Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
File:                     EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json)
Hash identifier:          58J9LCxevlfjH+0go7RPeH1OZORqWgYI4MpDEXNrenU=
Subject key identifier:   8F:39:49:DB:69:D8:3E:80:72:45:B3:D1:76:63:CE:40:80:99:96:7A
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Certificate issuer:       /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
Manifest number:          01D0
Signing time:             Sun 11 May 2025 01:53:43 +0000
Manifest this update:     Sun 11 May 2025 01:53:42 +0000
Manifest next update:     Sun 18 May 2025 01:53:42 +0000
Files and hashes:         1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: CLTpSDp2fqY4AkX68CDwjUjLb5wUD+de574ZLw3+F5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
                          rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 01:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
        Validity
            Not Before: May 11 01:53:42 2025 GMT
            Not After : May 18 01:53:42 2025 GMT
        Subject: CN=68200326-a228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:d0:7d:32:38:bb:c4:97:60:2f:ec:d9:40:
                    b0:7b:5f:60:d3:41:72:c1:f2:58:58:08:5d:d1:bd:
                    e6:f5:6a:30:83:e8:95:24:45:06:f0:85:82:a0:9b:
                    58:74:11:a4:ae:ec:ae:13:d8:55:8a:0b:66:0b:d7:
                    c9:b5:f6:62:2a:cd:cb:cd:a7:1c:da:99:18:29:93:
                    2f:ff:82:20:8d:6e:a1:2a:65:63:45:2d:6c:20:8d:
                    d1:7a:19:27:f0:9f:2d:65:7e:09:ae:65:5b:5f:d1:
                    53:43:41:97:12:e1:6f:eb:d4:8e:61:4a:6d:ec:21:
                    dd:f1:55:7a:69:db:63:b2:9d:38:16:13:81:b8:f6:
                    90:55:56:0e:64:13:98:24:d0:93:f5:ec:50:08:77:
                    24:f2:7d:2b:2a:c8:e4:50:5f:99:26:01:2e:fe:57:
                    0c:33:ac:4f:9e:48:08:46:e1:ad:b2:7f:cf:64:c8:
                    bb:15:17:b2:fc:ec:8f:b1:48:62:e0:83:fe:4d:e9:
                    ca:b6:75:ba:51:5d:a0:34:7c:a0:80:87:2a:bd:95:
                    93:23:00:05:1a:f5:01:9c:03:96:87:69:eb:3e:fd:
                    0b:91:09:9a:cd:17:42:6e:d2:7e:95:02:90:74:26:
                    11:e8:88:92:0d:95:d8:73:ed:03:5f:54:b4:5c:fd:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:49:DB:69:D8:3E:80:72:45:B3:D1:76:63:CE:40:80:99:96:7A
            X509v3 Authority Key Identifier:
                keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:db:c8:b5:8f:84:b9:a3:5f:20:de:dd:d0:ce:51:9a:47:e3:
         4f:b0:a1:36:fc:2c:b9:ef:ab:5f:ba:b2:68:19:1c:77:00:84:
         3f:97:03:66:5d:90:3e:d1:1e:c4:7c:8d:75:65:34:da:50:75:
         f7:cd:e9:e0:b7:1f:a9:bf:03:3e:85:e2:a9:cb:04:08:02:81:
         6a:b8:c4:bf:5f:58:cb:a6:cb:19:75:8c:d0:24:fb:bf:e7:1a:
         44:ea:92:8f:56:06:0d:4d:06:68:71:6c:76:e7:a9:28:5e:c2:
         cb:7a:9a:12:57:3b:5e:e5:ad:4c:b0:ec:a4:b2:78:09:05:f6:
         4f:f3:20:fd:c9:ce:d9:8d:fb:32:65:37:a9:e1:e3:a5:d0:b2:
         6c:53:38:0c:fd:10:ca:be:42:02:3d:5e:53:aa:08:ab:1d:7e:
         e5:ca:04:3d:b1:78:f9:59:47:59:57:45:06:38:b8:2e:b4:fc:
         7d:c2:09:51:ba:cf:93:9b:89:0a:97:1c:6b:14:0a:1a:ae:74:
         2f:a4:c9:3e:a2:58:57:8b:db:20:f0:51:c4:b4:71:98:7c:92:
         7f:88:9c:7c:99:0e:e3:e0:45:b9:b9:1f:70:80:81:c7:fa:6a:
         eb:bd:de:3e:07:6b:f8:ac:3e:e8:1b:71:fb:3f:6e:e4:cd:c3:
         1a:24:41:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVDOEIxMTAvBgNVBAUTKDExMDRDRTJDNkQ5MUVGOUQ5QTMzOTU2RjA3MzFEOUUy
M0YxM0FGQkUwHhcNMjUwNTExMDE1MzQyWhcNMjUwNTE4MDE1MzQyWjAYMRYwFAYD
VQQDEw02ODIwMDMyNi1hMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SfQfTI4u8SXYC/s2UCwe19g00FywfJYWAhd0b3m9Wowg+iVJEUG8IWCoJtY
dBGkruyuE9hVigtmC9fJtfZiKs3Lzacc2pkYKZMv/4IgjW6hKmVjRS1sII3Rehkn
8J8tZX4JrmVbX9FTQ0GXEuFv69SOYUpt7CHd8VV6adtjsp04FhOBuPaQVVYOZBOY
JNCT9exQCHck8n0rKsjkUF+ZJgEu/lcMM6xPnkgIRuGtsn/PZMi7FRey/OyPsUhi
4IP+TenKtnW6UV2gNHyggIcqvZWTIwAFGvUBnAOWh2nrPv0LkQmazRdCbtJ+lQKQ
dCYR6IiSDZXYc+0DX1S0XP1BRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI85Sdtp
2D6AckWz0XZjzkCAmZZ6MB8GA1UdIwQYMBaAFBEEzixtke+dmjOVbwcx2eI/E6++
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUM4Qi9EODFENTM3MDZG
Q0UxMUVEQkMwMjk0NURDNEY5QUUwMi9FUVRPTEcyUjc1MmFNNVZ2QnpIWjRqOFRy
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VRVE9MRzJSNzUyYU01VnZCekhaNGo4VHI3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUM4Qi9EODFENTM3MDZGQ0UxMUVEQkMwMjk0NURDNEY5QUUwMi9FUVRPTEcyUjc1
MmFNNVZ2QnpIWjRqOFRyNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBk28i1j4S5o18g3t3QzlGaR+NPsKE2/Cy576tfurJoGRx3AIQ/lwNm
XZA+0R7EfI11ZTTaUHX3zengtx+pvwM+heKpywQIAoFquMS/X1jLpssZdYzQJPu/
5xpE6pKPVgYNTQZocWx256koXsLLepoSVzte5a1MsOyksngJBfZP8yD9yc7Zjfsy
ZTep4eOl0LJsUzgM/RDKvkICPV5TqgirHX7lygQ9sXj5WUdZV0UGOLgutPx9wglR
us+Tm4kKlxxrFAoarnQvpMk+olhXi9sg8FHEtHGYfJJ/iJx8mQ7j4EW5uR9wgIHH
+mrrvd4+B2v4rD7oG3H7P27kzcMaJEHq
-----END CERTIFICATE-----
Generated at Mon May 12 18:38:48 2025 by rpki-client