Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File:                     EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier:          BUHyzqxhGA1x8iBJ6iMjO9AIOJIOGFQKvxefUqX93Ts=
Subject key identifier:   33:C1:D0:66:01:32:21:71:00:C1:D7:50:FC:6A:5F:25:05:D0:F1:75
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       06D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number:          06BD
Signing time:             Tue 22 Jul 2025 22:25:59 +0000
Manifest this update:     Tue 22 Jul 2025 22:25:58 +0000
Manifest next update:     Tue 29 Jul 2025 22:25:58 +0000
Files and hashes:         1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: sQqMZ25L5DK8V5ajOcm5yZs7Iqz2gqoEzeSurUvXqY4=)
                          2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: GwGIG8w2Paja8QeJTC/4mPTw5xBTF4eu77tf9+sFGXE=)
                          3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: mUNLSSwDIjdC6PSsJdAOAQiuBxAVwe81C3tB9ntlwCU=)
                          4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: WSWSmKF2Dr04+H2IY6+uuwpQnhp2M2KysyXEj72OLxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 22:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Jul 22 22:25:58 2025 GMT
            Not After : Jul 29 22:25:58 2025 GMT
        Subject: CN=68800ff6-3b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:5d:b3:2f:92:37:11:ae:9b:92:0a:72:08:
                    24:16:36:3f:a9:6f:8a:69:92:63:5a:10:35:c0:41:
                    02:1e:08:70:7a:60:6d:0a:7b:16:44:d3:14:db:ef:
                    83:89:ff:10:b4:b5:1b:fa:ab:fc:a4:bb:25:18:9c:
                    c3:0e:e2:73:b3:10:e5:e6:6d:f8:5a:3b:e9:83:6e:
                    c2:ae:63:aa:4a:23:12:8e:8c:21:7e:03:a4:21:f3:
                    bc:20:68:a1:46:35:97:7d:d3:ee:2a:5d:3e:b9:66:
                    7e:79:b9:51:6a:29:f8:c6:1d:b5:83:08:8e:70:3e:
                    00:af:d8:88:32:ef:e9:05:0e:e4:9a:b5:bb:ff:fb:
                    e1:81:8e:0d:c1:6e:6d:18:88:8e:14:7d:06:bf:76:
                    1f:41:5a:0c:d5:b8:5e:33:71:d5:54:05:53:60:69:
                    48:52:5d:7c:3d:27:ee:79:e4:51:1b:9f:4b:d5:97:
                    6b:64:42:04:5a:9e:dc:d3:35:4c:4b:81:f1:36:64:
                    e6:e9:15:2a:d9:d2:a0:0e:13:d8:d8:be:a3:e9:f4:
                    41:9b:aa:08:c8:d4:6c:2b:eb:d8:6b:54:dc:c9:c4:
                    3a:fe:c7:b0:cf:ef:f2:f7:8d:f6:32:ba:fa:39:0f:
                    8e:bb:6b:eb:d8:ba:44:71:f3:49:b4:54:7f:8c:55:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C1:D0:66:01:32:21:71:00:C1:D7:50:FC:6A:5F:25:05:D0:F1:75
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:57:68:14:29:0b:2b:eb:9d:1b:10:4d:e5:ee:4d:99:eb:14:
         84:37:48:a1:b6:1d:f6:95:05:f3:d2:84:f6:17:1f:2e:37:ae:
         3c:89:b9:b1:c0:84:50:0c:f4:98:bd:81:3f:6a:36:cb:a1:16:
         ca:c3:b0:f2:1d:e9:de:f9:fe:05:0b:f9:0c:34:4f:d7:42:2f:
         8e:5f:c3:11:67:87:61:bb:84:c1:d8:bb:56:c3:e0:0e:74:b5:
         b3:37:44:d2:00:87:30:33:32:ff:ed:39:3b:ba:fd:0f:0f:6e:
         99:b7:cf:d8:11:95:16:c2:b8:41:43:3d:5b:8a:55:c5:16:bf:
         ef:ce:be:f4:60:b9:cd:87:a0:d7:58:67:7b:cc:16:17:eb:85:
         6f:c6:cd:6b:6c:7d:ad:a0:65:ad:b6:d5:4c:68:2a:2f:20:68:
         35:9c:5a:67:b5:91:ca:64:43:32:81:42:a9:4a:e9:ad:3f:81:
         cc:59:0e:6c:f0:7b:d5:6b:e7:e0:54:98:2c:cd:8e:b9:da:9c:
         ac:00:80:78:d2:2d:d9:d9:0f:53:14:fb:7a:7d:ba:62:14:15:
         14:83:db:bf:12:4e:0c:78:29:3e:a4:d2:7c:f6:49:97:35:b1:
         f0:dd:15:c8:e1:75:1a:c9:01:8c:8d:49:4f:5c:5f:47:05:5c:
         f5:6e:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:10 2025 by rpki-client