Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
File:                     eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json)
Hash identifier:          nnVowfmGdfQbpTvo6acEtxAnHrKTbx9dHC9wuegMjeU=
Subject key identifier:   E9:9C:ED:FE:F4:D0:12:C6:E5:36:7C:28:6C:0A:7B:C1:38:19:6E:A6
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Certificate issuer:       /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial:       035A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
Manifest number:          0353
Signing time:             Sat 23 Aug 2025 01:14:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:14:50 +0000
Manifest next update:     Sat 30 Aug 2025 01:14:50 +0000
Files and hashes:         1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: ZJ7R98woqt7bBXjXei0uPnzdiaA4nggkkEgV+4Xi6gE=)
                          2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
        Validity
            Not Before: Aug 23 01:14:50 2025 GMT
            Not After : Aug 30 01:14:50 2025 GMT
        Subject: CN=68a9160a-a795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:c0:a3:c1:fe:7c:68:cd:ef:77:e6:16:39:
                    61:51:76:7b:0d:b7:b0:47:6e:e9:83:f6:86:11:11:
                    e1:29:1c:56:63:41:55:4e:e1:1a:14:11:31:5c:85:
                    49:da:86:98:47:78:c3:f0:f6:87:b2:8b:08:77:67:
                    fb:ba:aa:53:9e:ee:fc:d9:df:6c:7a:d6:b8:5e:39:
                    2b:62:9d:3c:1b:d7:c1:e0:77:e7:fb:41:6e:42:1b:
                    e5:1c:b2:ff:27:d2:3a:bd:c2:cf:6d:cb:4a:24:8e:
                    98:12:7a:aa:3e:53:42:df:40:0f:bf:1f:47:4b:08:
                    9b:b8:85:06:42:43:ba:41:22:c2:5d:3f:72:1e:9b:
                    3d:e6:4e:da:e5:ee:ec:d2:f4:3f:5d:01:54:20:49:
                    7d:b4:79:2c:1e:76:9a:3f:82:67:65:a0:b2:49:4b:
                    73:e9:94:01:47:37:7f:ba:02:ff:12:63:67:db:13:
                    42:4c:e7:8a:21:26:3a:9a:c5:12:22:17:a4:b9:4d:
                    e5:3d:a7:e7:d6:22:aa:16:81:35:9a:58:30:4b:16:
                    22:c5:e2:3f:6b:bc:ac:10:b1:64:c1:da:a2:b8:df:
                    15:4e:31:02:6d:f3:7a:42:a6:bf:5d:6c:aa:7c:98:
                    54:fd:3f:88:60:36:97:c0:f5:c0:a3:62:04:7b:74:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:ED:FE:F4:D0:12:C6:E5:36:7C:28:6C:0A:7B:C1:38:19:6E:A6
            X509v3 Authority Key Identifier:
                keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:1e:a1:93:31:eb:dc:d9:6a:10:d4:87:34:30:a0:10:2c:
         b5:94:8c:f8:27:a2:00:9b:62:c8:14:66:e7:fe:b0:53:b0:6c:
         94:86:0c:58:3d:79:12:50:ec:94:ff:e5:03:06:f0:d2:87:35:
         e2:20:11:da:e3:7c:f9:b9:9f:92:dc:e6:27:48:00:55:f3:42:
         f2:c7:aa:a6:a5:1b:a9:23:09:77:30:16:0a:d2:b7:c2:33:b4:
         70:40:61:c2:4e:78:95:4b:88:eb:e9:16:68:94:e9:70:bc:5c:
         a9:c9:68:95:a9:ee:8c:87:0e:6c:ce:69:d4:23:59:97:94:9a:
         96:8a:20:9d:13:68:c3:b2:5f:22:86:f4:6b:ad:7f:e8:f7:b0:
         40:bb:b2:2d:ab:bb:9e:24:3b:e1:5f:d4:7c:2d:05:53:4b:a8:
         e0:fa:b9:46:6e:8c:fb:22:66:74:8c:37:6f:bc:e6:c3:08:5f:
         ed:7d:1b:10:8f:3e:fc:6a:60:c0:35:af:77:04:32:e4:11:7e:
         70:98:3e:ae:cc:d6:34:60:41:50:4f:7f:32:2b:44:79:2c:e9:
         24:8f:5c:a6:13:b7:c2:f3:3d:18:c5:e2:8d:b5:b5:bb:48:a0:
         4e:d5:4b:da:ff:7d:48:2a:be:e9:08:f0:50:fe:c9:85:c8:f4:
         cf:f1:2a:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4
NjBGMzU1ODAwHhcNMjUwODIzMDExNDUwWhcNMjUwODMwMDExNDUwWjAYMRYwFAYD
VQQDEw02OGE5MTYwYS1hNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFDAo8H+fGjN73fmFjlhUXZ7DbewR27pg/aGERHhKRxWY0FVTuEaFBExXIVJ
2oaYR3jD8PaHsosId2f7uqpTnu782d9seta4XjkrYp08G9fB4Hfn+0FuQhvlHLL/
J9I6vcLPbctKJI6YEnqqPlNC30APvx9HSwibuIUGQkO6QSLCXT9yHps95k7a5e7s
0vQ/XQFUIEl9tHksHnaaP4JnZaCySUtz6ZQBRzd/ugL/EmNn2xNCTOeKISY6msUS
IhekuU3lPafn1iKqFoE1mlgwSxYixeI/a7ysELFkwdqiuN8VTjECbfN6Qqa/XWyq
fJhU/T+IYDaXwPXAo2IEe3Sk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmc7f70
0BLG5TZ8KGwKe8E4GW6mMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4
QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkI2Ri9GN0Y5NDc2RUM4QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlL
bjU1cVhfc0FtN2VHRHpWWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAAh6hkzHr3NlqENSHNDCgECy1lIz4J6IAm2LIFGbn/rBTsGyUhgxY
PXkSUOyU/+UDBvDShzXiIBHa43z5uZ+S3OYnSABV80Lyx6qmpRupIwl3MBYK0rfC
M7RwQGHCTniVS4jr6RZolOlwvFypyWiVqe6Mhw5szmnUI1mXlJqWiiCdE2jDsl8i
hvRrrX/o97BAu7Itq7ueJDvhX9R8LQVTS6jg+rlGboz7ImZ0jDdvvObDCF/tfRsQ
jz78amDANa93BDLkEX5wmD6uzNY0YEFQT38yK0R5LOkkj1ymE7fC8z0YxeKNtbW7
SKBO1Uva/31IKr7pCPBQ/smFyPTP8SrT
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:27 2025 by rpki-client