f:df:1a:33:
         b1:35:76:12:b6:94:fa:7c:38:ec:1d:90:f4:ff:2c:64:6f:52:
         ce:6d:c2:f7:35:a2:ce:ec:b5:ff:e0:8e:87:0b:d1:96:77:f2:
         9b:0a:c1:63:1b:1c:2d:0c:36:ee:6d:a8:66:8a:bb:e3:b0:0c:
         12:d5:0f:01:06:28:63:dc:83:96:e2:be:a3:ce:7d:08:17:be:
         f8:ee:d8:56:37:2f:7e:24:d6:db:16:f6:86:10:e5:94:c4:6a:
         a2:0d:91:55:27:92:d0:ca:39:1f:59:08:05:9b:81:06:34:1d:
         f9:32:6b:7f:42:2a:9c:5d:77:68:a6:9d:32:02:e4:37:2f:04:
         ee:1d:f7:23:84:89:6b:81:ab:ae:e2:34:9a:5d:98:47:ea:40:
         59:0b:9a:16:81:04:73:a3:96:0e:51:68:31:04:ff:d2:85:25:
         64:d1:c5:91:7d:d4:80:5d:9f:c0:d9:d2:40:9b:de:ad:8c:9c:
         f3:0a:7e:f9:84:18:7d:87:db:e6:db:5b:97:7d:39:c6:95:76:
         a7:cc:11:f7:e3:27:ab:1f:cf:2c:bc:02:d1:8f:55:75:d2:2b:
         c0:da:e3:f3:3a:0b:52:77:be:82:c7:c4:f4:ae:29:ba:4b:21:
         f8:54:99:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg5OTIxMTAvBgNVBAUTKDc5MDE0QTVGMDczMTlGMDQ2MEZDRDA0RkM0QUFBQkND
RTA5RUQzNDQwHhcNMjUwODA4MTU1NDQ3WhcNMjUwODE1MTU1NDQ3WjAYMRYwFAYD
VQQDEw02ODk2MWRjNy1iNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunj6/GPmVgA78G11suRKs4H7ytJVk3jcSDAyyhQKZb9IGcYpk+7WDZqHg//X
5HwIM+16ssEhem+RbdtWeou6i6+JlJWYeotjvGdIrfbFjaoY2JUgUblGc2aYue+A
41k7OAT+aEmzxbGXxaK3jk9ihbGDVe26HkpyDMrxQDAi/pezrgZrLz0dLTKJfnB8
4ik9nwyPMQYo0k2lr0m8Ye0avuznFiOwuTuWE0Ny/5iQMfbMy/8Ugn2DtC5+UA+Z
6vea+N2FWBey5yg3rp/UhiUqtLQG6fxqzkQ3J0ukER6L+9FmXdF+qcuBFX1eDtp+
iAjXf9TQv/nXLxZ7LEPk/fgrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1G6FuK
4IDRyNWn/wk+3xE6QrGjMB8GA1UdIwQYMBaAFHkBSl8HMZ8EYPzQT8Sqq8zgntNE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODk5Mi9GQURCQzU2Qzg3
QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdjeG53UmdfTkJQeEtxcnpPQ2Uw
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VRRktYd2N4bndSZ19OQlB4S3Fyek9DZTAwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODk5Mi9GQURCQzU2Qzg3QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdjeG53
UmdfTkJQeEtxcnpPQ2UwMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFsIl0XieVI+vv/OyWKF/fGjOxNXYStpT6fDjsHZD0/yxkb1LObcL3
NaLO7LX/4I6HC9GWd/KbCsFjGxwtDDbubahmirvjsAwS1Q8BBihj3IOW4r6jzn0I
F7747thWNy9+JNbbFvaGEOWUxGqiDZFVJ5LQyjkfWQgFm4EGNB35Mmt/QiqcXXdo
pp0yAuQ3LwTuHfcjhIlrgauu4jSaXZhH6kBZC5oWgQRzo5YOUWgxBP/ShSVk0cWR
fdSAXZ/A2dJAm96tjJzzCn75hBh9h9vm21uXfTnGlXanzBH34yerH88svALRj1V1
0ivA2uPzOgtSd76Cx8T0rim6SyH4VJmc
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:16:53 2025 by rpki-client