Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
File:                     EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json)
Hash identifier:          /yEIU9AkFmIZQR3jH4N9DKBBvDBbR64Aub5UDtz8V7I=
Subject key identifier:   D1:45:3E:BE:BF:FA:75:91:88:38:1E:BD:F8:C2:F7:D7:C7:C6:8C:EF
Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
Certificate issuer:       /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
Manifest number:          0125
Signing time:             Sat 09 Aug 2025 05:10:12 +0000
Manifest this update:     Sat 09 Aug 2025 05:10:12 +0000
Manifest next update:     Sat 16 Aug 2025 05:10:12 +0000
Files and hashes:         1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: nERDtHK04ulH6BJY1+Hx9CM5TtcgBMA0G3dmK0z0G+0=)
                          2: B5E8546EBF2611EE8879BB66C4F9AE02.roa (hash: Ffk69KcnGpR49Ar8hlO4ru2sBWN0PK6gedzkE21rPTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl
                          rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
        Validity
            Not Before: Aug  9 05:10:12 2025 GMT
            Not After : Aug 16 05:10:12 2025 GMT
        Subject: CN=6896d834-63d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:aa:69:4c:76:18:60:8b:d1:cc:51:88:5a:
                    04:9c:11:c2:5e:8d:ea:51:49:02:63:4e:22:52:b0:
                    9b:a0:b7:d0:53:01:d7:77:96:31:3b:30:17:1a:1e:
                    61:08:d8:cc:3d:0b:d1:cd:a0:4b:78:7e:3c:7f:e7:
                    0d:a1:bb:8e:97:44:7d:0a:75:5b:f9:76:a6:dc:37:
                    78:a3:23:eb:f7:e5:17:bf:11:ac:a6:90:c9:ce:9e:
                    c6:a5:22:1c:eb:77:36:68:f6:67:89:aa:5b:cc:25:
                    dd:eb:52:fc:91:b1:a9:0c:ed:a0:1b:37:ce:d9:c5:
                    8c:6f:4f:bc:13:1b:74:a0:88:13:99:6a:35:3c:18:
                    e5:b7:8c:e8:2d:42:a2:c0:f5:9e:89:07:88:8a:d4:
                    a9:0f:63:ab:ae:d2:47:90:2c:b5:1b:53:e4:ee:47:
                    52:69:c5:39:1d:c3:ff:a5:e3:c1:28:82:6f:03:6d:
                    be:89:31:58:b3:d5:17:32:57:12:5b:ba:e9:3f:26:
                    02:b6:94:d2:a3:8f:55:d3:14:6f:cb:3b:ac:7c:e8:
                    72:59:ee:ec:94:1a:3a:8e:6e:77:61:7a:61:a5:a7:
                    ca:88:80:63:7f:d1:57:c4:94:84:9b:51:2e:16:aa:
                    03:ca:79:79:da:f0:9a:6c:37:25:11:62:3f:88:78:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:3E:BE:BF:FA:75:91:88:38:1E:BD:F8:C2:F7:D7:C7:C6:8C:EF
            X509v3 Authority Key Identifier:
                keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:88:66:b6:7d:05:76:f4:ba:fe:13:1e:2f:f4:63:b4:f3:95:
         42:b8:de:1a:20:89:c8:1a:01:39:c3:d1:29:7e:8a:cc:35:e8:
         37:22:09:da:aa:62:69:d9:d2:20:fb:69:28:4a:f9:14:0e:1b:
         a2:74:83:0e:41:57:2d:fb:37:fc:79:7c:34:96:c8:be:6a:d2:
         9e:74:2c:76:40:9d:10:6f:15:50:12:7f:66:c0:10:d0:a0:5f:
         08:31:54:06:4d:ab:8c:bb:59:82:27:77:0e:6d:28:28:8c:f5:
         b3:d8:85:0f:bf:b8:82:eb:8a:5e:41:85:e0:47:99:1e:41:6a:
         21:a7:3c:c8:df:57:1e:4e:cd:53:3b:70:4d:29:81:d5:b6:88:
         21:e8:30:ae:fe:cd:a6:5f:70:31:13:e4:a6:69:1b:e1:34:8a:
         7e:56:43:f1:76:34:95:04:e7:c9:c6:5e:9e:0e:ec:64:f5:a2:
         40:28:ba:93:e8:a4:4a:e4:e1:1e:f9:7b:17:09:12:14:7d:17:
         35:cf:f5:1d:1f:ff:1e:df:43:40:e3:ca:1a:3c:a5:50:65:52:
         4c:2f:28:2c:1b:44:37:19:2d:8f:5b:6b:22:a9:67:0e:e4:cc:
         d8:96:f6:32:56:7b:d9:71:cb:1f:35:05:f4:d5:a5:76:69:bc:
         42:75:1a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:45 2025 by rpki-client