Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
File:                     EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json)
Hash identifier:          baXCNMjpWhl26eiKv21whSJejazXAowoMYZJNtFQ3qM=
Subject key identifier:   00:51:0C:45:3C:9B:BB:2A:6F:A1:23:F4:17:C7:D2:3F:2C:F3:74:A0
Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
Certificate issuer:       /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
Manifest number:          014A
Signing time:             Sun 19 Oct 2025 07:07:52 +0000
Manifest this update:     Sun 19 Oct 2025 07:07:52 +0000
Manifest next update:     Sun 26 Oct 2025 07:07:51 +0000
Files and hashes:         1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: RAu91QX82FVxtoAjDBCu/NvFPhgXgjKjJm3IhA0AMdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl
                          rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
        Validity
            Not Before: Oct 19 07:07:52 2025 GMT
            Not After : Oct 26 07:07:51 2025 GMT
        Subject: CN=68f48e48-dc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:cc:62:6a:c7:9f:8b:ca:8d:25:e6:1e:ec:
                    cd:f6:4d:ca:8f:1d:f7:f7:d1:40:ff:6e:c7:de:99:
                    4c:6e:d6:81:cb:b8:b5:61:4b:98:f7:5d:9f:34:6b:
                    a8:93:d8:96:3e:d5:10:8e:35:66:16:59:e2:67:fb:
                    5d:50:00:55:68:eb:ba:45:58:20:4f:4c:48:5b:0f:
                    34:8a:57:93:ff:97:7d:1d:63:0d:06:44:a3:81:5b:
                    d6:51:48:ba:d5:b0:c9:84:e8:62:1d:52:18:3c:66:
                    3a:40:3c:1b:25:0b:75:29:1b:95:94:cc:29:91:5c:
                    08:2d:42:01:d5:f2:5a:bd:a6:1c:51:cc:af:71:ea:
                    ee:b7:7c:ff:f2:03:da:63:45:28:ed:c7:ff:b2:ad:
                    f8:b0:c9:66:9e:5e:57:a7:75:ef:e6:49:7e:9b:0c:
                    d5:3f:4b:f5:17:58:16:4c:db:87:6e:01:e4:9d:29:
                    32:29:aa:ad:0a:ca:b4:f5:f0:a6:d3:2d:83:c2:3c:
                    e9:20:74:1f:4c:5f:a8:90:b0:ec:d0:b8:6f:ad:c8:
                    56:77:86:04:70:43:e5:30:e0:76:a7:91:f7:35:82:
                    78:cf:2a:25:ff:52:b5:b2:98:c7:64:69:26:a3:f5:
                    f0:b2:9f:7d:10:88:3f:47:13:c9:e8:5d:a6:b3:9f:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:0C:45:3C:9B:BB:2A:6F:A1:23:F4:17:C7:D2:3F:2C:F3:74:A0
            X509v3 Authority Key Identifier:
                keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:23:9d:ea:f7:6f:90:5f:2f:ac:a5:af:9b:5d:b7:43:c8:9d:
         f6:4b:b9:b8:8b:8f:e8:29:7b:20:ec:d5:13:b0:06:83:99:92:
         62:6b:a7:47:52:42:f6:76:49:5c:e2:ab:4c:c2:2a:d8:56:3b:
         53:47:ab:47:56:4a:18:9a:e5:cc:4c:28:78:5c:cc:54:c8:db:
         82:ca:23:e7:51:aa:d7:6b:8a:6d:91:b7:32:d0:d2:02:76:6c:
         e9:54:90:ae:18:1f:f4:bc:91:88:66:ef:ad:7d:fd:65:f7:e8:
         7a:f6:2f:89:a1:1e:88:cb:a6:ef:0f:b6:ed:21:72:b6:15:68:
         a2:9b:17:7a:e2:e5:6a:b9:d0:88:a7:0e:d7:27:37:f9:e9:62:
         e1:fc:22:fb:da:1c:ca:7f:be:33:ec:04:f0:57:a2:f6:de:65:
         11:83:88:55:02:46:00:26:4d:1d:4e:98:d4:b8:d0:d9:96:15:
         1f:81:19:e7:7a:26:b6:43:c7:81:ef:ce:82:56:ee:b5:6c:f7:
         4d:14:d7:57:40:3b:8d:38:1f:cb:01:15:38:19:71:1e:79:86:
         74:1e:6e:fb:c3:98:98:00:a2:a7:aa:df:97:d6:8d:73:c3:9b:
         0d:eb:60:db:f0:8e:e1:88:44:d8:56:88:75:2e:d7:8c:b2:7b:
         69:10:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:05 2025 by rpki-client