Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft
File:                     EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json)
Hash identifier:          jghSLb3CnZr/tc0+pHlDFbSJ7zq5oSzowdzJw6kNy+g=
Subject key identifier:   0C:01:BA:68:AE:A0:4E:94:60:B8:C7:9F:31:89:42:77:91:31:CE:3E
Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52
Certificate issuer:       /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052
Certificate serial:       12FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft
Manifest number:          12D5
Signing time:             Fri 08 Aug 2025 17:14:35 +0000
Manifest this update:     Fri 08 Aug 2025 17:14:35 +0000
Manifest next update:     Fri 15 Aug 2025 17:14:35 +0000
Files and hashes:         1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: wBVSOYE7PUCz1RGr2+K47RWAhIFjBvqGR+tBY0JyQfo=)
                          2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: ohfZG59sEvFb3B98TJzWsPWyWdsfQxGqekH2JoxH6gQ=)
                          3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: QtJIcs1O/DIjF/Awmfs8kNbcOWbla/g4nCBWN3yn5TE=)
                          4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: 3q5R1J4djCmGk92jrHGge8u1JnUcb5OYOxif13zqZng=)
                          5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=)
                          6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: T7RO7bDELeuxgYKkuydZy/+SJnNf8qDQvOpkzhWcvjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl
                          rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4861 (0x12fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6006, serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052
        Validity
            Not Before: Aug  8 17:14:35 2025 GMT
            Not After : Aug 15 17:14:35 2025 GMT
        Subject: CN=6896307b-e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:db:cb:56:76:21:da:41:05:85:41:a9:63:
                    57:1c:3b:2b:f3:94:60:67:68:13:da:02:97:3e:8d:
                    1f:d7:17:04:26:f4:23:b2:4a:93:7a:05:f0:92:82:
                    76:19:e2:53:e4:ee:9e:1a:f5:4a:05:9a:81:c9:32:
                    2f:83:84:15:0c:ce:a8:e3:16:b4:df:17:ff:bc:25:
                    3a:4d:f0:a5:23:d6:27:a6:d9:12:a6:d5:c6:f4:aa:
                    b2:b4:72:97:11:4d:40:ae:45:d3:ee:f3:42:89:1c:
                    41:09:18:8b:c0:1e:35:5d:53:05:f0:44:1b:7f:00:
                    fc:e2:c8:39:a3:51:12:05:7a:7d:09:e7:14:a2:7d:
                    65:2c:15:64:83:34:a4:06:8b:bf:03:03:c9:93:71:
                    b1:00:57:53:8b:dc:e1:f6:27:c3:58:6b:0d:66:60:
                    b9:57:ba:c0:24:25:3d:80:03:ec:f0:eb:bd:c1:4b:
                    7f:ad:78:10:18:e8:21:36:82:4d:95:40:e1:8a:3e:
                    bd:6e:19:af:5d:2c:03:92:ce:d5:b7:b3:a3:3d:93:
                    94:1a:c4:95:68:04:1a:1a:a3:d5:bf:14:28:fb:aa:
                    8c:fa:b5:4f:da:3f:5d:76:fa:79:35:4f:87:72:07:
                    9a:c1:43:ea:42:76:ae:d4:33:fc:6c:55:ba:26:42:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:BA:68:AE:A0:4E:94:60:B8:C7:9F:31:89:42:77:91:31:CE:3E
            X509v3 Authority Key Identifier:
                keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:d9:4b:1c:bb:b1:16:e4:df:39:8b:4b:14:d5:74:ba:71:
         8c:65:f5:e0:a8:09:1e:37:12:71:69:ee:02:b7:8f:aa:11:e3:
         2b:37:91:95:8f:04:0e:43:80:b1:dd:3d:f6:a7:5d:02:18:48:
         bc:9c:d5:b0:43:33:6b:39:ac:b4:56:da:9b:28:f4:fd:ad:e8:
         5f:6c:3b:0f:6a:91:0d:d8:59:85:94:84:41:06:30:f4:27:43:
         12:1e:de:a3:4e:29:1b:24:ce:1e:68:62:93:a4:ed:f9:96:c4:
         d1:d5:31:0a:ea:63:81:e0:ed:06:fd:5f:c0:f6:8a:6e:73:4c:
         21:ae:6a:27:5a:bd:bb:37:be:59:63:f7:cd:f1:c2:eb:cb:3f:
         9d:d0:0b:88:bc:21:8c:44:61:3f:7f:bf:e2:23:35:d2:ab:f0:
         9d:81:eb:16:4b:2b:b9:6d:5a:7b:bd:b2:2b:31:db:48:c9:fe:
         0f:f8:df:fd:ae:7d:ab:47:19:be:3b:11:03:fc:5a:1e:86:a2:
         9c:c0:f0:af:79:12:cd:90:df:d8:0a:d5:24:1c:8a:5d:3d:54:
         5a:48:d0:31:f8:bb:73:b5:ca:72:a3:94:8e:6d:c1:20:9a:8c:
         61:92:6d:88:e4:85:7a:52:bf:48:38:c9:42:ed:3d:1b:1b:c8:
         c5:fe:a8:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2
NUFCNkUwNTIwHhcNMjUwODA4MTcxNDM1WhcNMjUwODE1MTcxNDM1WjAYMRYwFAYD
VQQDEw02ODk2MzA3Yi1lNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Wrby1Z2IdpBBYVBqWNXHDsr85RgZ2gT2gKXPo0f1xcEJvQjskqTegXwkoJ2
GeJT5O6eGvVKBZqByTIvg4QVDM6o4xa03xf/vCU6TfClI9YnptkSptXG9KqytHKX
EU1ArkXT7vNCiRxBCRiLwB41XVMF8EQbfwD84sg5o1ESBXp9CecUon1lLBVkgzSk
Bou/AwPJk3GxAFdTi9zh9ifDWGsNZmC5V7rAJCU9gAPs8Ou9wUt/rXgQGOghNoJN
lUDhij69bhmvXSwDks7Vt7OjPZOUGsSVaAQaGqPVvxQo+6qM+rVP2j9ddvp5NU+H
cgeawUPqQnau1DP8bFW6JkKSqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwBumiu
oE6UYLjHnzGJQneRMc4+MB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz
RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp
WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcQtlLHLuxFuTfOYtLFNV0unGMZfXgqAkeNxJxae4Ct4+qEeMrN5GV
jwQOQ4Cx3T32p10CGEi8nNWwQzNrOay0VtqbKPT9rehfbDsPapEN2FmFlIRBBjD0
J0MSHt6jTikbJM4eaGKTpO35lsTR1TEK6mOB4O0G/V/A9opuc0whrmonWr27N75Z
Y/fN8cLryz+d0AuIvCGMRGE/f7/iIzXSq/CdgesWSyu5bVp7vbIrMdtIyf4P+N/9
rn2rRxm+OxED/FoehqKcwPCveRLNkN/YCtUkHIpdPVRaSNAx+Ltztcpyo5SObcEg
moxhkm2I5IV6Ur9IOMlC7T0bG8jF/qhf
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:03 2025 by rpki-client