Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File:                     EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier:          2yULlMWw2IXk4yI+lX9FtOvSi3+vjiOsDanYNxHVEME=
Subject key identifier:   C6:C8:80:70:07:6E:03:D9:E4:BA:D2:D0:4C:87:8D:73:B5:DA:39:31
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer:       /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial:       0803
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number:          07FC
Signing time:             Tue 04 Nov 2025 14:49:49 +0000
Manifest this update:     Tue 04 Nov 2025 14:49:49 +0000
Manifest next update:     Tue 11 Nov 2025 14:49:49 +0000
Files and hashes:         1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: J/YteEA1Fl+KT2C5EI9+dqAs4bDyIeuzrYQgcal5vJw=)
                          2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: 26p3NboETp7Nj+Pkns8h4o9kiHbewrSxU2XrnHDgX4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
        Validity
            Not Before: Nov  4 14:49:49 2025 GMT
            Not After : Nov 11 14:49:49 2025 GMT
        Subject: CN=690a128d-4b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:a8:f2:3f:07:4d:02:fd:d7:18:7e:ba:41:
                    16:38:70:43:aa:88:94:4c:37:e0:11:f5:15:38:1e:
                    60:0f:00:cd:ab:55:da:4a:8a:a4:77:14:72:3f:df:
                    ee:90:bc:59:6e:62:fb:53:dc:c1:0f:c5:e1:f3:f6:
                    33:34:1e:ca:9f:14:24:5d:e3:f2:e7:0d:1e:9e:1c:
                    78:6b:fc:85:b3:89:a6:43:1b:e8:fc:06:06:f8:55:
                    ed:7c:22:3e:4f:63:b0:c7:01:ef:db:26:2a:f7:db:
                    6a:2b:6b:e5:d2:19:ac:df:04:0f:39:3b:3b:78:61:
                    ac:d2:d6:e8:52:c7:f9:5f:02:e7:07:ee:13:f0:a7:
                    6b:1f:09:49:d8:15:26:a5:c9:3e:50:f7:b6:df:93:
                    56:94:85:2a:8d:ed:47:74:4a:c4:19:ab:d5:ef:f3:
                    42:56:10:3a:b9:14:89:6f:d9:b6:dc:40:bf:ef:c0:
                    55:39:5b:6c:d3:9f:9a:21:a8:a1:9e:df:02:92:9d:
                    0b:ff:23:b2:f2:97:30:b7:1e:bd:1b:32:46:6f:b5:
                    87:a2:30:ce:95:8e:c2:4b:0e:b4:b5:e3:98:62:74:
                    9e:c6:d5:1b:89:e3:be:d3:c8:be:7d:e6:66:87:56:
                    8c:d1:2e:bf:fe:56:8d:8e:2e:0a:2c:79:d8:c9:3a:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C8:80:70:07:6E:03:D9:E4:BA:D2:D0:4C:87:8D:73:B5:DA:39:31
            X509v3 Authority Key Identifier:
                keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:0c:fc:a7:b8:a9:42:5d:ae:9d:22:45:bb:e6:76:2d:ae:
         a9:ff:a5:9a:b7:5f:fb:e4:fe:67:b8:14:b7:df:b0:8d:29:e5:
         12:f3:e2:08:63:08:9c:4b:29:29:a6:28:22:23:73:89:08:ef:
         a1:e0:8a:80:98:a1:0a:be:1e:9d:33:86:bc:93:d2:c5:a0:cf:
         8c:a0:dc:b5:2b:0c:07:74:2f:05:e4:e8:48:98:8d:66:a4:0e:
         91:3e:a1:27:ca:1b:09:9b:13:c0:89:37:c9:30:ba:48:a3:3e:
         7e:ac:e8:d0:36:29:34:c9:96:51:78:b4:ea:8c:b0:f3:4f:21:
         3b:3f:9a:77:2b:d6:06:b9:32:00:32:b4:74:b4:43:d5:49:e8:
         2e:be:63:df:ba:9c:a0:7b:7e:7e:b8:c8:9f:5c:4c:c6:7c:88:
         9d:c9:7b:ba:6d:d7:76:ec:49:c2:12:d9:c7:8f:49:b6:37:cc:
         f5:fb:f1:4b:b0:73:06:1e:da:fd:fd:18:26:d9:9a:11:ab:a6:
         39:2d:cf:a5:e8:3a:58:9f:2a:d5:c7:3c:dc:09:5e:30:17:ae:
         39:d6:40:96:e2:15:94:a2:63:ff:e2:df:e4:58:f6:32:92:66:
         f3:c4:f3:fb:89:ba:69:ae:39:0c:3f:1e:87:25:1d:e8:f3:94:
         60:b4:f5:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx
OTZFRkU4MjYwHhcNMjUxMTA0MTQ0OTQ5WhcNMjUxMTExMTQ0OTQ5WjAYMRYwFAYD
VQQDEw02OTBhMTI4ZC00YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA20So8j8HTQL91xh+ukEWOHBDqoiUTDfgEfUVOB5gDwDNq1XaSoqkdxRyP9/u
kLxZbmL7U9zBD8Xh8/YzNB7KnxQkXePy5w0enhx4a/yFs4mmQxvo/AYG+FXtfCI+
T2OwxwHv2yYq99tqK2vl0hms3wQPOTs7eGGs0tboUsf5XwLnB+4T8KdrHwlJ2BUm
pck+UPe235NWlIUqje1HdErEGavV7/NCVhA6uRSJb9m23EC/78BVOVts05+aIaih
nt8Ckp0L/yOy8pcwtx69GzJGb7WHojDOlY7CSw60teOYYnSextUbieO+08i+feZm
h1aM0S6//laNji4KLHnYyTqjvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbIgHAH
bgPZ5LrS0EyHjXO12jkxMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5
NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp
eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBungz8p7ipQl2unSJFu+Z2La6p/6Wat1/75P5nuBS337CNKeUS8+II
YwicSykppigiI3OJCO+h4IqAmKEKvh6dM4a8k9LFoM+MoNy1KwwHdC8F5OhImI1m
pA6RPqEnyhsJmxPAiTfJMLpIoz5+rOjQNik0yZZReLTqjLDzTyE7P5p3K9YGuTIA
MrR0tEPVSeguvmPfupyge35+uMifXEzGfIidyXu6bdd27EnCEtnHj0m2N8z1+/FL
sHMGHtr9/Rgm2ZoRq6Y5Lc+l6DpYnyrVxzzcCV4wF6451kCW4hWUomP/4t/kWPYy
kmbzxPP7ibpprjkMPx6HJR3o85RgtPV0
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:35 2025 by rpki-client