Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft
File:                     eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json)
Hash identifier:          aY/m8+pAcHzjCLcESuHl1Qzr0Z3VkmQpjnm80hebmrs=
Subject key identifier:   1E:DE:E6:FE:5F:7F:98:39:FD:0C:BC:81:ED:36:71:41:64:F8:2C:AE
Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E
Certificate issuer:       /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft
Manifest number:          77
Signing time:             Sun 19 Oct 2025 10:11:38 +0000
Manifest this update:     Sun 19 Oct 2025 10:11:37 +0000
Manifest next update:     Sun 26 Oct 2025 10:11:37 +0000
Files and hashes:         1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: P3bYEj15+BhjWzZGzEgyEvBrrF8//ijTwZ+fxlJxf3M=)
                          2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl
                          rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E
        Validity
            Not Before: Oct 19 10:11:37 2025 GMT
            Not After : Oct 26 10:11:37 2025 GMT
        Subject: CN=68f4b95a-7b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:ff:f7:5d:45:40:73:79:a2:79:7a:33:bc:
                    72:07:b7:b8:e3:ce:48:af:23:b6:c1:35:8e:f9:b3:
                    4c:47:07:4b:99:14:28:dd:2e:02:79:75:a9:42:8a:
                    4e:a6:42:17:39:19:36:6d:26:27:99:3b:37:60:fa:
                    e2:72:a4:5d:ef:3e:4c:ac:22:90:74:c4:2b:f6:9e:
                    d0:2a:95:d3:7e:bd:95:2f:c8:21:61:59:cc:9d:3c:
                    f1:46:61:0c:bf:b1:06:db:2c:42:85:44:32:ea:4d:
                    c7:04:38:76:51:fe:6b:8b:2d:fb:2f:d3:98:8e:04:
                    a6:62:cb:1c:4a:80:6a:46:9e:37:d8:01:c9:f0:78:
                    f4:11:78:ca:a6:af:a1:8e:e1:d3:d5:7e:4f:02:2b:
                    48:2a:1d:4a:ba:f4:03:a6:0d:8a:2f:b8:10:45:e8:
                    ab:fd:5f:ab:d3:db:ad:ce:f3:40:7a:5f:34:7d:28:
                    ff:80:09:80:ca:24:5a:fd:d3:e6:63:10:21:c7:39:
                    0b:e6:34:43:f5:25:26:36:87:c0:bf:b5:bb:af:e9:
                    a6:b7:79:23:cd:60:f7:b7:1b:e2:6d:9a:59:6a:9b:
                    78:ae:6c:c1:13:54:0b:49:71:a2:ba:79:42:a2:b4:
                    2a:60:dc:de:8e:ae:f6:a8:f4:7f:9f:43:d7:96:06:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DE:E6:FE:5F:7F:98:39:FD:0C:BC:81:ED:36:71:41:64:F8:2C:AE
            X509v3 Authority Key Identifier:
                keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:17:c5:65:ec:1e:b9:72:dd:05:53:7b:43:c8:2d:70:6a:ec:
         3c:a0:c4:30:29:c2:2f:ca:23:05:3e:cf:36:5b:11:82:d6:de:
         42:8b:eb:ba:b5:a1:76:93:b1:a5:1e:95:10:3f:3b:42:a2:6d:
         1f:dd:5f:20:76:97:08:51:32:d3:86:54:35:1f:f5:be:56:4c:
         f9:4f:46:4a:6d:8c:b2:6c:0d:61:9b:a4:1c:de:90:5b:eb:2f:
         b5:64:ee:42:46:f7:a3:09:fe:3f:c6:69:94:58:8e:be:c6:1b:
         ba:87:db:77:e1:43:bc:f9:70:a7:34:73:e1:fd:7b:06:73:28:
         a4:aa:2d:af:b3:fc:06:da:51:dd:19:1f:a9:c2:bc:db:fa:51:
         be:7c:49:47:e7:db:1f:6a:89:5d:9c:c2:60:fe:d3:05:16:af:
         c0:c1:69:c5:e3:7e:9d:d5:30:f8:78:18:e0:d4:d7:f4:3c:01:
         26:ce:1d:5e:ab:4f:92:40:87:ee:b6:36:9e:fa:a5:46:7e:ef:
         0d:6c:84:62:99:53:a1:2d:7c:04:b0:cd:5c:59:8e:7f:49:98:
         9c:0b:19:fb:c5:7b:e8:50:2b:b8:46:67:69:f1:2e:66:0e:1c:
         08:68:13:96:c9:3e:ca:33:b7:fb:7a:9c:d5:ce:1d:c1:75:4b:
         79:7d:cd:19
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy
RUI2NjA3RTAeFw0yNTEwMTkxMDExMzdaFw0yNTEwMjYxMDExMzdaMBgxFjAUBgNV
BAMTDTY4ZjRiOTVhLTdiNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmsP/3XUVAc3mieXozvHIHt7jjzkivI7bBNY75s0xHB0uZFCjdLgJ5dalCik6m
Qhc5GTZtJieZOzdg+uJypF3vPkysIpB0xCv2ntAqldN+vZUvyCFhWcydPPFGYQy/
sQbbLEKFRDLqTccEOHZR/muLLfsv05iOBKZiyxxKgGpGnjfYAcnwePQReMqmr6GO
4dPVfk8CK0gqHUq69AOmDYovuBBF6Kv9X6vT263O80B6XzR9KP+ACYDKJFr90+Zj
ECHHOQvmNEP1JSY2h8C/tbuv6aa3eSPNYPe3G+Jtmllqm3iubMETVAtJcaK6eUKi
tCpg3N6Orvao9H+fQ9eWBp1jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHt7m/l9/
mDn9DLyB7TZxQWT4LK4wHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG
RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE
QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow
MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFEXxWXsHrly3QVTe0PILXBq7DygxDApwi/KIwU+zzZbEYLW3kKL67q1
oXaTsaUelRA/O0KibR/dXyB2lwhRMtOGVDUf9b5WTPlPRkptjLJsDWGbpBzekFvr
L7Vk7kJG96MJ/j/GaZRYjr7GG7qH23fhQ7z5cKc0c+H9ewZzKKSqLa+z/AbaUd0Z
H6nCvNv6Ub58SUfn2x9qiV2cwmD+0wUWr8DBacXjfp3VMPh4GODU1/Q8ASbOHV6r
T5JAh+62Np76pUZ+7w1shGKZU6EtfASwzVxZjn9JmJwLGfvFe+hQK7hGZ2nxLmYO
HAhoE5bJPsozt/t6nNXOHcF1S3l9zRk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:44 2025 by rpki-client