Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          mouRJjul/dBKB7HS0sDZh+6YfAka7IGexPfk4TCmdqk=
Subject key identifier:   5F:98:47:9A:4B:38:58:4B:78:10:BD:AF:61:75:08:19:D3:C3:5C:3B
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       0833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          0819
Signing time:             Sat 28 Jun 2025 20:31:35 +0000
Manifest this update:     Sat 28 Jun 2025 20:31:35 +0000
Manifest next update:     Sat 05 Jul 2025 20:31:35 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: ZABCaWLGkNxfSzUlnK7o6E0O32hIgsROPjc7r4Z8ZNM=)
                          2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=)
                          3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI=)
                          4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=)
                          5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: B74A200MEGtzjKLkG19+x2nWM7IOpN8G2t0B9881Biw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Jun 28 20:31:35 2025 GMT
            Not After : Jul  5 20:31:35 2025 GMT
        Subject: CN=68605127-00b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:ac:7b:52:e4:e1:16:cc:90:80:be:a4:60:
                    88:f3:2d:34:7d:11:92:35:41:90:e1:bc:55:7f:64:
                    e2:89:ba:48:0d:c6:7a:ae:cb:86:95:2d:69:31:7a:
                    88:d8:be:cb:18:98:89:9d:be:79:7d:46:10:97:e3:
                    9e:7d:18:4b:56:9c:16:24:5d:bd:0c:c5:7e:e3:02:
                    db:96:d4:5c:33:fe:d1:ff:97:5b:82:e5:01:15:f9:
                    d7:85:bd:ae:68:18:e0:e0:ba:b3:94:80:0a:71:2f:
                    d7:21:02:4c:0c:28:d5:24:27:66:a1:51:d3:f0:30:
                    5f:51:2f:c9:98:44:89:f5:80:9c:68:f2:d8:5c:c2:
                    01:f9:ed:eb:4c:fe:17:44:8c:47:e8:1a:06:80:0a:
                    1a:40:96:1b:a2:4d:f1:fe:fd:3c:0d:cb:88:d2:b0:
                    0d:63:ff:d3:66:bc:27:b5:2d:79:b6:1a:1c:7e:7d:
                    b6:d7:54:e8:e2:e3:85:ee:00:c9:50:04:e9:eb:f3:
                    a2:8c:2d:13:73:1b:69:c2:6e:d4:8a:e2:79:5c:00:
                    a1:07:3a:62:95:15:ac:4d:70:64:c1:d4:01:4a:b6:
                    78:f0:7b:08:5e:1e:f0:49:2d:c8:82:45:11:63:77:
                    b1:36:d0:8e:3c:57:4b:fe:e5:49:a9:ad:a3:05:fe:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:47:9A:4B:38:58:4B:78:10:BD:AF:61:75:08:19:D3:C3:5C:3B
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:fb:65:24:23:ed:2c:bf:aa:16:50:bf:2e:b2:8f:c5:60:
         c9:fa:dd:c5:95:4f:21:c0:e7:25:4b:d9:ff:39:88:61:3e:2d:
         16:39:49:bc:35:56:1f:ae:ea:77:55:a8:4e:1f:d0:97:e7:18:
         ca:19:22:c4:18:36:e3:26:af:1b:5d:83:13:49:24:2b:8d:c9:
         83:da:f7:3e:22:3e:2f:52:a3:6e:3e:90:98:2a:cd:39:c8:17:
         20:11:c7:30:e8:3d:30:06:8e:eb:61:11:e9:e6:34:54:a7:97:
         60:52:46:18:a8:2d:6c:e6:d2:2b:f3:81:e5:b7:82:9b:b4:be:
         48:dd:ab:bd:3d:e6:47:bc:69:07:10:29:2a:ff:a7:b2:8a:44:
         cb:06:78:9c:fb:4d:cc:3b:b1:2b:50:ac:d5:82:e9:c3:2c:5a:
         9a:5f:c6:7e:0b:fc:f3:c9:e2:83:de:f5:7d:e0:a7:54:67:06:
         7a:e8:93:ea:cb:ab:e2:cb:f6:e9:9f:74:ff:aa:9e:05:ca:63:
         63:43:75:0d:e5:6d:1a:e2:f7:2e:fb:23:cf:4d:82:24:e2:95:
         a9:b2:d2:a4:19:a9:52:a2:f2:b4:b9:d5:c6:02:67:90:2f:18:
         ed:e3:2e:cb:da:e0:19:e8:a9:02:8d:c4:21:c2:a1:12:37:1f:
         b7:bc:bd:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2
OTQ5RUJFQzIwHhcNMjUwNjI4MjAzMTM1WhcNMjUwNzA1MjAzMTM1WjAYMRYwFAYD
VQQDEw02ODYwNTEyNy0wMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ayse1Lk4RbMkIC+pGCI8y00fRGSNUGQ4bxVf2TiibpIDcZ6rsuGlS1pMXqI
2L7LGJiJnb55fUYQl+OefRhLVpwWJF29DMV+4wLbltRcM/7R/5dbguUBFfnXhb2u
aBjg4LqzlIAKcS/XIQJMDCjVJCdmoVHT8DBfUS/JmESJ9YCcaPLYXMIB+e3rTP4X
RIxH6BoGgAoaQJYbok3x/v08DcuI0rANY//TZrwntS15thocfn2211To4uOF7gDJ
UATp6/OijC0Tcxtpwm7UiuJ5XAChBzpilRWsTXBkwdQBSrZ48HsIXh7wSS3IgkUR
Y3exNtCOPFdL/uVJqa2jBf48KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+YR5pL
OFhLeBC9r2F1CBnTw1w7MB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE
RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6
N0I2VWE4RVBnVGRwU2V2c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChHvtlJCPtLL+qFlC/LrKPxWDJ+t3FlU8hwOclS9n/OYhhPi0WOUm8
NVYfrup3VahOH9CX5xjKGSLEGDbjJq8bXYMTSSQrjcmD2vc+Ij4vUqNuPpCYKs05
yBcgEccw6D0wBo7rYRHp5jRUp5dgUkYYqC1s5tIr84Hlt4KbtL5I3au9PeZHvGkH
ECkq/6eyikTLBnic+03MO7ErUKzVgunDLFqaX8Z+C/zzyeKD3vV94KdUZwZ66JPq
y6viy/bpn3T/qp4FymNjQ3UN5W0a4vcu+yPPTYIk4pWpstKkGalSovK0udXGAmeQ
Lxjt4y7L2uAZ6KkCjcQhwqESNx+3vL2f
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:45:18 2025 by rpki-client