Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File:                     EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier:          62+UHyeVRdggO02hpz2X2nFmouBq9kWY39paAamXswY=
Subject key identifier:   E4:17:37:C1:EE:A0:71:3E:C6:A3:0F:B6:A3:FC:C2:DA:11:4A:5F:07
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number:          06C6
Signing time:             Fri 08 Aug 2025 22:29:00 +0000
Manifest this update:     Fri 08 Aug 2025 22:28:59 +0000
Manifest next update:     Fri 15 Aug 2025 22:28:59 +0000
Files and hashes:         1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: gnZx//PFEpujeJB2GLJNbb84GC2SELT3t2pV/D/FnDQ=)
                          2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: GwGIG8w2Paja8QeJTC/4mPTw5xBTF4eu77tf9+sFGXE=)
                          3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: mUNLSSwDIjdC6PSsJdAOAQiuBxAVwe81C3tB9ntlwCU=)
                          4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: WSWSmKF2Dr04+H2IY6+uuwpQnhp2M2KysyXEj72OLxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Aug  8 22:28:59 2025 GMT
            Not After : Aug 15 22:28:59 2025 GMT
        Subject: CN=68967a2c-3529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:3a:de:8d:28:f3:95:78:a5:c9:2c:00:d2:
                    e8:a7:95:21:2d:14:65:24:6b:4f:29:a0:07:ab:e4:
                    c5:dc:da:ae:6e:94:6b:f4:03:d4:4f:03:d4:07:e9:
                    90:53:e6:bc:d1:a6:d5:bd:f3:ba:a5:e7:d6:fb:f8:
                    25:16:ad:5a:b8:b6:79:46:16:64:a3:52:53:fe:3a:
                    8b:b5:ca:6d:5d:38:fa:79:a4:19:87:9f:1b:cb:76:
                    72:f0:45:d2:d6:3e:80:49:e4:c6:10:6c:71:c2:ac:
                    97:ac:2d:b9:81:b5:4c:91:a2:63:eb:13:ff:25:c5:
                    a5:51:dc:f4:7e:88:0e:f4:15:7c:30:ae:d3:d4:98:
                    df:27:50:64:c2:d4:e8:dd:53:53:0c:18:8e:2f:16:
                    a6:a7:fc:ac:33:cd:94:24:61:60:e7:03:fd:21:93:
                    02:da:41:a9:9f:b6:41:4b:f8:6c:1d:c6:94:c4:1a:
                    15:17:20:29:7b:45:6c:b8:64:23:75:7b:38:a7:26:
                    02:15:59:8d:41:71:6b:f8:d1:70:07:c2:55:8a:88:
                    9e:3f:93:7d:83:fd:11:ad:05:78:a8:13:19:f9:83:
                    ce:a0:1f:2a:e2:c0:56:85:93:57:c1:f2:9c:2a:e4:
                    08:4b:64:7e:b6:11:37:99:95:c3:06:66:3c:24:0c:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:37:C1:EE:A0:71:3E:C6:A3:0F:B6:A3:FC:C2:DA:11:4A:5F:07
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:be:17:ff:5a:2a:97:2e:24:39:3c:1e:b7:31:34:ea:c9:
         92:0c:d8:4a:29:bb:48:39:c2:32:a9:55:2b:4d:aa:2b:46:60:
         ab:2b:36:57:c1:8a:41:7b:99:df:0c:48:37:78:90:54:84:62:
         b8:56:fa:5f:5b:db:1f:d7:d4:ca:c3:de:35:0b:82:2c:33:c1:
         c9:73:e7:09:7c:be:30:15:15:ce:9e:99:a8:78:db:3a:d0:e9:
         c6:ee:7f:f2:74:47:97:03:c7:9c:48:85:ef:74:ed:05:b0:e9:
         dd:26:77:18:01:52:50:33:fe:b0:1c:a9:7b:c1:9f:47:e7:7a:
         66:d5:ee:27:15:9e:b2:68:b5:f2:c6:d2:70:d0:27:37:db:2d:
         cc:e1:7e:f0:f8:00:30:b7:54:1d:c3:d4:53:49:57:af:71:45:
         d3:83:10:f8:dc:63:eb:ba:eb:01:ce:6a:2c:16:d4:48:43:ac:
         9f:44:28:6b:ac:58:47:30:0d:fa:7d:a3:ae:e2:83:bd:90:7e:
         78:7b:67:12:f4:ed:c9:c9:a5:ff:1e:ba:ae:33:2a:67:d0:6f:
         38:76:bc:e7:7f:14:75:1a:c4:c8:54:b7:04:38:ee:ea:26:c2:
         ab:40:59:b1:16:11:18:c2:67:87:1c:ae:f3:ea:a5:b1:7e:eb:
         f0:a4:7c:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2
MzY0MEJDOUEwHhcNMjUwODA4MjIyODU5WhcNMjUwODE1MjIyODU5WjAYMRYwFAYD
VQQDEw02ODk2N2EyYy0zNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDA63o0o85V4pcksANLop5UhLRRlJGtPKaAHq+TF3NqubpRr9APUTwPUB+mQ
U+a80abVvfO6pefW+/glFq1auLZ5RhZko1JT/jqLtcptXTj6eaQZh58by3Zy8EXS
1j6ASeTGEGxxwqyXrC25gbVMkaJj6xP/JcWlUdz0fogO9BV8MK7T1JjfJ1BkwtTo
3VNTDBiOLxamp/ysM82UJGFg5wP9IZMC2kGpn7ZBS/hsHcaUxBoVFyApe0VsuGQj
dXs4pyYCFVmNQXFr+NFwB8JVioieP5N9g/0RrQV4qBMZ+YPOoB8q4sBWhZNXwfKc
KuQIS2R+thE3mZXDBmY8JAwp8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQXN8Hu
oHE+xqMPtqP8wtoRSl8HMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB
OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG
M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvjb4X/1oqly4kOTwetzE06smSDNhKKbtIOcIyqVUrTaorRmCrKzZX
wYpBe5nfDEg3eJBUhGK4VvpfW9sf19TKw941C4IsM8HJc+cJfL4wFRXOnpmoeNs6
0OnG7n/ydEeXA8ecSIXvdO0FsOndJncYAVJQM/6wHKl7wZ9H53pm1e4nFZ6yaLXy
xtJw0Cc32y3M4X7w+AAwt1Qdw9RTSVevcUXTgxD43GPruusBzmosFtRIQ6yfRChr
rFhHMA36faOu4oO9kH54e2cS9O3JyaX/HrquMypn0G84drznfxR1GsTIVLcEOO7q
JsKrQFmxFhEYwmeHHK7z6qWxfuvwpHwb
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:46 2025 by rpki-client