Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
File:                     EMapar_laJvHveWr6KZtlSRT-xg.mft (raw, json)
Hash identifier:          1QKtEU29x2G/M71hLfXH7Ib1aZTO6eqlzeiWtG98ckY=
Subject key identifier:   5D:91:C2:C1:58:F1:4D:BD:DC:A9:04:AB:68:98:99:01:84:5D:8E:C2
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       124E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
Manifest number:          123C
Signing time:             Fri 04 Apr 2025 17:13:17 +0000
Manifest this update:     Fri 04 Apr 2025 17:13:16 +0000
Manifest next update:     Fri 11 Apr 2025 17:13:16 +0000
Files and hashes:         1: EMapar_laJvHveWr6KZtlSRT-xg.crl (hash: Vf8Mx+sCKBB514ifP4Obo+5DQe3kr8KLg7N3G0H+tAw=)
                          2: C6CD392C951111EFB906EE25C4F9AE02.roa (hash: MNDMDJlCyirPaUsQSuMDU67Qsy9JImq4E9fRXZouKVM=)
                          3: F31D6E84951111EFBEBB2926C4F9AE02.roa (hash: RYETi0zkwG+1OYC+IAx2GdRhn5XJnpnss76zM5O7Tmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4686 (0x124e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA
        Validity
            Not Before: Apr  4 17:13:16 2025 GMT
            Not After : Apr 11 17:13:16 2025 GMT
        Subject: CN=67f0132c-d48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:b5:90:a4:10:b2:28:36:76:50:ee:f0:f6:
                    33:77:ee:6e:6a:a9:ee:78:42:76:5a:b5:94:ad:b9:
                    a0:09:f9:be:4a:07:43:db:d0:b7:27:3b:1f:fd:ff:
                    09:f8:e1:e5:87:a3:77:2d:2a:a0:94:1c:d7:d0:0c:
                    47:fb:20:e4:0e:09:f6:c7:29:2c:91:d1:49:48:1e:
                    a3:fe:a6:de:cb:9e:47:05:93:25:c7:72:17:0f:d7:
                    fd:8d:28:b9:3f:8a:8f:89:ca:ef:77:9c:c8:d6:8c:
                    0f:b7:47:0d:f8:03:cc:76:c0:a4:02:17:2e:80:2d:
                    e3:ec:eb:ee:32:a9:c5:c3:b0:51:56:44:49:49:de:
                    95:5f:f2:e0:58:d4:dc:66:23:0d:51:97:1d:7b:21:
                    9f:33:7f:7e:0d:0e:81:c4:03:c2:58:62:19:7d:c4:
                    d1:a6:fd:8a:f5:24:0b:3a:7f:ae:5a:17:f7:ec:67:
                    af:a5:46:59:eb:28:ce:f6:f9:d1:3e:2b:04:f8:8b:
                    17:36:0a:cf:9b:6a:a9:9f:4a:f5:fe:33:69:f6:22:
                    ea:49:c6:d2:17:37:33:31:35:1d:56:e6:b2:81:7b:
                    02:b5:0f:46:b5:de:61:da:6f:df:89:14:73:e4:f8:
                    f7:5b:a7:6e:25:83:00:3f:ae:42:4a:2e:4a:e4:40:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:C2:C1:58:F1:4D:BD:DC:A9:04:AB:68:98:99:01:84:5D:8E:C2
