Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
File:                     ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json)
Hash identifier:          +0nwa9taIBJAiWfn2oRwsskDG21qu0fxaIGaLIX654s=
Subject key identifier:   C0:8C:E9:20:F6:3C:68:57:40:E4:E1:DD:A0:56:C7:59:12:3C:0D:42
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       16A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
Manifest number:          1663
Signing time:             Sun 20 Jul 2025 16:46:33 +0000
Manifest this update:     Sun 20 Jul 2025 16:46:32 +0000
Manifest next update:     Sun 27 Jul 2025 16:46:32 +0000
Files and hashes:         1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: BpTzLyKTPmbrMhaDZl7J0o7/pJ4DM+7K/N6T/X2a+GQ=)
                          2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws=)
                          3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg=)
                          4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: QlcIbjq7jxCQ3SgyfdLUDXjmauzJiitADg/TiWQLByw=)
                          5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: kCg25FDQRQj+e3KU6R/BP0M2KGcBEvQ7uEDAyKmHOCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
                          rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 16:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5800 (0x16a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Validity
            Not Before: Jul 20 16:46:32 2025 GMT
            Not After : Jul 27 16:46:32 2025 GMT
        Subject: CN=687d1d69-8ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:da:b9:d8:bf:56:9e:c2:e1:99:a7:fc:12:
                    20:92:50:f5:a4:34:9f:d0:79:d8:3d:b8:23:d3:c0:
                    08:e7:f3:f0:87:c5:68:ea:57:f9:42:20:9a:27:8b:
                    a2:60:3b:d3:92:ab:5c:d9:a4:43:5b:d3:67:aa:ca:
                    bc:fb:1f:a6:22:46:90:53:e5:d4:46:b7:bb:bb:cd:
                    1c:db:03:4c:f5:98:21:40:5a:99:8e:5c:64:1e:4e:
                    28:02:cc:14:c7:18:ba:90:bc:9a:73:c5:f5:b1:d1:
                    df:df:93:26:3f:2f:e9:33:13:89:5d:60:6d:63:e7:
                    3c:86:6a:06:6e:c6:21:4d:37:3a:c6:cd:af:d8:69:
                    d1:c8:be:da:e6:e0:54:52:e4:65:14:5a:b8:4f:e9:
                    e4:f9:7d:55:19:23:19:a0:83:d7:b6:8a:b3:2b:2a:
                    0d:9a:16:a0:33:7d:ff:f4:90:11:8c:b8:bb:7d:8c:
                    fa:e9:fa:51:44:cc:99:6a:e8:67:c6:cf:bd:e3:16:
                    3c:30:e2:b8:40:ef:81:4f:47:7d:4a:35:c0:a2:cb:
                    53:30:7d:9a:76:0a:bc:64:29:39:95:34:05:09:ec:
                    9b:59:e2:90:40:93:07:eb:ab:d9:02:ba:6e:65:63:
                    e5:67:6d:b5:bc:ee:26:e5:75:2e:22:73:84:f7:c5:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:E9:20:F6:3C:68:57:40:E4:E1:DD:A0:56:C7:59:12:3C:0D:42
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:d0:23:e8:ec:d8:40:34:58:40:bc:d1:81:d9:1c:4b:36:
         c5:d6:26:af:5c:47:73:38:55:a5:7d:5e:35:1c:58:eb:9d:65:
         65:0e:b7:c3:97:11:5c:7e:15:c9:cb:ed:c1:b0:de:88:4e:53:
         bf:21:c8:13:d1:1a:89:2a:83:ec:b5:20:63:7b:bd:02:c7:4f:
         1f:be:d4:a4:21:d7:ae:4f:55:ee:4e:7b:34:cd:26:3d:fa:99:
         61:a3:bf:86:40:2f:63:24:69:76:b4:31:db:5b:3b:ca:e8:30:
         34:69:48:fd:2b:ed:95:bb:07:3b:bf:1a:42:41:ab:7e:94:b8:
         75:22:e7:5d:1f:64:3e:b2:f1:fd:43:22:51:c9:ae:be:01:6b:
         1a:ce:db:78:cb:ae:25:1c:4c:10:ec:af:85:06:8f:f1:28:6b:
         d2:a8:f8:8d:92:50:67:11:ab:ee:f5:2e:3d:9b:3b:6a:f6:8b:
         5e:7c:76:9b:52:25:73:ef:9c:26:fd:cb:80:0b:4b:b7:a5:31:
         52:79:9c:21:e3:fc:88:10:11:35:23:9c:69:b4:27:3a:85:5c:
         a9:b8:0a:f6:45:b1:57:56:2a:c9:f2:a3:7b:2c:1b:65:ab:b4:
         27:17:30:7b:15:fa:c8:97:20:a5:7a:1e:1d:8c:d3:e3:78:cb:
         94:5b:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 01:29:46 2025 by rpki-client