Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
File:                     EMapar_laJvHveWr6KZtlSRT-xg.mft (raw, json)
Hash identifier:          RDsbFHgjKrui59MMDawZ8Rdwanq9Czs3TzQbpTPsFeo=
Subject key identifier:   40:77:49:E7:4D:91:81:DB:BC:20:6C:17:53:A1:5D:8D:06:F4:6F:AA
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       12C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
Manifest number:          12A8
Signing time:             Sat 18 Oct 2025 17:35:25 +0000
Manifest this update:     Sat 18 Oct 2025 17:35:24 +0000
Manifest next update:     Sat 25 Oct 2025 17:35:24 +0000
Files and hashes:         1: EMapar_laJvHveWr6KZtlSRT-xg.crl (hash: khE1ls4dNFnmLz/JtQ8hhSL+8CeXo4FZKlx7oQmiYmo=)
                          2: 80CBE32C687B11F0947A4F60C4F9AE02.roa (hash: NLNRuuRp4O6TPXgTBkgEkY0wrWp43aNn3r+hhxQ7qR0=)
                          3: AD8B14E6687B11F086577F60C4F9AE02.roa (hash: /GDzXHMnIAyKmrgPusTCV6N30kxupyh4wJ8T8KHf8+I=)
                          4: F31D6E84951111EFBEBB2926C4F9AE02.roa (hash: RYETi0zkwG+1OYC+IAx2GdRhn5XJnpnss76zM5O7Tmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4800 (0x12c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA, serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Oct 18 17:35:24 2025 GMT
            Not After : Oct 25 17:35:24 2025 GMT
        Subject: CN=68f3cfdc-d789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:a0:2f:45:33:1d:2b:53:45:10:62:75:c7:
                    80:36:0a:27:ba:ab:aa:e7:d3:22:d8:09:d8:a8:ed:
                    01:66:75:82:65:62:1d:38:38:8e:fd:b4:82:26:5b:
                    d1:f6:82:f6:38:ed:ab:8a:de:5c:48:20:f4:2e:77:
                    70:a8:5f:dc:20:d5:7a:42:43:b4:cc:af:0a:9a:19:
                    89:d6:72:ca:ac:5a:4f:13:21:c5:bf:31:ce:69:93:
                    fa:12:4f:e2:04:4d:b3:ee:31:d0:c8:46:c2:56:cf:
                    80:1f:1e:ed:ac:b5:74:4c:9e:1c:c8:40:b7:71:3b:
                    2d:73:c5:7b:7e:a0:36:5e:82:db:c0:73:e6:a4:ab:
                    f3:54:af:71:a4:42:f1:ce:6a:93:4a:62:4a:39:6e:
                    ab:4e:22:da:d3:74:cd:e7:56:b8:5f:57:7e:38:f7:
                    62:74:ce:43:f4:a2:db:1c:c4:07:9e:b2:09:cf:20:
                    d3:3c:da:e2:ee:76:17:e6:44:58:b1:31:fd:8d:2b:
                    34:84:30:62:46:d0:22:b6:7d:6e:42:a9:b7:2f:01:
                    c3:50:b9:0a:e9:d7:08:f3:a3:dc:60:41:0c:38:67:
                    0b:9f:21:f1:b1:b5:d0:08:4e:6a:bf:5f:94:3f:f1:
                    bd:88:65:32:73:0b:97:82:a6:9f:3e:5c:67:6b:da:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:49:E7:4D:91:81:DB:BC:20:6C:17:53:A1:5D:8D:06:F4:6F:AA
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:9d:fc:e8:0d:49:c0:c0:af:e1:6b:c0:ed:10:b5:ab:79:
         db:ef:57:7e:79:5a:7f:ac:2c:2a:b3:7c:60:14:81:08:14:f3:
         db:8f:1c:6d:d2:51:7e:f4:e9:21:0c:13:11:a3:eb:f8:69:40:
         e2:66:54:ba:cf:a8:db:2a:09:2a:52:2f:4d:53:8a:dc:23:f1:
         19:9f:cf:7e:ad:0d:f4:12:af:23:21:bf:d4:ae:b0:05:e6:f6:
         6e:ce:27:74:77:0c:64:61:88:51:05:3a:8c:8d:d3:3f:a0:81:
         c3:cb:4a:8a:98:e8:9c:16:27:c0:57:8e:df:7a:82:86:3a:9f:
         7e:5b:20:ab:9e:a5:59:02:6f:50:88:c3:7d:99:63:29:31:7b:
         a9:0e:90:64:08:76:4d:dc:b1:99:0d:bd:82:c3:08:6e:bc:36:
         cd:89:c9:12:6a:ec:3f:38:3b:89:96:f6:e7:ea:97:5b:fb:7a:
         5d:95:1c:35:92:c3:a4:74:fe:41:5d:31:de:dd:c1:2c:cf:cf:
         2e:6f:83:4b:df:ef:e9:5c:10:5e:f0:1b:4c:52:0a:7c:bc:3d:
         32:16:bf:29:b9:15:14:e6:43:e7:f7:bb:a7:a6:f9:3e:93:ef:
         91:ef:72:48:17:3d:34:7e:67:64:84:7f:8b:e5:35:a2:62:4c:
         10:a7:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:08 2025 by rpki-client