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:a2:5c:78:82:44:6a:96:0a:ac:0d:7c:6c:d0:a7:3a:11:
         a4:26:d6:52:4a:b0:15:02:3e:38:c1:28:40:e1:1f:42:d0:79:
         72:56:6a:66:fd:c9:0d:c2:2d:13:99:48:81:7f:b2:91:83:95:
         db:32:73:8e:bf:a5:a3:c5:08:60:fe:0d:86:f3:21:7d:9c:7e:
         db:82:24:e9:b6:1e:d5:1f:bd:e6:19:b3:e5:1e:5c:63:7b:0c:
         c4:08:d2:81:af:ea:10:d0:32:1e:88:b4:39:01:ca:46:9a:55:
         be:ab:27:05:f8:c1:71:68:00:32:e4:03:10:61:d4:2c:6a:0b:
         3c:3b:79:54:9e:17:c4:91:03:3f:1c:be:b1:ae:98:48:f0:0f:
         8f:26:ec:84:7d:48:09:f4:a4:e3:06:ab:1c:92:a5:84:84:95:
         e4:2a:51:89:74:65:42:94:35:03:7c:c2:fb:8d:10:de:14:6f:
         75:48:37:3f:bb:ca:ea:6f:33:c0:ed:e8:84:15:c1:38:53:6b:
         b3:47:af:6d:32:87:95:b9:46:5c:e9:6a:65:5d:67:42:d6:75:
         94:9e:78:60:ab:31:5b:5f:9c:b3:a3:8a:25:c0:b2:d2:83:c0:
         e3:2a:1a:d3:70:c6:22:0d:0e:81:00:d1:37:87:a9:a8:03:5b:
         30:6c:b0:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM2RkExMTAvBgNVBAUTKDEwQzZBOTZBQkZFNTY4OUJDN0JERTVBQkU4QTY2RDk1
MjQ1M0ZCMTgwHhcNMjUwNDA0MTcxMzE2WhcNMjUwNDExMTcxMzE2WjAYMRYwFAYD
VQQDEw02N2YwMTMyYy1kNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYu1kKQQsig2dlDu8PYzd+5uaqnueEJ2WrWUrbmgCfm+SgdD29C3Jzsf/f8J
+OHlh6N3LSqglBzX0AxH+yDkDgn2xykskdFJSB6j/qbey55HBZMlx3IXD9f9jSi5
P4qPicrvd5zI1owPt0cN+APMdsCkAhcugC3j7OvuMqnFw7BRVkRJSd6VX/LgWNTc
ZiMNUZcdeyGfM39+DQ6BxAPCWGIZfcTRpv2K9SQLOn+uWhf37GevpUZZ6yjO9vnR
PisE+IsXNgrPm2qpn0r1/jNp9iLqScbSFzczMTUdVuaygXsCtQ9Gtd5h2m/fiRRz
5Pj3W6duJYMAP65CSi5K5EDi4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2RwsFY
8U293KkEq2iYmQGEXY7CMB8GA1UdIwQYMBaAFBDGqWq/5Wibx73lq+imbZUkU/sY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzZGQS9BMTdCMzNDMkQ1
QUYxMUU4OEZGMDUyMjhDNEY5QUUwMi9FTWFwYXJfbGFKdkh2ZVdyNktadGxTUlQt
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VNYXBhcl9sYUp2SHZlV3I2S1p0bFNSVC14Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzZGQS9BMTdCMzNDMkQ1QUYxMUU4OEZGMDUyMjhDNEY5QUUwMi9FTWFwYXJfbGFK
dkh2ZVdyNktadGxTUlQteGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoGKJceIJEapYKrA18bNCnOhGkJtZSSrAVAj44wShA4R9C0HlyVmpm
/ckNwi0TmUiBf7KRg5XbMnOOv6WjxQhg/g2G8yF9nH7bgiTpth7VH73mGbPlHlxj
ewzECNKBr+oQ0DIeiLQ5AcpGmlW+qycF+MFxaAAy5AMQYdQsags8O3lUnhfEkQM/
HL6xrphI8A+PJuyEfUgJ9KTjBqsckqWEhJXkKlGJdGVClDUDfML7jRDeFG91SDc/
u8rqbzPA7eiEFcE4U2uzR69tMoeVuUZc6WplXWdC1nWUnnhgqzFbX5yzo4olwLLS
g8DjKhrTcMYiDQ6BANE3h6moA1swbLDJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:36 2025 by rpki-client