Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          +bGwZAL538EOhU6nCNNhGYQNWG+DYJgLHELbBE5hBgQ=
Subject key identifier:   74:BF:52:6F:B3:5D:4C:20:D8:63:3A:D7:3F:AE:10:E5:73:20:9E:DA
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          0463
Signing time:             Mon 21 Jul 2025 00:24:08 +0000
Manifest this update:     Mon 21 Jul 2025 00:24:07 +0000
Manifest next update:     Mon 28 Jul 2025 00:24:07 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: eZw74nf4bVAKAhVFBsItGzW0dPAmul+vwKy7KHvLenc=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: l8fLmMSk/DnNzXLnjLGhCq/saPEmEN6St/FpFqUG3SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 00:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Jul 21 00:24:07 2025 GMT
            Not After : Jul 28 00:24:07 2025 GMT
        Subject: CN=687d88a8-121e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:e0:86:5d:45:37:6d:0c:cb:c5:1c:0a:fa:
                    9c:19:a8:ad:7d:fc:f4:98:cf:59:2b:be:94:15:bd:
                    2a:13:e8:77:1f:82:8e:e5:3a:9f:ea:c3:e3:9b:14:
                    f5:9d:36:10:8c:d4:2e:51:c7:31:00:87:e7:d3:47:
                    94:13:9c:94:49:7e:29:9c:e8:d0:a1:a9:d2:db:8b:
                    73:27:e2:ac:c3:15:43:d5:7a:03:ef:ad:fc:81:e3:
                    4d:e0:d2:59:f0:50:bb:3b:47:f3:80:7f:70:5c:ab:
                    ab:28:83:1e:8f:4a:6d:d7:cd:86:3d:53:1e:2b:17:
                    97:72:b7:ed:db:46:c4:48:d8:d1:fa:4d:32:4a:90:
                    36:c9:ef:d6:97:9f:0d:a7:c3:ea:b8:4f:cc:d6:de:
                    91:e3:3a:1b:4d:ec:40:4e:54:54:64:e1:0f:14:69:
                    07:45:16:bf:22:a0:4b:70:cd:21:c5:e4:2c:e8:63:
                    3d:67:c0:76:22:40:74:3e:c7:3b:87:11:b5:5f:2c:
                    6d:5e:cc:e9:90:7d:7e:a2:63:b2:42:8c:e4:9d:52:
                    98:6c:5f:a8:47:64:f5:b8:f1:45:9c:1f:43:ed:0a:
                    b4:2c:df:45:20:6c:9f:e6:b6:65:11:ae:4f:d7:cd:
                    78:66:ec:38:3a:77:f2:04:a9:d0:8d:15:1d:4e:41:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:52:6F:B3:5D:4C:20:D8:63:3A:D7:3F:AE:10:E5:73:20:9E:DA
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:07:6a:8a:95:cd:fb:1e:22:92:24:17:40:5d:66:1f:69:ca:
         9a:03:91:54:2b:f1:bc:f2:0f:9d:19:cc:38:6b:3e:5b:fd:27:
         13:6e:50:55:7a:dd:9b:99:66:7a:a2:8b:f3:42:e8:01:23:50:
         37:3a:ad:f9:f7:d6:a6:1d:fe:f8:d2:62:82:b9:d9:7a:0f:48:
         88:35:e7:ba:e6:66:70:3f:a7:de:2d:75:70:33:94:58:a0:da:
         ec:b9:66:d3:24:19:8c:ed:8b:36:c7:ba:3b:e9:0f:09:70:9d:
         5f:13:f4:be:c1:8d:df:c2:66:8c:6a:27:c2:a3:70:66:d0:3d:
         f5:b1:9e:b0:b0:9a:f2:7a:33:a7:69:da:fc:52:fe:f7:f6:cf:
         fd:1a:86:7a:37:d6:86:2a:6f:f4:0f:99:13:a1:91:c9:4c:e3:
         61:87:59:66:e4:88:b4:77:e6:46:aa:36:63:31:27:5e:14:e2:
         45:1b:6b:e7:56:77:e7:99:e6:19:05:86:e6:5f:35:77:da:e7:
         5e:3b:75:17:d6:02:f9:8f:a9:42:d7:96:bf:45:03:58:1f:9a:
         1b:6d:38:48:ad:de:e2:0f:e6:95:af:29:f3:3e:a5:4d:78:d0:
         4b:6f:53:de:c1:f0:13:34:8b:21:cf:7d:b5:d5:e4:df:fe:42:
         98:f0:14:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx
QzUzMDMxQTcwHhcNMjUwNzIxMDAyNDA3WhcNMjUwNzI4MDAyNDA3WjAYMRYwFAYD
VQQDEw02ODdkODhhOC0xMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqa7ghl1FN20My8UcCvqcGaitffz0mM9ZK76UFb0qE+h3H4KO5Tqf6sPjmxT1
nTYQjNQuUccxAIfn00eUE5yUSX4pnOjQoanS24tzJ+KswxVD1XoD7638geNN4NJZ
8FC7O0fzgH9wXKurKIMej0pt182GPVMeKxeXcrft20bESNjR+k0ySpA2ye/Wl58N
p8PquE/M1t6R4zobTexATlRUZOEPFGkHRRa/IqBLcM0hxeQs6GM9Z8B2IkB0Psc7
hxG1XyxtXszpkH1+omOyQozknVKYbF+oR2T1uPFFnB9D7Qq0LN9FIGyf5rZlEa5P
1814Zuw4OnfyBKnQjRUdTkHbfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHS/Um+z
XUwg2GM61z+uEOVzIJ7aMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3
NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0
QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0B2qKlc37HiKSJBdAXWYfacqaA5FUK/G88g+dGcw4az5b/ScTblBV
et2bmWZ6oovzQugBI1A3Oq3599amHf740mKCudl6D0iINee65mZwP6feLXVwM5RY
oNrsuWbTJBmM7Ys2x7o76Q8JcJ1fE/S+wY3fwmaMaifCo3Bm0D31sZ6wsJryejOn
adr8Uv739s/9GoZ6N9aGKm/0D5kToZHJTONhh1lm5Ii0d+ZGqjZjMSdeFOJFG2vn
VnfnmeYZBYbmXzV32udeO3UX1gL5j6lC15a/RQNYH5obbThIrd7iD+aVrynzPqVN
eNBLb1PewfATNIshz3211eTf/kKY8BT+
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:34:49 2025 by rpki-client