Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File:                     EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier:          VCQP0hvMReBhkFdGjatddcVOBgvZD65BDNCq/VJ+jvc=
Subject key identifier:   61:BF:FE:CA:6A:3F:C9:A0:E7:F1:FF:4F:AE:C1:B4:85:8E:48:45:9B
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer:       /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number:          07DC
Signing time:             Sat 06 Sep 2025 14:46:52 +0000
Manifest this update:     Sat 06 Sep 2025 14:46:51 +0000
Manifest next update:     Sat 13 Sep 2025 14:46:51 +0000
Files and hashes:         1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: QSXN7Wmqsa3mdDpTwCDSjPy16Wqmxn03NPMa2JCxQ5Q=)
                          2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
        Validity
            Not Before: Sep  6 14:46:51 2025 GMT
            Not After : Sep 13 14:46:51 2025 GMT
        Subject: CN=68bc495b-f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:f1:0b:5b:76:77:10:2d:7e:92:b8:7c:32:
                    9c:1c:6a:58:61:56:86:3f:eb:75:1f:dc:48:25:5c:
                    0a:af:a5:ee:a2:e3:34:65:51:cb:ec:2c:45:c8:14:
                    97:00:ec:cf:e9:19:81:2c:9b:79:b4:89:9b:03:08:
                    ee:6b:33:56:3a:49:9b:00:75:ab:6e:a4:aa:fa:06:
                    94:2a:a0:e8:cc:e8:31:8f:99:29:60:b7:93:60:aa:
                    53:05:e9:cf:8b:6b:a5:79:05:3f:8a:f7:99:7f:25:
                    77:44:5b:c2:a4:61:8d:13:16:e1:ff:9b:d5:71:07:
                    6d:8b:70:b3:9f:67:a6:1b:a6:35:f6:53:3a:2a:0c:
                    a7:5b:5c:6c:2d:78:12:7d:8d:81:86:f7:7c:3d:25:
                    d6:9a:b7:6b:63:09:5e:56:22:5b:4e:48:2b:0f:a6:
                    46:45:f0:6e:ca:35:9c:41:3b:a0:55:70:43:8e:2e:
                    4f:76:e3:4f:38:08:70:97:7a:15:db:21:c2:d1:d0:
                    2f:42:72:82:6c:c4:22:cc:2a:20:7a:d0:f5:38:c9:
                    b0:78:1a:c8:38:f7:bb:55:95:b0:6c:ba:c8:a2:ff:
                    05:c0:11:e6:1e:40:f5:3f:b5:b3:b0:ee:41:2e:13:
                    76:a1:26:b3:fd:22:ae:58:91:18:ac:d1:0c:ea:7d:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:FE:CA:6A:3F:C9:A0:E7:F1:FF:4F:AE:C1:B4:85:8E:48:45:9B
            X509v3 Authority Key Identifier:
                keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:c4:2e:5d:70:ed:1a:61:2f:66:51:26:11:b7:96:42:98:
         df:49:f2:27:55:1d:0e:2e:02:e4:5c:dc:c4:2b:94:9d:9d:b0:
         a1:35:c9:d1:b8:f5:8f:ac:dc:7a:6b:b7:57:82:10:84:6a:88:
         42:26:68:6f:ef:f5:e0:16:7f:e5:32:cd:9e:d1:66:b4:75:d0:
         17:ef:52:28:be:fe:40:62:59:f7:38:66:e7:f3:e9:6d:23:80:
         e6:43:db:ad:a7:37:d6:5b:22:7b:58:ac:b6:fc:b1:5a:04:f0:
         18:bd:f0:f6:a3:a0:1f:b6:7c:39:b5:21:10:41:d6:79:f3:39:
         1c:63:45:47:1c:d9:ca:11:77:a6:2e:5d:db:20:b7:0f:d5:bd:
         94:db:e3:23:54:36:74:3c:16:94:73:8b:5f:1d:72:d1:d1:0f:
         34:da:60:f8:91:cd:ff:0a:77:ff:6c:81:5e:cb:77:22:98:71:
         3d:f6:d1:df:81:0b:29:e6:4a:67:87:50:9a:61:cd:e0:be:82:
         7d:a7:57:14:d0:02:ca:dc:a3:d0:c5:81:3d:f2:6b:62:b9:a0:
         47:85:2f:ca:8e:89:03:5d:6a:46:2e:69:4d:d1:c3:d4:ce:f3:
         3e:cd:bc:63:7a:c2:1e:c7:2f:8b:f5:47:29:34:c0:fa:83:61:
         3d:f1:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:07:25 2025 by rpki-client