Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File:                     EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier:          J0GtrT9jnrtP40sY8VzTJ18nl9Dl/Dn423OaU75Tyvg=
Subject key identifier:   04:A6:DE:92:9D:10:2C:C5:47:67:C0:4A:4C:CE:A1:AB:A6:79:EA:D8
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer:       /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial:       0E5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number:          0E4C
Signing time:             Sat 18 Oct 2025 18:25:57 +0000
Manifest this update:     Sat 18 Oct 2025 18:25:57 +0000
Manifest next update:     Sat 25 Oct 2025 18:25:57 +0000
Files and hashes:         1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: MmcDw/XnAvOUqc9Mm6KrqYGprPRbqVBfycD8J04xN5g=)
                          2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=)
                          3: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: dyHXMPsWXIi28t7W1U3CSitpoKF85Llotwpf4kiO82E=)
                          4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: 0ehGM9KvqQVlyysL0bR6r4knV2UFgPR8E2jylMcTv9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3679 (0xe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Validity
            Not Before: Oct 18 18:25:57 2025 GMT
            Not After : Oct 25 18:25:57 2025 GMT
        Subject: CN=68f3dbb5-0ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:7e:46:0d:27:f6:9f:f2:20:e2:96:c0:a5:
                    41:81:42:e4:b3:18:28:b8:14:22:d0:18:b5:3b:04:
                    0b:5c:7b:ca:ae:5a:bf:49:c9:66:ee:02:59:58:d4:
                    c7:30:19:97:ae:5f:15:66:45:45:7a:5d:9c:a5:af:
                    0d:71:75:b1:f1:18:9a:04:9d:86:6d:75:fe:e2:8a:
                    c0:30:64:6a:63:19:46:99:e9:c5:ff:c4:c2:83:af:
                    7b:09:9c:87:e6:31:17:1d:70:a1:2b:ec:94:83:ef:
                    c6:4b:b8:c1:7b:65:df:30:ec:db:0a:e9:53:64:b9:
                    49:84:75:d5:d4:85:6a:34:48:a5:df:2a:46:2f:bd:
                    ee:b6:f9:09:eb:fc:5f:fa:52:2b:c3:7f:6e:51:fe:
                    0e:22:d7:d6:6d:f7:98:0b:44:6a:20:25:af:b0:e7:
                    3d:9c:ba:6b:dd:75:21:0f:33:a6:f0:3e:92:b1:61:
                    96:b2:df:49:4c:29:fb:9b:1c:60:ba:52:5a:95:3c:
                    b8:4e:ac:bf:b6:8e:f1:54:38:9b:85:85:41:5a:e4:
                    fc:83:65:2c:c3:11:fb:26:2e:b9:13:50:b8:76:92:
                    9e:1f:1b:2d:19:4d:d6:40:52:02:99:7b:79:b4:5f:
                    a6:49:04:c8:6f:f5:00:8e:9b:33:4e:ae:ec:aa:b9:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A6:DE:92:9D:10:2C:C5:47:67:C0:4A:4C:CE:A1:AB:A6:79:EA:D8
            X509v3 Authority Key Identifier:
                keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:84:bc:38:d1:b2:2e:df:b8:79:76:08:d3:31:bf:07:6e:17:
         02:23:87:f4:2c:c1:ae:18:6e:3d:2b:77:12:c1:93:42:42:ea:
         85:86:71:3b:43:dd:f1:97:90:dc:df:2b:c6:d4:88:c5:0c:69:
         57:6f:77:20:cf:dc:d2:c5:81:82:97:20:d2:02:f1:2e:c7:cc:
         b7:86:a9:bd:b8:8f:14:3c:87:a3:b6:ef:6c:d7:e4:7b:6e:a4:
         53:70:62:b5:d2:88:94:3d:99:c8:c1:fe:f5:a0:a7:b7:4a:4c:
         cd:a2:fa:31:0f:a8:64:f8:3e:e4:f4:9b:13:a4:21:f6:23:4e:
         bc:a3:5e:d4:60:86:3a:8c:10:3e:86:09:c3:c9:62:07:cb:3c:
         38:f3:2c:d0:12:d9:60:13:07:e0:d1:41:a3:92:68:0e:83:1e:
         4a:48:62:7f:7a:4c:6c:8b:a4:d7:ea:14:bd:79:01:89:95:26:
         71:3a:f5:4e:6f:09:39:f4:81:20:f3:b1:85:76:a3:f3:e4:ce:
         68:5f:ec:54:3d:e3:d9:c2:c4:da:11:75:be:d3:48:e3:34:fd:
         39:89:0d:6a:78:68:e3:c4:c8:f8:d4:67:5c:b5:bc:07:ab:41:
         33:18:6e:cf:ac:b5:46:16:43:59:02:61:43:7a:ea:e0:e3:f5:
         e0:67:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:39 2025 by rpki-client