Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          iRWHaIqclAf3MFT0WzO5AccGB8kx7E1VvHoAwj7X0fk=
Subject key identifier:   84:12:57:AA:A7:B2:8F:C8:23:AB:BC:5E:B3:9C:89:09:9C:43:FD:44
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       351F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          34F0
Signing time:             Thu 18 Sep 2025 14:32:12 +0000
Manifest this update:     Thu 18 Sep 2025 14:32:11 +0000
Manifest next update:     Thu 25 Sep 2025 14:32:11 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: WEu3HSjyzyAeH75j5L5V3vzCEz4wcpP07KeOYPMH9yg=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: CUUb/coZVwybMNB3Q6DnZxhNxSXx7mieErXaIHIRyww=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: sRvMLmzA3faCvCgnj9Kc1Nyq/athaxPg1qdQG6qTSjA=)
                          4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: gkYrWkhbDnSZnPzaW3pf3edvz0FUTHjNjGt5hZNgUcM=)
                          5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: pLIkppbdFI2Dvba2mWRCPANXKzDe4Q3IfvnPWtwGOsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 14:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13599 (0x351f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Sep 18 14:32:11 2025 GMT
            Not After : Sep 25 14:32:11 2025 GMT
        Subject: CN=68cc17ec-30b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:77:e8:29:28:f3:29:6a:67:38:b0:12:e2:
                    35:87:46:3a:04:3e:ab:99:44:42:66:fc:82:3d:64:
                    bb:a1:0c:98:c1:ee:48:8a:34:74:d5:12:26:e2:ca:
                    97:bc:0d:52:de:c3:9d:d7:65:e8:a7:64:02:2a:58:
                    6a:e4:a1:12:fe:2f:09:c3:49:6e:b7:5d:83:19:fc:
                    39:5a:81:56:a7:1d:52:9e:d1:56:91:40:05:fb:72:
                    8c:49:e1:64:bd:8e:4b:85:df:d7:e9:68:22:7f:73:
                    d1:13:da:fd:c5:0b:ab:60:7c:db:e5:53:e6:fd:a2:
                    de:21:11:94:a0:f4:16:99:b6:6e:ba:34:91:5b:a6:
                    f0:d5:f8:98:36:5a:73:ad:a4:d8:0b:7c:e4:73:d8:
                    0f:d7:01:e8:6d:77:ca:72:3a:3e:74:cc:1b:d3:82:
                    b1:1a:76:57:f1:45:2e:9f:b5:ee:c3:b1:a2:95:25:
                    d4:69:3b:6f:cf:51:f6:0a:25:59:9f:24:07:0d:ba:
                    28:cd:cd:f4:1f:ec:6f:e2:70:f6:a2:97:db:b6:b8:
                    4e:c8:86:86:dd:9d:53:2b:5b:41:44:b6:b2:e0:45:
                    c2:18:27:d5:98:96:51:94:58:0d:f6:56:9b:b2:0e:
                    b1:6f:3f:26:b5:52:d8:4c:e5:8a:79:0c:01:d7:70:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:12:57:AA:A7:B2:8F:C8:23:AB:BC:5E:B3:9C:89:09:9C:43:FD:44
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:12:6e:9c:37:cb:ef:68:df:b3:05:64:cf:d7:6a:a2:3c:
         35:fb:15:c6:77:ed:7b:fa:df:db:7f:c4:0b:43:f9:72:e2:a2:
         07:cd:55:32:95:c9:4c:67:66:f0:76:c5:d7:63:eb:01:79:e8:
         31:b7:25:b1:7b:86:da:37:c9:84:be:a8:f6:23:e7:7e:2c:30:
         16:e4:31:13:b9:9d:39:35:af:b6:de:15:a7:af:ef:9a:b3:68:
         11:9f:99:ce:e8:65:09:b6:80:d9:64:00:10:1b:7f:88:61:91:
         3f:35:dd:86:ee:3f:66:8e:d5:7f:95:3a:7a:8d:6e:93:66:da:
         e9:67:b0:dc:84:8b:11:75:73:97:1e:d1:78:64:2f:a4:df:07:
         76:f2:50:cf:25:70:81:3e:96:51:31:ad:e7:d8:8c:b4:40:6f:
         e2:c2:6e:15:09:ec:9e:c1:c9:06:3e:d2:75:65:60:65:a7:38:
         a7:44:a4:e2:ac:cd:40:65:42:91:44:6b:a0:26:2f:ba:d9:88:
         8f:fc:2f:97:60:41:1f:f3:69:16:d7:1d:5b:56:16:ff:ae:39:
         c1:6d:70:2c:ae:fa:30:d0:62:81:58:07:5b:03:52:68:c0:da:
         6d:7f:ae:bf:0f:cb:35:3f:f0:41:a9:7c:d9:93:c0:37:0a:10:
         b7:68:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:56:47 2025 by rpki-client