Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File:                     EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier:          Cx2MJOemvj4CD/eCc9x0kk5x20mED7L3ksEi+VEqTlw=
Subject key identifier:   3C:2B:AF:89:6B:AB:E9:8C:50:A8:5E:E7:49:C5:46:80:24:D8:31:1A
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number:          06EC
Signing time:             Sat 18 Oct 2025 23:24:50 +0000
Manifest this update:     Sat 18 Oct 2025 23:24:50 +0000
Manifest next update:     Sat 25 Oct 2025 23:24:50 +0000
Files and hashes:         1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: H6kpxfJmZfZrmKc+uYSG4vH9jC17xM/5CWE4vzgyqwo=)
                          2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: 6EZkAzkPk5SlMX3wqZPtJqCzo2SBsCkIIw69w24D0aY=)
                          3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: 20mFFdly0NwVg0sh0PTK76DHn25NUKvd/zLLbGt7l68=)
                          4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: RyO7TsWz01C7RyL01NueecIAQ4G8XObxp2ft3XjCtCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Oct 18 23:24:50 2025 GMT
            Not After : Oct 25 23:24:50 2025 GMT
        Subject: CN=68f421c2-9312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:1f:12:cc:d9:47:c5:1f:1f:49:8d:ad:78:
                    20:31:00:80:ee:29:ef:15:61:21:bb:c3:d4:f2:3e:
                    6d:45:4f:42:9b:97:cb:96:b6:92:31:ac:77:3c:f2:
                    a9:d8:01:47:67:35:e4:9d:dd:eb:69:fc:1b:1a:6a:
                    af:84:69:4f:d0:c0:54:45:a9:90:0f:35:6e:52:b5:
                    d7:58:59:60:44:9d:5a:87:93:f6:b6:55:23:90:08:
                    8a:8c:13:b6:97:ac:c0:fb:91:41:58:38:f3:8e:9d:
                    d3:d7:d1:93:b1:74:53:d9:1a:75:1c:e4:22:d6:44:
                    cc:d0:d1:2c:20:e7:ed:04:57:bf:ba:74:ba:e3:d3:
                    e0:f1:c9:41:c4:51:0b:b7:49:14:82:bb:af:c5:f0:
                    9c:ed:b8:9b:9a:fb:a9:01:7b:1a:94:b0:f3:c6:69:
                    8f:07:3a:9d:3c:40:1b:c8:eb:e3:83:46:76:ef:a6:
                    60:26:bc:21:c5:2a:c9:de:53:bb:7f:b2:47:92:88:
                    53:b0:d2:66:71:40:47:c2:5e:d3:15:1f:34:f8:dc:
                    a4:d2:21:a8:92:f5:ab:48:2e:b7:3f:07:81:1e:c4:
                    de:cd:92:13:40:10:ad:8a:4b:92:7d:0e:23:b8:a7:
                    67:74:43:78:2a:a0:b2:09:fa:58:b3:b7:6f:16:50:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:AF:89:6B:AB:E9:8C:50:A8:5E:E7:49:C5:46:80:24:D8:31:1A
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:3a:fc:7e:43:cc:4e:07:e6:17:44:15:99:44:7e:80:13:
         6c:d4:b5:c5:e3:c4:b6:17:d3:ca:7b:d0:f8:bc:25:1e:bc:fa:
         29:ef:6a:c4:db:5d:20:6c:60:3c:9c:f0:e8:b6:63:12:ed:2e:
         a6:95:48:3d:9c:74:42:4f:e5:0f:4b:70:8d:ae:83:71:c1:9a:
         23:91:7a:8b:2a:65:da:59:ed:d4:67:af:8c:54:49:3d:ff:d8:
         4a:d9:d0:f6:f7:40:ad:6a:23:45:59:f4:35:32:3d:af:a9:75:
         e7:9d:57:f0:4c:61:70:bb:8d:05:b0:12:9e:a0:88:df:d9:c6:
         26:10:da:5d:74:9a:e4:fe:2d:94:f6:cb:4a:f6:38:67:24:73:
         f8:78:5d:8c:a7:a4:3a:3c:23:68:87:1e:08:0f:53:d7:0f:a1:
         76:7e:bd:0d:6f:53:6a:63:47:1e:35:dc:c0:30:cf:1e:27:8c:
         cb:51:ba:75:9c:bb:6a:0d:43:ee:1f:c7:4a:8a:98:c8:75:92:
         23:7a:4f:0c:2c:ff:8e:6d:27:39:d6:6c:94:89:f5:2e:94:8c:
         b7:a3:8c:2a:97:78:94:5b:8e:43:36:05:46:90:ce:04:a1:f5:
         46:34:b6:33:5d:1c:0b:8e:ea:ee:92:9a:6a:b3:74:df:d1:35:
         21:2c:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:50 2025 by rpki-client