Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
File:                     EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json)
Hash identifier:          +h3djWAyXpU429VSiULMClHeMzbElPXa7AmzwHPN1XM=
Subject key identifier:   05:6E:0F:C3:DE:3D:25:5A:3F:BE:6D:60:D6:A9:79:EA:9E:F4:6A:73
Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
Certificate issuer:       /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Certificate serial:       0507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
Manifest number:          0503
Signing time:             Wed 20 Aug 2025 23:44:30 +0000
Manifest this update:     Wed 20 Aug 2025 23:44:29 +0000
Manifest next update:     Wed 27 Aug 2025 23:44:29 +0000
Files and hashes:         1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: qPgEnTA6p1qCkPRK9HI/66yymxelkcGg7FtzV2kLe24=)
                          2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: Gw9UrgyhZyQgdaUx+vCyY31CJTl4dtl3RMTe5VBeLyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl
                          rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 23:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
        Validity
            Not Before: Aug 20 23:44:29 2025 GMT
            Not After : Aug 27 23:44:29 2025 GMT
        Subject: CN=68a65ddd-04f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:67:ef:a1:76:b9:69:9d:b7:34:05:57:45:
                    77:92:6f:2b:a8:d3:49:37:b8:61:78:6a:e1:cc:f9:
                    1a:b6:51:83:19:fd:b3:15:9d:c7:4b:4c:99:48:fe:
                    d2:9b:d3:b6:55:e0:6d:be:1b:59:32:75:ec:9f:d6:
                    5f:6e:be:fc:f2:8d:5d:1d:85:05:8c:f4:7a:c6:ed:
                    a3:55:ca:2f:d2:11:64:47:d6:2e:04:32:80:79:bf:
                    3c:d6:71:e0:2f:cd:ba:6e:bf:5e:52:ae:2c:aa:46:
                    f2:f5:91:c3:62:61:b9:44:d1:e3:0f:3f:fa:03:95:
                    b5:19:7b:29:1b:66:28:f2:21:14:58:bb:af:3f:ad:
                    50:74:bf:74:7c:85:d8:47:d5:b6:a7:bc:60:f9:51:
                    75:07:94:3c:97:fb:71:b4:aa:9c:b5:22:f5:17:f4:
                    d6:f1:21:a7:7d:10:e7:58:38:4f:93:80:7c:d9:e9:
                    a7:fa:23:33:09:52:62:75:88:7a:f6:95:b6:1d:f5:
                    76:ca:96:7f:e9:4f:3e:3f:81:ad:1f:2f:59:eb:bc:
                    69:d0:59:95:70:8f:4b:82:2c:fa:dd:04:5c:e7:f3:
                    70:a9:9a:6f:a1:dc:3e:f2:25:69:dd:db:f2:05:8e:
                    f4:2b:0b:9e:44:77:7b:16:dd:2b:87:e0:d0:bb:e3:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:0F:C3:DE:3D:25:5A:3F:BE:6D:60:D6:A9:79:EA:9E:F4:6A:73
            X509v3 Authority Key Identifier:
                keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:f8:b3:15:9c:de:e8:0b:ec:b1:ca:9c:43:23:e7:db:3e:
         21:57:48:2c:08:8a:52:4d:97:41:ea:d6:dc:b2:0c:53:37:ab:
         ac:ec:89:dc:50:56:65:5e:49:bd:7c:a5:8f:02:5e:8b:2c:92:
         2c:0c:b4:84:28:31:a5:cc:16:06:65:80:ff:7a:c9:fd:95:1d:
         cc:b2:7b:46:61:21:48:5d:aa:d3:a8:7a:b5:ff:e7:70:ab:d2:
         8d:6a:5a:2d:bf:4b:bf:c3:3d:d7:38:b8:e3:12:23:4a:e0:bb:
         19:89:19:61:55:33:5b:13:55:0a:37:13:72:71:6a:62:1f:97:
         9a:33:da:f5:80:68:f4:34:e1:05:e4:14:97:fe:43:8e:58:2a:
         b1:3a:c8:58:4b:2a:d0:18:60:15:de:41:29:22:91:82:d0:54:
         5a:b8:59:e6:e9:df:8d:21:2c:14:a4:c3:89:84:80:37:99:43:
         24:bb:ed:8d:8d:d9:1f:d9:fd:66:64:7c:eb:10:11:ed:eb:a2:
         01:13:44:1e:34:4f:f4:fe:c2:12:0f:57:34:ad:10:a8:6b:d2:
         2a:c4:e3:94:82:17:bd:e6:4a:0f:12:98:44:c6:47:41:db:97:
         52:90:95:76:0a:c4:4e:ae:46:a1:a0:be:a5:d3:a6:a2:98:6c:
         21:83:79:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwRjYxMTAvBgNVBAUTKDEzMkNDQUVBQzEwNEUyQTM0NDVCNjMzNzYxMDU0REM4
RDcxMDdBMTMwHhcNMjUwODIwMjM0NDI5WhcNMjUwODI3MjM0NDI5WjAYMRYwFAYD
VQQDEw02OGE2NWRkZC0wNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcpn76F2uWmdtzQFV0V3km8rqNNJN7hheGrhzPkatlGDGf2zFZ3HS0yZSP7S
m9O2VeBtvhtZMnXsn9Zfbr788o1dHYUFjPR6xu2jVcov0hFkR9YuBDKAeb881nHg
L826br9eUq4sqkby9ZHDYmG5RNHjDz/6A5W1GXspG2Yo8iEUWLuvP61QdL90fIXY
R9W2p7xg+VF1B5Q8l/txtKqctSL1F/TW8SGnfRDnWDhPk4B82emn+iMzCVJidYh6
9pW2HfV2ypZ/6U8+P4GtHy9Z67xp0FmVcI9Lgiz63QRc5/NwqZpvodw+8iVp3dvy
BY70KwueRHd7Ft0rh+DQu+MMpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVuD8Pe
PSVaP75tYNapeeqe9GpzMB8GA1UdIwQYMBaAFBMsyurBBOKjRFtjN2EFTcjXEHoT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzBGNi8xODVEQUZENjFD
RUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRxTkVXMk0zWVFWTnlOY1Fl
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V5eks2c0VFNHFORVcyTTNZUVZOeU5jUWVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzBGNi8xODVEQUZENjFDRUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRx
TkVXMk0zWVFWTnlOY1FlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA46fizFZze6AvsscqcQyPn2z4hV0gsCIpSTZdB6tbcsgxTN6us7Inc
UFZlXkm9fKWPAl6LLJIsDLSEKDGlzBYGZYD/esn9lR3MsntGYSFIXarTqHq1/+dw
q9KNalotv0u/wz3XOLjjEiNK4LsZiRlhVTNbE1UKNxNycWpiH5eaM9r1gGj0NOEF
5BSX/kOOWCqxOshYSyrQGGAV3kEpIpGC0FRauFnm6d+NISwUpMOJhIA3mUMku+2N
jdkf2f1mZHzrEBHt66IBE0QeNE/0/sISD1c0rRCoa9IqxOOUghe95koPEphExkdB
25dSkJV2CsROrkahoL6l06aimGwhg3nQ
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:33:09 2025 by rpki-client