Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          ywr1PS+xVIreS8msTzlqxvs6Eu0HPbZwfLk2QECLOu8=
Subject key identifier:   E0:E3:7E:B5:FB:F9:0C:A5:0D:AE:B5:13:83:E5:CF:E4:EE:C8:E0:CD
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       3504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          34D9
Signing time:             Fri 08 Aug 2025 14:32:59 +0000
Manifest this update:     Fri 08 Aug 2025 14:32:59 +0000
Manifest next update:     Fri 15 Aug 2025 14:32:59 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: xG8JmyRzFwVdWaxHyeJ09lNOPq/dqJyk9lUXRuO/eg4=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=)
                          4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=)
                          5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13572 (0x3504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Aug  8 14:32:59 2025 GMT
            Not After : Aug 15 14:32:59 2025 GMT
        Subject: CN=68960a9b-fb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:7a:8c:4f:a1:02:ac:e1:5b:48:13:e8:46:
                    af:88:20:59:45:9c:47:8f:0b:6f:9b:88:bf:c2:a1:
                    e5:fc:6a:6f:db:8d:df:fa:bb:5d:43:ec:b9:fa:c2:
                    ec:10:f6:1a:b7:d0:0c:04:74:cc:a0:62:3d:73:a1:
                    87:f7:32:32:36:76:72:df:6a:08:54:31:c6:2f:28:
                    00:c8:6a:c0:26:78:98:f2:83:b7:b3:5d:7e:21:f8:
                    60:c1:e4:0e:45:35:8b:2b:b7:78:e6:96:e3:c7:7d:
                    5e:d1:75:49:2a:06:78:46:c5:ba:89:14:23:21:7a:
                    e3:84:d2:ea:c1:39:69:43:0b:7b:2f:51:2e:1d:ce:
                    82:0f:cf:99:68:40:11:4c:00:f6:95:3b:4e:0f:89:
                    0f:bd:2e:e6:af:20:56:08:e9:3c:a1:26:b1:f1:92:
                    a8:52:15:4c:16:89:1d:98:01:e1:a8:d7:77:9f:22:
                    2b:0b:8f:57:88:57:d4:e3:20:54:de:43:0e:e6:77:
                    f6:19:c7:33:4e:1d:43:59:9e:6d:ed:32:7f:e8:b9:
                    8f:49:2c:da:bc:af:8d:d4:1f:58:5a:ae:45:a7:60:
                    d0:b8:b5:68:b5:01:a8:8e:32:71:5a:50:2e:81:a1:
                    db:52:bd:b0:c9:a9:97:36:5f:70:d1:b4:64:99:61:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E3:7E:B5:FB:F9:0C:A5:0D:AE:B5:13:83:E5:CF:E4:EE:C8:E0:CD
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:71:96:88:19:eb:8c:d7:7b:35:f1:24:75:0a:07:43:b7:
         9f:3a:a1:05:a7:ed:1c:8a:00:cb:81:a2:f8:c0:96:7f:3f:70:
         b5:ec:cc:51:07:8f:f0:30:cd:37:f9:7b:36:c6:11:03:0b:a6:
         40:96:fc:c7:ba:95:3b:48:b8:db:f9:ab:8b:cb:f0:c8:d1:6f:
         42:78:ce:eb:8e:ad:66:88:d2:30:af:a0:a2:7a:4a:ed:00:f9:
         66:29:7c:35:68:fc:5c:3c:92:79:38:21:8d:b8:a4:f9:1b:0a:
         bc:2a:f6:c6:79:f7:a4:2c:95:4e:00:6a:2d:36:90:3a:e9:8c:
         32:42:5e:cd:27:6d:52:8f:12:d2:3a:7f:a7:ad:e5:c9:71:05:
         26:54:7a:ff:47:df:04:a6:0c:9a:b2:62:2c:18:0a:04:8f:71:
         ec:cd:1f:6d:a5:da:41:f9:70:7c:e1:80:61:dc:30:98:46:a4:
         93:30:86:54:21:40:ee:73:83:ec:a3:73:4a:77:71:7d:1c:13:
         87:02:45:3c:c9:8e:1f:34:87:ae:4f:c3:3d:3d:97:59:fb:ea:
         d2:a2:01:11:8e:ef:8d:8a:9d:8c:32:00:67:92:ca:a5:24:93:
         92:86:70:99:04:0b:0b:13:1b:f6:4d:1a:05:49:52:67:5d:ad:
         c6:d2:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:47 2025 by rpki-client