Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          6Ruy4bGooXjAG5oO+/SdFK6GqZi+MIP2pfO7oxPqSxc=
Subject key identifier:   A8:94:8C:78:64:02:F8:01:89:AC:EA:37:D4:ED:DF:F0:6C:3B:3C:F2
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          0393
Signing time:             Sun 19 Oct 2025 10:07:28 +0000
Manifest this update:     Sun 19 Oct 2025 10:07:28 +0000
Manifest next update:     Sun 26 Oct 2025 10:07:28 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: b9kLEZznxSq0evw83ESHsZk7dv2MZOdNflnyGjcjgdE=)
                          2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=)
                          3: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: rjo+bi3dT0jsXGyAaC/7THKFQ/vbxvn37jUfycsRuPY=)
                          4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=)
                          5: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=)
                          6: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=)
                          7: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=)
                          8: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=)
                          9: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=)
                          10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=)
                          11: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Oct 19 10:07:28 2025 GMT
            Not After : Oct 26 10:07:28 2025 GMT
        Subject: CN=68f4b860-4b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:bb:fe:44:f3:a0:44:36:b1:f1:41:fe:d6:
                    99:81:18:b3:31:98:5a:bd:fb:3d:df:ee:d1:3f:e5:
                    0d:d7:aa:70:c6:71:cc:24:12:94:45:61:c2:01:2c:
                    83:fc:1f:13:82:e8:1a:13:b9:7b:15:c1:7b:c5:2d:
                    17:e8:f7:5e:14:b2:54:45:dd:30:b1:10:a1:5b:eb:
                    33:39:9b:fa:47:38:69:3e:7e:04:78:b2:52:94:07:
                    0d:83:18:43:75:ee:69:ee:89:50:d5:37:0e:e4:f3:
                    f4:56:7d:2f:6f:ab:01:93:bd:84:c4:10:37:d6:d7:
                    a1:81:2a:cb:31:b6:b5:db:e4:df:90:fd:9b:8b:f1:
                    8a:b3:37:f9:cf:fc:bb:20:7d:5f:14:fe:27:54:51:
                    5c:59:5d:c1:7f:08:d3:bb:fc:ef:fc:ca:b5:f0:19:
                    e7:6e:c7:44:7c:b3:79:34:6d:fe:0d:f0:1d:d1:93:
                    13:9d:55:d7:2d:d2:32:13:a0:e1:ba:72:ea:b5:01:
                    b7:8f:d5:57:f8:5e:70:15:c9:c2:08:86:13:58:d2:
                    e0:98:c2:71:18:6f:bc:59:07:3f:60:15:b7:29:46:
                    00:5e:1f:27:57:f1:fa:03:1e:97:2e:68:b6:06:ee:
                    1f:38:04:88:bf:20:31:43:3f:a1:d4:8c:58:be:98:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:8C:78:64:02:F8:01:89:AC:EA:37:D4:ED:DF:F0:6C:3B:3C:F2
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:bf:ca:e5:14:74:25:30:56:cc:5d:69:5c:9d:d9:ea:b4:
         3f:73:ef:01:d7:2e:33:fa:7c:fd:da:8d:0f:91:fd:ed:7a:c3:
         7f:a4:4c:06:bd:04:1d:1b:68:24:19:83:80:ff:7d:6b:8b:b8:
         d6:13:f1:87:c5:0b:fe:ad:1f:c5:d1:e9:24:d2:a9:9a:2b:35:
         ce:f7:7d:5d:e2:48:38:6a:96:a7:15:61:e0:61:81:d0:1e:6b:
         ac:a9:6d:7e:ee:55:7d:6d:1a:67:0a:d7:01:f8:9d:86:1d:2d:
         a3:21:10:ae:59:7a:a1:35:ab:e2:cb:83:0a:24:42:1e:38:08:
         c4:06:c6:97:96:5f:56:0a:3e:88:37:41:4d:80:df:3c:ac:5b:
         e2:99:8c:21:cd:7a:4c:cf:30:f1:2d:2c:a2:c0:e6:85:9c:59:
         07:fc:35:01:e4:21:46:24:06:59:96:07:dc:ac:ad:b2:87:13:
         2e:55:4b:19:c4:ac:70:4b:6f:62:06:b0:aa:8f:74:e1:67:74:
         6b:98:81:3d:83:7e:1d:48:b9:fc:63:47:7c:da:0e:ed:6c:e7:
         5e:83:09:e6:47:fa:8d:b4:2a:de:8a:43:42:0e:6b:00:3c:3c:
         75:c1:4a:be:31:a9:44:48:48:a2:ac:48:da:34:f7:c5:1d:5c:
         af:28:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:37 2025 by rpki-client