Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
File:                     EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json)
Hash identifier:          O9bmOOBR6y0G83Opvgnla3tKk0xx7PRLzhQYaxTeY9U=
Subject key identifier:   45:35:BD:38:B8:44:07:76:C8:11:7C:4B:21:76:29:31:26:A2:9F:00
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
Manifest number:          0BC5
Signing time:             Thu 24 Apr 2025 18:46:37 +0000
Manifest this update:     Thu 24 Apr 2025 18:46:36 +0000
Manifest next update:     Thu 01 May 2025 18:46:36 +0000
Files and hashes:         1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: rHKuP9tYmYGBHXpN+LRrdo3n/HlHbgzt8/7KumskAuM=)
                          2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: VwYkO4aw10BWT9DeTWUnPuWdaTnoYansb3oXYCyJ7q8=)
                          3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 0F+0eba6EEMNLZkH8foyD5Z/QmGl/1jnrtcvnRt8Txg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
        Validity
            Not Before: Apr 24 18:46:36 2025 GMT
            Not After : May  1 18:46:36 2025 GMT
        Subject: CN=680a870c-2092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:34:5d:98:43:da:f3:8f:4b:d2:48:51:66:
                    5f:fe:1b:3c:d6:88:be:a7:13:de:90:34:d6:aa:97:
                    05:9d:43:a2:4b:99:9c:00:87:9e:ff:0b:34:a6:e0:
                    e9:61:c7:60:63:17:33:87:2b:38:0d:12:27:2c:9d:
                    f5:a2:4e:ab:c0:ea:15:76:4f:99:5b:b5:7e:4c:39:
                    79:d5:83:1d:e2:4c:d7:26:bf:2d:91:92:ea:3f:d0:
                    9e:92:9b:c9:75:1c:31:d7:84:e6:80:7b:cd:02:6c:
                    96:10:2f:a6:d9:4c:f1:65:84:17:5d:1f:de:42:06:
                    31:e5:7a:32:d0:84:6d:92:25:92:e6:29:8a:39:23:
                    48:28:d2:e6:b0:34:fb:17:27:83:44:75:90:42:0a:
                    07:8c:02:ea:38:be:84:09:cc:54:21:e3:14:d3:29:
                    0b:0f:e0:44:ec:b2:f8:75:58:d2:99:fd:7e:ab:f8:
                    81:13:82:cf:1b:f5:bd:15:f6:77:87:1c:d5:f2:6c:
                    0c:be:6b:95:54:80:19:8b:5f:8d:0f:36:d2:51:13:
                    c8:0f:ee:0b:03:af:88:8e:71:a0:02:59:71:69:a3:
                    b4:ed:c1:9b:e0:0a:99:36:f7:7f:0d:24:0c:3c:cf:
                    3f:f2:10:c8:d1:6d:d1:0f:8a:37:50:26:af:f2:81:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:BD:38:B8:44:07:76:C8:11:7C:4B:21:76:29:31:26:A2:9F:00
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3e:c1:01:b6:a0:cf:44:32:d8:71:7a:d5:45:88:00:6c:13:
         ba:1b:e4:42:8a:ee:80:4f:63:eb:d3:65:31:90:2a:9d:c6:e9:
         99:e3:e2:cd:4c:a3:c4:85:e6:c0:a0:a7:42:e2:51:ed:f0:c0:
         81:12:10:f5:de:6d:8a:ed:07:55:cc:95:f6:17:97:84:6f:24:
         12:b0:7a:b6:8e:52:47:12:b8:50:76:c7:25:7d:6e:75:49:a1:
         15:21:13:9b:8b:58:83:04:d5:b5:c8:b3:f8:4d:83:d2:8e:e9:
         73:72:c7:8d:42:af:38:8c:be:a4:ba:65:5c:73:b9:b7:c0:d2:
         2f:45:75:c5:5e:14:f0:5b:67:37:1c:15:c1:85:d5:59:2e:15:
         e2:fe:0a:a0:90:cf:bb:9e:a6:08:47:7b:b7:81:7e:4d:69:f6:
         3b:50:be:d3:e4:e7:fb:88:6b:5e:66:d0:f3:57:dd:f0:16:e9:
         0a:bd:4a:97:46:0e:6b:58:09:50:4d:18:a4:53:0a:8f:06:1f:
         af:d6:7b:97:79:3f:45:6c:9c:49:57:b0:3c:ea:2a:df:47:fb:
         15:89:f3:42:8a:a8:16:01:9d:2c:73:2e:26:e0:41:e5:a3:29:
         11:89:8e:e2:eb:2f:09:ba:3a:6e:5f:f4:90:66:ab:07:20:88:
         ca:09:d5:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy
NzRCOUQxQTgwHhcNMjUwNDI0MTg0NjM2WhcNMjUwNTAxMTg0NjM2WjAYMRYwFAYD
VQQDEw02ODBhODcwYy0yMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAux00XZhD2vOPS9JIUWZf/hs81oi+pxPekDTWqpcFnUOiS5mcAIee/ws0puDp
YcdgYxczhys4DRInLJ31ok6rwOoVdk+ZW7V+TDl51YMd4kzXJr8tkZLqP9CekpvJ
dRwx14TmgHvNAmyWEC+m2UzxZYQXXR/eQgYx5Xoy0IRtkiWS5imKOSNIKNLmsDT7
FyeDRHWQQgoHjALqOL6ECcxUIeMU0ykLD+BE7LL4dVjSmf1+q/iBE4LPG/W9FfZ3
hxzV8mwMvmuVVIAZi1+NDzbSURPID+4LA6+IjnGgAllxaaO07cGb4AqZNvd/DSQM
PM8/8hDI0W3RD4o3UCav8oG80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU1vTi4
RAd2yBF8SyF2KTEmop8AMB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB
NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4
OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGPsEBtqDPRDLYcXrVRYgAbBO6G+RCiu6AT2Pr02UxkCqdxumZ4+LN
TKPEhebAoKdC4lHt8MCBEhD13m2K7QdVzJX2F5eEbyQSsHq2jlJHErhQdsclfW51
SaEVIRObi1iDBNW1yLP4TYPSjulzcseNQq84jL6kumVcc7m3wNIvRXXFXhTwW2c3
HBXBhdVZLhXi/gqgkM+7nqYIR3u3gX5NafY7UL7T5Of7iGteZtDzV93wFukKvUqX
Rg5rWAlQTRikUwqPBh+v1nuXeT9FbJxJV7A86irfR/sVifNCiqgWAZ0scy4m4EHl
oykRiY7i6y8JujpuX/SQZqsHIIjKCdWa
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:07 2025 by rpki-client on console.sobornost.net