Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          SN1YyZFhAPUfBgOh6M+4/98ZF/yqsaKCDIUCQ9+vESI=
Subject key identifier:   36:48:05:D4:7A:24:25:8A:FA:29:CC:E5:4A:9E:63:BE:F1:4E:FD:E2
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       355C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          351B
Signing time:             Wed 22 Oct 2025 14:49:03 +0000
Manifest this update:     Wed 22 Oct 2025 14:49:03 +0000
Manifest next update:     Wed 29 Oct 2025 14:49:03 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: fy7H+7Zgo61Bjju+nNV5nvnJE9CIyiS7envcT0PLwTA=)
                          2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: fT98Wy1t5VScFWJuQupk2LhedSGkV+ojkzEZelCkDWM=)
                          3: CAE324148A3311F091DEBC42C4F9AE02.roa (hash: 1GJIa0xCy7ffT8GF61jfRTkKOAbXSUpcRhyVPnWT4/w=)
                          4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=)
                          5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 14:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13660 (0x355c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Oct 22 14:49:03 2025 GMT
            Not After : Oct 29 14:49:03 2025 GMT
        Subject: CN=68f8eedf-9c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:13:9a:bb:de:32:c2:78:21:81:4c:99:1c:
                    f7:b4:95:fe:31:c6:b9:19:3b:b4:f6:9d:67:8b:05:
                    11:38:d7:f8:8c:1e:61:93:5a:b5:7d:93:db:ec:3d:
                    66:3f:bc:de:14:0d:d9:24:80:49:df:d6:ca:34:84:
                    51:55:0f:c2:0a:76:7b:f4:6d:2a:4a:66:db:83:de:
                    ce:01:55:f0:c6:e0:59:7f:68:6b:14:8d:83:d8:e0:
                    a2:f8:1c:aa:e3:3c:7f:0d:83:47:b7:c7:08:ee:49:
                    94:c2:91:28:ee:3d:8d:48:8f:c1:9c:02:6e:f7:8a:
                    0f:95:7f:69:c1:42:24:93:d5:f3:e3:61:51:11:a7:
                    df:07:44:8b:95:92:c0:68:4a:74:6e:75:5c:89:ae:
                    aa:34:d3:59:f6:4a:c1:19:28:67:6e:ed:76:88:56:
                    22:42:13:1d:12:cd:e6:cc:7f:12:36:63:4c:69:0e:
                    76:35:4b:a5:70:b3:3d:a4:3f:eb:7a:28:61:f5:36:
                    aa:6b:62:56:40:0d:18:d7:5e:2e:73:90:9f:96:44:
                    e8:a4:95:9e:e2:c4:c2:ca:b5:06:47:b7:6c:70:e2:
                    50:6a:5e:35:14:1c:63:47:01:d7:99:db:1b:ba:89:
                    7d:23:e2:a4:26:d3:a4:8a:9f:27:64:3e:95:4f:34:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:05:D4:7A:24:25:8A:FA:29:CC:E5:4A:9E:63:BE:F1:4E:FD:E2
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:a4:18:49:9c:cb:59:dd:98:b3:a4:c9:bf:30:55:ba:18:
         f2:fa:a9:6c:d7:fa:09:b1:b5:45:21:b1:39:01:32:76:de:b7:
         61:ab:d6:97:b1:67:6c:f0:f8:bf:3d:4d:7f:33:d6:3a:37:71:
         f9:0b:51:9e:bf:63:4c:d4:ae:6a:49:d0:da:5c:7e:0b:6d:fc:
         f9:8f:9b:f7:0a:20:6e:d5:58:b5:a4:7b:fa:43:5d:d4:93:53:
         cc:07:d5:16:cb:81:29:2a:38:21:d4:7b:65:84:c9:da:1b:65:
         da:10:f8:65:10:4b:9c:9d:10:f4:c6:f9:d4:12:17:6f:9b:a7:
         8a:eb:5b:4c:c7:60:e3:db:93:ca:98:ee:c5:4a:3b:3a:cb:09:
         3a:88:95:2f:8e:5c:3b:7c:f1:43:ad:8b:41:67:f8:0d:d8:7a:
         5c:60:97:bf:09:79:9d:32:ca:42:6b:41:7d:95:76:cf:b7:8a:
         2a:79:f3:ce:63:62:1e:de:68:20:8e:7e:c9:4f:d8:fe:a6:31:
         40:e2:3e:64:6f:e6:ec:cd:26:c6:10:48:7a:23:7f:34:90:7c:
         51:c5:44:1f:c8:e3:b6:47:7c:61:fa:63:cc:a4:df:18:7b:7e:
         57:4f:2e:e6:db:8f:f4:ac:84:41:a3:87:3d:26:8f:81:b7:3f:
         51:84:9f:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0
MzEzMEMzRjIwHhcNMjUxMDIyMTQ0OTAzWhcNMjUxMDI5MTQ0OTAzWjAYMRYwFAYD
VQQDEw02OGY4ZWVkZi05YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqsTmrveMsJ4IYFMmRz3tJX+Mca5GTu09p1niwURONf4jB5hk1q1fZPb7D1m
P7zeFA3ZJIBJ39bKNIRRVQ/CCnZ79G0qSmbbg97OAVXwxuBZf2hrFI2D2OCi+Byq
4zx/DYNHt8cI7kmUwpEo7j2NSI/BnAJu94oPlX9pwUIkk9Xz42FREaffB0SLlZLA
aEp0bnVcia6qNNNZ9krBGShnbu12iFYiQhMdEs3mzH8SNmNMaQ52NUulcLM9pD/r
eihh9Taqa2JWQA0Y114uc5CflkTopJWe4sTCyrUGR7dscOJQal41FBxjRwHXmdsb
uol9I+KkJtOkip8nZD6VTzRrMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZIBdR6
JCWK+inM5UqeY77xTv3iMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE
OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk
Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaQKQYSZzLWd2Ys6TJvzBVuhjy+qls1/oJsbVFIbE5ATJ23rdhq9aX
sWds8Pi/PU1/M9Y6N3H5C1Gev2NM1K5qSdDaXH4Lbfz5j5v3CiBu1Vi1pHv6Q13U
k1PMB9UWy4EpKjgh1HtlhMnaG2XaEPhlEEucnRD0xvnUEhdvm6eK61tMx2Dj25PK
mO7FSjs6ywk6iJUvjlw7fPFDrYtBZ/gN2HpcYJe/CXmdMspCa0F9lXbPt4oqefPO
Y2Ie3mggjn7JT9j+pjFA4j5kb+bszSbGEEh6I380kHxRxUQfyOO2R3xh+mPMpN8Y
e35XTy7m24/0rIRBo4c9Jo+Btz9RhJ+Q
-----END CERTIFICATE-----
Generated at Thu Oct 23 09:56:31 2025 by rpki-client