Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          AngXBCWDe7UQNP5KnK+pPxCfTsOFtTb4gkL3iE8TNGU=
Subject key identifier:   64:88:1B:C3:74:18:59:CA:13:D4:85:A1:FE:FB:63:7B:E3:F9:EB:FC
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       05EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          05E6
Signing time:             Thu 08 May 2025 22:47:18 +0000
Manifest this update:     Thu 08 May 2025 22:47:17 +0000
Manifest next update:     Thu 15 May 2025 22:47:17 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: /UL8SiAZcRa8fx02igSqUMkUgoDJzIJ64gPw+4fAOsw=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 22:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: May  8 22:47:17 2025 GMT
            Not After : May 15 22:47:17 2025 GMT
        Subject: CN=681d3476-d317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:12:88:4e:0d:ea:d8:95:9e:d6:08:e0:cb:
                    7d:b6:74:67:74:4d:e2:3e:bd:8f:ef:6a:f4:96:69:
                    de:94:ed:c0:d3:54:05:89:eb:1f:97:bd:46:f5:5c:
                    44:6e:d5:4e:68:37:cb:c7:be:4e:fe:0e:3c:c1:46:
                    62:20:85:be:21:34:6c:99:d5:9e:4b:0a:b2:a0:94:
                    4c:cf:7e:6d:38:ee:e7:9a:57:82:53:d5:be:57:74:
                    20:b2:e7:16:27:4d:5e:35:b3:4d:db:62:6a:ac:2d:
                    03:c5:59:cc:86:9f:c8:1f:0f:0e:d0:fa:8c:62:5b:
                    43:92:42:21:58:7a:b5:f2:ef:7e:d4:58:87:14:a3:
                    40:17:2b:12:98:04:a0:e1:ea:15:6c:1a:ae:48:a2:
                    52:09:a8:2b:e9:40:54:16:e5:78:14:47:4b:d9:0c:
                    af:78:9d:16:9b:3e:8a:35:ef:5a:3e:e7:02:ef:43:
                    57:74:60:f9:7a:98:83:6d:b1:15:a7:c4:0d:f4:b4:
                    39:64:06:98:f9:56:ef:c8:22:4a:18:2c:05:3b:0f:
                    2f:db:db:8f:84:a2:85:61:00:b3:72:cb:7b:28:0d:
                    09:94:a4:9f:7c:05:fa:c5:10:04:4d:67:5d:a6:54:
                    fa:f0:ce:fb:70:c4:5a:8c:2f:8d:88:dd:96:5b:ab:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:1B:C3:74:18:59:CA:13:D4:85:A1:FE:FB:63:7B:E3:F9:EB:FC
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:80:c9:b1:77:5e:8d:af:64:88:96:e2:f7:5f:ae:90:42:18:
         a2:df:a1:0c:14:11:2b:cb:10:09:c8:46:d1:70:b3:ff:c2:dc:
         bf:35:85:f5:39:74:0e:54:b1:e3:7b:f4:ac:43:da:52:28:0c:
         ee:72:3c:a9:26:1f:27:44:4c:b2:e2:b2:b4:e7:67:07:9a:93:
         6d:fd:74:87:79:84:1d:58:66:cd:eb:5c:7e:7b:a7:d8:4a:29:
         be:45:db:96:f9:5f:55:35:d1:fc:bf:39:37:0e:43:c0:2a:87:
         a1:32:a1:27:a1:6f:2f:a6:c6:6d:9d:d2:41:31:01:0c:70:42:
         7e:dc:33:9f:69:48:09:68:e2:e7:22:8e:9e:37:70:76:d4:90:
         87:32:24:2c:ca:2e:63:74:ce:b9:e7:c8:c2:71:cf:33:34:0b:
         c4:af:c0:37:85:93:6f:59:a7:71:8b:6d:28:e7:75:b1:8e:95:
         ce:24:d7:5c:13:34:66:e9:85:b8:8e:68:7c:dd:48:3e:3a:f4:
         59:e6:bc:3a:a2:07:fe:e0:04:80:7f:1a:78:f7:95:c9:51:17:
         4e:17:d4:0b:17:4e:4d:b8:1b:c0:8c:07:ac:5d:b4:eb:25:96:
         98:f0:4c:41:db:4f:a5:b6:9e:2c:05:36:3a:66:fe:39:e0:55:
         11:6f:82:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz
RUQxOTY3OTgwHhcNMjUwNTA4MjI0NzE3WhcNMjUwNTE1MjI0NzE3WjAYMRYwFAYD
VQQDEw02ODFkMzQ3Ni1kMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz98SiE4N6tiVntYI4Mt9tnRndE3iPr2P72r0lmnelO3A01QFiesfl71G9VxE
btVOaDfLx75O/g48wUZiIIW+ITRsmdWeSwqyoJRMz35tOO7nmleCU9W+V3QgsucW
J01eNbNN22JqrC0DxVnMhp/IHw8O0PqMYltDkkIhWHq18u9+1FiHFKNAFysSmASg
4eoVbBquSKJSCagr6UBUFuV4FEdL2QyveJ0Wmz6KNe9aPucC70NXdGD5epiDbbEV
p8QN9LQ5ZAaY+VbvyCJKGCwFOw8v29uPhKKFYQCzcst7KA0JlKSffAX6xRAETWdd
plT68M77cMRajC+NiN2WW6vlHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSIG8N0
GFnKE9SFof77Y3vj+ev8MB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG
NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt
OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAgMmxd16Nr2SIluL3X66QQhii36EMFBEryxAJyEbRcLP/wty/NYX1
OXQOVLHje/SsQ9pSKAzucjypJh8nREyy4rK052cHmpNt/XSHeYQdWGbN61x+e6fY
Sim+RduW+V9VNdH8vzk3DkPAKoehMqEnoW8vpsZtndJBMQEMcEJ+3DOfaUgJaOLn
Io6eN3B21JCHMiQsyi5jdM6558jCcc8zNAvEr8A3hZNvWadxi20o53WxjpXOJNdc
EzRm6YW4jmh83Ug+OvRZ5rw6ogf+4ASAfxp495XJURdOF9QLF05NuBvAjAesXbTr
JZaY8ExB20+ltp4sBTY6Zv454FURb4Jo
-----END CERTIFICATE-----
Generated at Sat May 10 13:15:59 2025 by rpki-client