Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
File:                     EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json)
Hash identifier:          xx46/GjCWENSEfVdtm+jZADStS/EsFILusM0APa6UXw=
Subject key identifier:   93:76:78:4A:45:B1:34:42:00:8F:D7:DC:4F:A9:A5:A3:B2:3E:5D:1F
Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
Certificate issuer:       /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
Manifest number:          0109
Signing time:             Sun 15 Jun 2025 04:15:16 +0000
Manifest this update:     Sun 15 Jun 2025 04:15:15 +0000
Manifest next update:     Sun 22 Jun 2025 04:15:15 +0000
Files and hashes:         1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: izgW+xMR1aAa/+BP/yLOXp+wezJ0dt7nrS2uKLwanfQ=)
                          2: B5E8546EBF2611EE8879BB66C4F9AE02.roa (hash: Ffk69KcnGpR49Ar8hlO4ru2sBWN0PK6gedzkE21rPTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl
                          rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
        Validity
            Not Before: Jun 15 04:15:15 2025 GMT
            Not After : Jun 22 04:15:15 2025 GMT
        Subject: CN=684e48d3-c78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:a9:58:ff:30:d4:83:b2:41:34:a8:0e:f2:
                    72:9c:40:83:de:36:97:0a:92:2f:74:d1:6b:ba:fd:
                    ef:da:06:5a:33:36:ae:b9:25:33:d6:03:1b:e1:a4:
                    68:f4:f7:09:62:c4:72:fd:d7:ed:59:9a:f9:a9:b4:
                    03:71:ad:d9:3c:93:75:8e:12:06:95:1a:b9:63:4c:
                    fd:5e:83:a6:05:76:cb:a1:a0:eb:2f:33:3e:37:e7:
                    e7:8c:36:7e:0a:bb:6b:25:cc:d6:f3:5e:c1:8c:3b:
                    3d:95:94:be:b2:9e:0f:c6:25:cb:07:02:9e:8d:61:
                    57:43:af:3a:4d:af:3f:ac:03:8d:91:01:f8:01:54:
                    76:00:b9:c7:52:16:83:64:d6:5e:fe:4e:e2:a2:f6:
                    2e:2a:71:c0:bc:ad:fe:fa:a2:69:4c:80:ed:d5:d1:
                    fb:30:4e:9a:cf:e3:15:f1:fe:72:fe:94:27:0f:a0:
                    d5:56:be:0b:74:3b:36:a8:47:2f:35:b1:58:9c:97:
                    17:32:27:89:29:0c:7b:7c:19:e2:fe:cd:74:51:33:
                    d5:f9:23:14:88:0f:ea:ab:df:c2:d7:41:0d:ca:c3:
                    53:48:4d:d2:db:aa:d1:27:c7:5c:fa:f4:c4:0d:ac:
                    06:71:95:d5:23:d7:fa:88:3c:4c:7e:e3:3a:ff:a0:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:78:4A:45:B1:34:42:00:8F:D7:DC:4F:A9:A5:A3:B2:3E:5D:1F
            X509v3 Authority Key Identifier:
                keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:bb:6a:70:d5:5f:3e:27:33:84:a2:e7:cb:36:35:ff:c2:
         c0:da:b9:d4:ab:7e:7b:64:37:83:b1:0d:65:13:34:22:f1:29:
         7a:1b:e3:7b:bc:48:4c:80:fd:c3:ff:9d:e7:55:72:e9:3d:3c:
         29:23:0b:86:32:66:4d:35:5f:7c:18:34:94:84:b0:a5:42:4b:
         7d:05:7e:c3:ee:12:5d:7b:4b:69:20:c9:de:95:43:12:ed:cf:
         a9:26:00:ef:88:19:f2:af:64:d6:6d:06:e0:1d:2d:f9:e1:ba:
         97:ad:e6:a7:1e:4e:35:27:7f:ee:0b:5e:49:95:28:2c:ee:94:
         d7:cb:0f:2c:3b:99:fe:50:91:cb:a3:57:32:72:c3:7a:51:a1:
         7a:ff:13:b2:8f:7c:d3:5a:fe:69:4c:14:13:03:d4:b7:25:68:
         d9:ed:3d:03:f5:43:d5:4f:50:8a:19:d6:85:6c:90:f3:c0:59:
         e9:4e:8f:7a:79:2f:27:b5:b5:29:4e:af:ba:e6:fb:57:4d:d5:
         10:de:2d:2e:f9:ff:6b:41:5d:18:a9:fd:e7:54:fd:b2:68:84:
         02:df:0b:85:82:7f:03:ed:f8:37:eb:2a:8d:00:a7:64:de:14:
         6e:89:84:5b:25:e0:ab:69:aa:24:7e:2e:3c:2b:0b:c5:5b:6c:
         15:d9:2a:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERGQ0UxMTAvBgNVBAUTKDEwNDQwMjlGRjgzMTc0QzZGMUQ2NkM4QUQwRDNGQTE2
NjRFRkU1M0IwHhcNMjUwNjE1MDQxNTE1WhcNMjUwNjIyMDQxNTE1WjAYMRYwFAYD
VQQDEw02ODRlNDhkMy1jNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKupWP8w1IOyQTSoDvJynECD3jaXCpIvdNFruv3v2gZaMzauuSUz1gMb4aRo
9PcJYsRy/dftWZr5qbQDca3ZPJN1jhIGlRq5Y0z9XoOmBXbLoaDrLzM+N+fnjDZ+
CrtrJczW817BjDs9lZS+sp4PxiXLBwKejWFXQ686Ta8/rAONkQH4AVR2ALnHUhaD
ZNZe/k7iovYuKnHAvK3++qJpTIDt1dH7ME6az+MV8f5y/pQnD6DVVr4LdDs2qEcv
NbFYnJcXMieJKQx7fBni/s10UTPV+SMUiA/qq9/C10ENysNTSE3S26rRJ8dc+vTE
DawGcZXVI9f6iDxMfuM6/6D2WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN2eEpF
sTRCAI/X3E+ppaOyPl0fMB8GA1UdIwQYMBaAFBBEAp/4MXTG8dZsitDT+hZk7+U7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REZDRS84MEFDNTRDQUJG
MUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRNYngxbXlLME5QNkZtVHY1
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFUUNuX2d4ZE1ieDFteUswTlA2Rm1UdjVUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REZDRS84MEFDNTRDQUJGMUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRN
YngxbXlLME5QNkZtVHY1VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuartqcNVfPiczhKLnyzY1/8LA2rnUq357ZDeDsQ1lEzQi8Sl6G+N7
vEhMgP3D/53nVXLpPTwpIwuGMmZNNV98GDSUhLClQkt9BX7D7hJde0tpIMnelUMS
7c+pJgDviBnyr2TWbQbgHS354bqXreanHk41J3/uC15JlSgs7pTXyw8sO5n+UJHL
o1cycsN6UaF6/xOyj3zTWv5pTBQTA9S3JWjZ7T0D9UPVT1CKGdaFbJDzwFnpTo96
eS8ntbUpTq+65vtXTdUQ3i0u+f9rQV0Yqf3nVP2yaIQC3wuFgn8D7fg36yqNAKdk
3hRuiYRbJeCraaokfi48KwvFW2wV2Spt
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:47:27 2025 by rpki-client