Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          /c8FpkN5Rk25tCI5hmw38fXa2PX5d1+9IRqJ/cfBjY8=
Subject key identifier:   78:09:20:14:45:B2:CA:B3:49:55:D5:38:0E:B2:8C:B9:88:F4:54:0A
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       10BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          10AF
Signing time:             Sat 18 Oct 2025 17:54:48 +0000
Manifest this update:     Sat 18 Oct 2025 17:54:48 +0000
Manifest next update:     Sat 25 Oct 2025 17:54:48 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: ksB8GWr+xfHGMFeFetYa1kClPQsr4qTZvU2yuVgQqxM=)
                          2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4282 (0x10ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Oct 18 17:54:48 2025 GMT
            Not After : Oct 25 17:54:48 2025 GMT
        Subject: CN=68f3d468-1577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:b1:22:bf:e3:7c:22:ee:81:9d:29:04:fb:
                    e2:24:cb:61:82:aa:43:fc:33:39:ad:d0:65:2c:ef:
                    5c:ce:90:dd:07:20:d6:0f:da:72:41:25:21:63:10:
                    53:39:8e:8b:11:39:d9:20:67:08:55:80:87:6d:c0:
                    49:aa:50:14:ad:f6:9e:f9:e7:62:04:1c:f5:49:17:
                    b8:66:fd:25:e6:c8:8a:e5:46:b8:61:39:ca:62:57:
                    e3:71:0b:73:f2:31:0d:f2:5a:07:e9:4f:85:6a:00:
                    a9:60:1a:20:33:9c:79:dc:d3:76:ed:52:68:2f:a1:
                    e2:0d:2a:d9:7c:41:7a:4c:10:53:74:41:e7:96:c7:
                    34:74:f6:ca:83:de:d5:f2:0d:ca:f1:e5:18:83:c3:
                    ce:c7:f3:57:01:e7:47:81:bb:81:e5:52:48:e3:3b:
                    10:91:b0:96:f3:6a:79:2d:de:89:b8:89:f2:4b:3c:
                    19:81:0e:ca:33:2a:7d:32:82:4d:3a:75:8c:2a:f5:
                    20:85:c3:d7:df:6d:08:a5:f4:31:18:f6:bc:cb:f2:
                    a8:51:be:5d:71:3c:f6:60:4e:b5:eb:20:e2:85:b9:
                    8e:4a:2c:35:e3:c5:8c:a6:6f:fc:3a:f9:b8:4c:82:
                    06:a0:08:23:8f:a0:c1:3e:12:0d:5e:c0:00:f1:51:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:09:20:14:45:B2:CA:B3:49:55:D5:38:0E:B2:8C:B9:88:F4:54:0A
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:34:3f:34:61:74:0e:b3:56:57:d1:95:c6:a5:2c:7c:96:62:
         a2:c6:44:75:93:b8:f7:de:05:90:88:e5:0c:43:5a:50:68:2f:
         7a:27:2e:89:6d:60:82:8b:02:c5:28:dd:8c:57:30:ef:d8:aa:
         dc:58:b5:67:19:af:bb:18:83:ae:ee:1d:d8:ef:14:5e:05:c0:
         06:e6:e6:19:df:be:a2:6f:21:d7:75:7c:97:df:34:2a:5c:80:
         2b:d2:1d:ef:f0:41:8c:7d:a0:d2:35:ea:66:15:e6:fb:30:8a:
         2e:67:ed:35:46:8a:1e:07:5c:35:3b:93:b9:71:d9:b0:8f:89:
         af:1d:73:bc:6d:a7:10:45:9f:81:76:74:bc:e8:30:97:65:04:
         ba:07:e9:d5:e9:f5:dd:20:ef:ce:a9:f2:fe:61:26:2e:d5:f9:
         a7:54:60:fd:aa:ed:7d:62:70:ec:26:9c:a5:1e:31:50:8f:53:
         5f:ec:3c:df:e4:bf:c8:31:65:c6:69:70:ea:fc:8a:99:87:a5:
         fe:03:85:7d:2d:23:dd:1b:95:1a:35:37:46:1d:3e:11:ff:b2:
         74:aa:9f:41:3a:76:3d:b1:c9:7e:02:47:d1:ea:28:25:86:6a:
         48:39:96:d2:25:25:fe:a8:dc:15:76:95:9e:4a:05:bf:9e:54:
         96:40:ce:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICELowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5
OUM3RjNDNzUwHhcNMjUxMDE4MTc1NDQ4WhcNMjUxMDI1MTc1NDQ4WjAYMRYwFAYD
VQQDEw02OGYzZDQ2OC0xNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0qyxIr/jfCLugZ0pBPviJMthgqpD/DM5rdBlLO9czpDdByDWD9pyQSUhYxBT
OY6LETnZIGcIVYCHbcBJqlAUrfae+ediBBz1SRe4Zv0l5siK5Ua4YTnKYlfjcQtz
8jEN8loH6U+FagCpYBogM5x53NN27VJoL6HiDSrZfEF6TBBTdEHnlsc0dPbKg97V
8g3K8eUYg8POx/NXAedHgbuB5VJI4zsQkbCW82p5Ld6JuInySzwZgQ7KMyp9MoJN
OnWMKvUghcPX320IpfQxGPa8y/KoUb5dcTz2YE616yDihbmOSiw148WMpm/8Ovm4
TIIGoAgjj6DBPhINXsAA8VF+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgJIBRF
ssqzSVXVOA6yjLmI9FQKMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB
UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4ND80YXQOs1ZX0ZXGpSx8lmKixkR1k7j33gWQiOUMQ1pQaC96Jy6J
bWCCiwLFKN2MVzDv2KrcWLVnGa+7GIOu7h3Y7xReBcAG5uYZ376ibyHXdXyX3zQq
XIAr0h3v8EGMfaDSNepmFeb7MIouZ+01RooeB1w1O5O5cdmwj4mvHXO8bacQRZ+B
dnS86DCXZQS6B+nV6fXdIO/OqfL+YSYu1fmnVGD9qu19YnDsJpylHjFQj1Nf7Dzf
5L/IMWXGaXDq/IqZh6X+A4V9LSPdG5UaNTdGHT4R/7J0qp9BOnY9scl+AkfR6igl
hmpIOZbSJSX+qNwVdpWeSgW/nlSWQM42
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:18 2025 by rpki-client