Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
File:                     EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json)
Hash identifier:          8KnZq7tcMvJV5VSz18nvsgswXS/wPjiGWwwkFt7roWQ=
Subject key identifier:   9D:7F:84:F0:E0:6A:7A:9A:E3:CB:6C:1F:EA:75:22:A5:E9:C9:27:E8
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0BF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
Manifest number:          0BE5
Signing time:             Sat 28 Jun 2025 18:32:46 +0000
Manifest this update:     Sat 28 Jun 2025 18:32:45 +0000
Manifest next update:     Sat 05 Jul 2025 18:32:45 +0000
Files and hashes:         1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: lJ2/17vu77dz8xfyZtQ4ggNM39NW8j+VuFdIH6aMuj0=)
                          2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: VwYkO4aw10BWT9DeTWUnPuWdaTnoYansb3oXYCyJ7q8=)
                          3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 0F+0eba6EEMNLZkH8foyD5Z/QmGl/1jnrtcvnRt8Txg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 18:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3062 (0xbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
        Validity
            Not Before: Jun 28 18:32:45 2025 GMT
            Not After : Jul  5 18:32:45 2025 GMT
        Subject: CN=6860354d-f4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:20:d2:57:cb:0a:65:5b:37:ae:ee:3f:18:
                    16:5f:85:43:57:e7:54:51:67:90:b7:78:5b:4e:69:
                    bd:82:06:96:8b:1a:ee:58:e3:54:c1:0d:bb:73:60:
                    c5:78:3b:fb:1e:67:bd:01:7f:fa:3a:c7:bf:73:b0:
                    21:b6:f4:d6:d2:7c:ee:b6:4c:e7:2b:be:bb:f5:d8:
                    ed:27:dc:18:78:e7:82:ca:8f:79:a1:7d:8d:10:5f:
                    9f:60:0b:17:d3:31:0d:33:63:16:0e:73:d9:7d:42:
                    87:34:71:9c:8e:c7:c0:67:21:6e:4f:5a:d0:de:4d:
                    10:4b:b2:86:76:d2:87:75:ea:3a:37:e6:fe:1c:0a:
                    36:73:1b:6d:7c:a5:26:c2:13:45:d1:39:32:df:a6:
                    d1:43:8f:c7:71:b0:0e:62:60:22:c4:38:41:55:72:
                    7d:c2:a5:5e:76:d3:c3:cb:af:72:21:9d:f4:68:12:
                    aa:54:9b:55:9d:e9:0e:8c:55:f2:7c:21:4c:46:81:
                    b6:69:8e:d6:e4:3a:f0:16:76:89:25:90:37:3c:09:
                    f7:8c:5a:18:cf:91:88:bc:20:79:f9:1e:5f:ea:36:
                    d0:c1:4a:f5:b6:00:b8:06:ba:a8:0e:1e:ad:51:12:
                    34:a0:76:96:3c:48:66:1b:e1:f2:70:51:ba:05:f8:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7F:84:F0:E0:6A:7A:9A:E3:CB:6C:1F:EA:75:22:A5:E9:C9:27:E8
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:21:7f:db:55:55:4a:d0:49:cb:05:7f:26:e8:63:1c:91:8d:
         59:ad:46:86:51:fd:22:46:2b:c7:65:ee:e1:5d:b3:c2:82:51:
         7d:1b:b0:c6:05:14:83:aa:58:b9:77:e0:56:27:12:e6:43:50:
         71:52:d5:c0:83:df:ec:4b:c4:72:66:be:07:99:ff:be:e6:01:
         66:97:54:43:bd:13:7b:c5:61:d1:e4:86:8f:ae:00:d8:6c:c7:
         cb:6e:cd:ce:5b:e1:a9:df:42:f9:40:05:61:4c:27:e7:e7:dd:
         d6:f8:f6:b0:23:2a:bd:8f:53:61:bf:04:76:45:97:9e:79:e3:
         82:06:b9:c9:9e:32:f3:3c:b1:b3:7f:89:d9:6d:9f:f7:46:0a:
         dc:20:ba:2f:4f:23:d4:1f:f5:4d:06:00:ff:57:c2:e6:cf:9f:
         dc:29:09:05:9f:a8:cc:c8:39:f2:4b:5f:31:9a:b0:f3:a6:8b:
         49:be:f6:cc:52:fc:4f:1b:88:73:01:73:a7:09:bf:41:93:e3:
         43:2a:d2:fd:5f:8c:b2:be:49:a2:5e:fa:b4:ba:f0:90:ea:0c:
         00:c7:e7:b2:c9:d3:29:34:e5:b2:f2:ec:b6:7d:57:e5:bf:f6:
         fa:ee:ea:20:c6:38:93:f3:a7:75:fc:6e:78:10:f4:c2:fd:a2:
         e1:99:37:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy
NzRCOUQxQTgwHhcNMjUwNjI4MTgzMjQ1WhcNMjUwNzA1MTgzMjQ1WjAYMRYwFAYD
VQQDEw02ODYwMzU0ZC1mNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxT4g0lfLCmVbN67uPxgWX4VDV+dUUWeQt3hbTmm9ggaWixruWONUwQ27c2DF
eDv7Hme9AX/6Ose/c7AhtvTW0nzutkznK7679djtJ9wYeOeCyo95oX2NEF+fYAsX
0zENM2MWDnPZfUKHNHGcjsfAZyFuT1rQ3k0QS7KGdtKHdeo6N+b+HAo2cxttfKUm
whNF0Tky36bRQ4/HcbAOYmAixDhBVXJ9wqVedtPDy69yIZ30aBKqVJtVnekOjFXy
fCFMRoG2aY7W5DrwFnaJJZA3PAn3jFoYz5GIvCB5+R5f6jbQwUr1tgC4BrqoDh6t
URI0oHaWPEhmG+HycFG6BfiFuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1/hPDg
anqa48tsH+p1IqXpySfoMB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB
NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4
OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjIX/bVVVK0EnLBX8m6GMckY1ZrUaGUf0iRivHZe7hXbPCglF9G7DG
BRSDqli5d+BWJxLmQ1BxUtXAg9/sS8RyZr4Hmf++5gFml1RDvRN7xWHR5IaPrgDY
bMfLbs3OW+Gp30L5QAVhTCfn593W+PawIyq9j1NhvwR2RZeeeeOCBrnJnjLzPLGz
f4nZbZ/3RgrcILovTyPUH/VNBgD/V8Lmz5/cKQkFn6jMyDnyS18xmrDzpotJvvbM
UvxPG4hzAXOnCb9Bk+NDKtL9X4yyvkmiXvq0uvCQ6gwAx+eyydMpNOWy8uy2fVfl
v/b67uogxjiT86d1/G54EPTC/aLhmTfa
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:30:00 2025 by rpki-client