Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File:                     EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier:          KyeaIohBxMe7hWuPv3opWDC71JE1U07Um7sloIbkqk0=
Subject key identifier:   48:73:56:F9:50:5F:55:44:26:1E:4B:89:54:94:BA:84:DB:0C:B6:15
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       06E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number:          06CD
Signing time:             Fri 22 Aug 2025 22:13:17 +0000
Manifest this update:     Fri 22 Aug 2025 22:13:17 +0000
Manifest next update:     Fri 29 Aug 2025 22:13:17 +0000
Files and hashes:         1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: VsGBUTSqgsV8TnP9lXMT0O1A7UsbIi1Dpe/uLNiAqgM=)
                          2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: GwGIG8w2Paja8QeJTC/4mPTw5xBTF4eu77tf9+sFGXE=)
                          3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: mUNLSSwDIjdC6PSsJdAOAQiuBxAVwe81C3tB9ntlwCU=)
                          4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: WSWSmKF2Dr04+H2IY6+uuwpQnhp2M2KysyXEj72OLxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Aug 22 22:13:17 2025 GMT
            Not After : Aug 29 22:13:17 2025 GMT
        Subject: CN=68a8eb7d-9c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fd:20:44:37:54:95:23:0f:ef:99:cd:df:14:
                    54:6e:f5:ec:7f:fc:e7:92:8d:a5:37:c4:2f:b8:c4:
                    ea:df:9d:83:db:e7:54:50:fe:f5:d8:4c:3e:a0:8d:
                    12:f0:21:20:17:cc:68:10:0e:96:04:88:4a:55:64:
                    25:45:99:89:11:4c:68:39:5f:5f:2e:12:8f:b9:92:
                    45:b6:77:68:86:64:73:80:11:72:f7:8c:8c:9f:22:
                    dc:61:18:2f:26:64:f6:41:da:d9:81:30:15:c1:59:
                    0e:b2:c8:eb:59:da:9a:89:41:a2:29:94:b4:d0:f9:
                    8e:25:08:22:b3:d0:a3:4a:9d:33:8a:ee:36:65:31:
                    92:50:e5:e4:1c:ff:7e:b9:36:03:96:ad:1e:a2:a9:
                    89:4c:96:4e:3b:f4:cb:c6:08:65:b2:8a:d0:9e:9a:
                    07:ea:40:8e:4d:e3:2d:d9:6f:d8:07:16:aa:55:c1:
                    69:83:0b:f4:a6:a5:85:cd:91:8f:6a:6d:22:35:70:
                    dc:4b:cc:9c:7a:6f:6d:53:46:50:2a:e2:22:1c:a0:
                    3d:96:cb:13:ad:40:bb:83:ba:ab:fe:f2:6a:bb:f0:
                    7d:40:45:7f:5b:ba:2c:68:3a:9c:b4:d0:5d:67:77:
                    b5:38:3a:f4:8e:bd:9f:78:3d:43:f1:30:88:40:17:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:56:F9:50:5F:55:44:26:1E:4B:89:54:94:BA:84:DB:0C:B6:15
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:1e:ab:77:22:ff:4d:b6:41:e0:2d:e7:4c:d6:9a:bd:1f:
         62:8d:45:3f:23:31:a5:af:8b:ec:22:e1:ed:3d:d1:46:f5:d7:
         73:d5:e7:75:2a:96:8a:fc:85:27:4d:a9:cb:a0:fa:60:18:cd:
         d1:1b:db:52:d3:72:fb:01:8a:37:bb:9a:6c:63:ab:13:a4:fe:
         f1:f5:94:35:1a:ab:64:cf:a7:c7:27:10:e2:3c:9c:8c:b7:b5:
         b4:f7:25:4a:b2:78:ba:6a:ae:b3:c8:5b:2f:ed:d3:98:63:ca:
         3a:1f:ae:f8:45:57:6a:5b:67:91:a1:23:a5:cc:59:9a:1a:95:
         6a:6f:bf:ca:f1:73:93:ac:64:46:8b:86:f3:e2:7d:38:28:da:
         4e:e4:19:bf:a1:8b:16:47:a0:92:89:6e:c9:3e:8f:35:62:31:
         25:28:87:68:30:7e:af:e9:a8:67:7c:4d:67:9a:bb:1c:8d:76:
         ea:06:57:15:15:92:65:3c:4d:e3:b0:d1:4d:f4:17:6e:3d:5a:
         57:7f:11:2f:53:0a:05:db:dc:a4:ce:ab:b9:2a:3d:46:01:d4:
         33:6b:1f:da:24:5a:88:1e:18:7c:52:e3:99:be:6a:99:16:08:
         f3:99:f8:03:2e:84:39:b6:32:1b:28:47:f1:50:1e:a7:bf:fa:
         18:69:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:24 2025 by rpki-client