Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File:                     EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier:          stE4JiIStRreDF2D3ffjYtH7lo54eJ48sFYCKyhxN3s=
Subject key identifier:   79:3E:FF:D5:CA:CF:63:AC:BB:C3:26:D8:74:B0:34:D6:78:FD:C6:9E
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer:       /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial:       0E50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number:          0E3D
Signing time:             Thu 18 Sep 2025 17:58:08 +0000
Manifest this update:     Thu 18 Sep 2025 17:58:07 +0000
Manifest next update:     Thu 25 Sep 2025 17:58:07 +0000
Files and hashes:         1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: A4MY1hyZaj4PAfxzOC/lpT7s8BOhkbsRzxMoN3lln7U=)
                          2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: dyHXMPsWXIi28t7W1U3CSitpoKF85Llotwpf4kiO82E=)
                          3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=)
                          4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: 0ehGM9KvqQVlyysL0bR6r4knV2UFgPR8E2jylMcTv9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 17:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3664 (0xe50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Validity
            Not Before: Sep 18 17:58:07 2025 GMT
            Not After : Sep 25 17:58:07 2025 GMT
        Subject: CN=68cc4830-7c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:d4:d8:03:70:69:47:80:b7:a5:a3:c5:40:
                    4c:b0:44:7c:47:3e:f8:69:a4:5a:d7:aa:ef:2b:26:
                    e1:b8:d2:84:70:ff:0b:9c:3a:70:f2:e3:3d:9f:a9:
                    74:c3:a2:07:fd:56:4e:bd:97:c3:8d:81:2d:92:3d:
                    3e:3e:2d:23:41:4c:70:0e:0a:df:d0:63:ed:6e:53:
                    a1:66:3b:f4:2b:57:a8:9e:41:bc:c8:62:82:bd:51:
                    43:4c:db:51:50:49:f9:3c:9e:75:71:cf:75:21:c0:
                    5c:50:db:32:34:13:58:98:d1:3d:cd:b3:14:31:f3:
                    c4:28:59:b9:09:f7:ec:89:dc:c4:72:5a:69:a7:05:
                    77:a0:df:21:68:69:67:1c:7f:cb:8c:13:68:66:62:
                    95:4f:2b:98:47:cd:a0:e9:5e:c1:72:69:07:00:7c:
                    35:c6:cd:fc:ea:34:86:63:72:b3:9f:3b:44:47:21:
                    c1:4f:e8:4a:de:d4:6e:d8:45:52:a3:5c:06:ec:d2:
                    09:3a:1a:cf:29:a3:6c:fa:bf:0b:d7:41:c5:1b:4a:
                    ff:27:9a:0e:39:aa:b6:0a:15:81:b9:8b:71:11:44:
                    4c:f2:57:4b:a2:33:ae:a8:09:67:e7:f4:6d:b3:49:
                    6a:3e:87:a3:93:88:68:0d:92:3c:e3:a4:86:e2:a3:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:FF:D5:CA:CF:63:AC:BB:C3:26:D8:74:B0:34:D6:78:FD:C6:9E
            X509v3 Authority Key Identifier:
                keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:24:5a:d0:ff:d4:01:2f:84:e9:91:41:43:ea:ba:77:1e:
         81:ed:ac:f3:f6:63:d4:76:1a:a3:3b:06:d9:0e:ed:73:94:5e:
         14:46:6f:c9:65:cf:a7:1f:fb:7f:d2:d4:0f:45:2d:4e:f5:33:
         02:a4:1a:86:61:c0:0a:f7:a8:2d:0b:9a:20:ba:54:94:11:c1:
         fb:c4:d0:d1:8d:ba:c9:c1:20:0d:b9:db:5c:dd:e2:e1:51:1f:
         72:7b:b0:7f:c3:65:29:73:4e:38:d6:79:37:bd:f6:db:df:de:
         02:fc:15:d3:70:02:5f:6b:8e:d7:e0:07:57:3b:21:02:91:52:
         82:70:98:23:aa:c2:64:47:7d:a5:d9:4b:f9:c9:04:66:18:6c:
         fe:12:38:e0:63:eb:28:48:48:8b:a9:60:ad:ba:8a:e1:b6:8d:
         af:d1:3f:4f:63:98:c2:15:6d:f9:26:a8:9e:f2:af:2b:4e:94:
         df:30:f9:e0:6f:db:c3:6a:23:32:bf:5d:5f:28:48:c3:6f:ec:
         4d:a0:48:ae:12:c4:1d:4e:de:5f:40:dc:d6:f0:83:d4:ff:ff:
         ad:24:fa:04:04:5a:71:7e:5c:d9:99:36:04:5c:78:85:99:6b:
         b6:84:d0:62:a9:4b:43:25:3c:64:27:fa:11:02:18:d2:0e:74:
         23:db:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:34:30 2025 by rpki-client