Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
File:                     EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json)
Hash identifier:          WxH2ThW8kDlcLa7QLa/ZkTF1PzjNzJbzjEW8RU8U2J4=
Subject key identifier:   FF:D7:32:34:B0:0C:3B:11:CB:A3:94:89:1C:9C:A2:E9:F9:F5:C4:A7
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Certificate issuer:       /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
Manifest number:          01EB
Signing time:             Tue 01 Jul 2025 03:01:41 +0000
Manifest this update:     Tue 01 Jul 2025 03:01:41 +0000
Manifest next update:     Tue 08 Jul 2025 03:01:41 +0000
Files and hashes:         1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: BvgCEU1ZzTTT/3tFPIJz3HLTW6MlLFaUSrZ2I2ARcCo=)
                          2: 4B9461EE360211F0B340176EC4F9AE02.roa (hash: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
                          rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
        Validity
            Not Before: Jul  1 03:01:41 2025 GMT
            Not After : Jul  8 03:01:41 2025 GMT
        Subject: CN=68634f95-96fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:06:01:d5:9d:7d:44:a7:8e:8a:5f:af:58:
                    85:40:be:b5:3a:bf:75:54:2e:0a:18:66:0d:23:48:
                    9d:db:e0:ae:c1:0e:9f:9f:b9:46:86:ed:38:c1:95:
                    0d:ca:89:e5:5f:cd:d4:40:f0:bc:21:a7:ed:c7:b5:
                    d8:f1:e9:8e:92:1a:fa:96:84:f2:5b:ef:0f:38:ac:
                    47:6c:48:41:77:ef:9b:fc:02:fc:23:44:0f:ac:28:
                    76:a4:b5:8b:b6:64:4c:fc:4d:e4:72:44:68:8e:d5:
                    94:92:91:0d:c5:71:a7:62:75:33:75:e2:1e:0a:2e:
                    27:c3:c8:fe:0b:bc:54:ff:0b:ef:c1:42:13:03:e6:
                    65:8c:c8:ba:f1:9f:9e:55:49:04:e0:96:0b:43:85:
                    bb:12:9e:c9:72:2b:72:bd:2f:ec:6c:14:9a:ff:b8:
                    81:64:25:48:c1:92:72:ce:e5:ba:0c:ad:8c:05:be:
                    cf:bc:9b:4b:77:4c:33:b5:a2:78:84:30:28:49:7a:
                    77:54:49:6e:92:fc:52:92:2d:a5:15:42:af:1f:03:
                    2d:0f:ab:60:0b:d7:16:6d:0e:a6:b0:0b:ea:9b:36:
                    bf:a5:82:b9:ef:58:a8:87:94:f3:77:50:9d:c8:1f:
                    51:17:4d:02:4d:a7:b5:1f:80:d6:00:82:8e:d0:0a:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:32:34:B0:0C:3B:11:CB:A3:94:89:1C:9C:A2:E9:F9:F5:C4:A7
            X509v3 Authority Key Identifier:
                keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a1:75:25:90:26:a8:aa:19:aa:80:76:0a:5d:de:0b:37:a8:
         32:88:15:31:cb:45:f1:57:6f:cf:4b:ef:cb:d8:af:1a:17:90:
         0e:50:01:75:24:91:72:c2:49:a5:d9:db:66:73:fa:cd:e4:61:
         28:68:70:69:72:68:9f:f4:be:44:72:74:e3:2a:a7:7d:24:94:
         ba:e5:ec:17:6d:d1:f8:c7:d1:71:2c:2d:8a:40:66:7b:98:45:
         97:8a:86:a3:39:15:cc:38:b5:a1:ee:04:9a:74:3e:13:66:4e:
         0d:9f:89:03:0c:35:91:41:5d:21:ba:5e:5d:e8:ea:cf:e8:bf:
         a7:88:8d:af:0d:70:33:14:21:c8:d5:da:10:93:b0:9c:b9:b1:
         0a:97:22:a5:fe:38:2c:90:ac:b0:fb:c0:33:b3:96:18:f9:1e:
         14:5b:e0:d5:05:b6:9f:1d:0e:ee:37:25:22:19:e4:82:ce:43:
         12:b1:4d:0b:02:11:7f:b1:91:ce:92:f2:11:6b:e1:83:ce:68:
         47:43:71:f4:94:36:bc:24:f2:2f:1b:19:0f:a7:8d:00:6d:11:
         e1:74:96:66:80:e4:a6:2f:b9:ae:43:a4:9c:da:99:7a:fe:e4:
         72:20:ab:cf:a5:14:82:92:ee:ca:d8:2a:8c:fd:0c:f3:d9:a1:
         31:62:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:52:39 2025 by rpki-client