Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
File:                     eLec-CdRhh8nml-lBJMVONrc2vo.mft (raw, json)
Hash identifier:          DoyWFlGZrz1pggIcEaVqE+mSXublTlG0xoRUlcfZxKo=
Subject key identifier:   9A:3B:69:6D:30:2B:22:34:89:A4:7A:05:00:29:C6:5D:0D:B1:0D:99
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       032C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
Manifest number:          0326
Signing time:             Sun 11 May 2025 00:40:55 +0000
Manifest this update:     Sun 11 May 2025 00:40:55 +0000
Manifest next update:     Sun 18 May 2025 00:40:55 +0000
Files and hashes:         1: eLec-CdRhh8nml-lBJMVONrc2vo.crl (hash: A98ghKMgrRVSf23DuVx1mkx3P9Fy5jdwmA/C33UdhTc=)
                          2: C9445C48D54F11EF96DECA53C4F9AE02.roa (hash: Esk5oKr6bpSe5R6pwy/KGSngmegv4z2afH8x0VXVxT4=)
                          3: 424653EEC6CB11ECB185E43EC4F9AE02.roa (hash: z9y1RZky0Mui28fgGdt8snXkNVzMUMLSs70EilJUUug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl
                          rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650, serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: May 11 00:40:55 2025 GMT
            Not After : May 18 00:40:55 2025 GMT
        Subject: CN=681ff217-57a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:cd:33:c9:58:d2:9a:9b:58:3a:68:7f:53:
                    15:64:51:c6:34:d3:54:68:2a:f0:42:bf:df:07:db:
                    47:02:09:ba:82:b0:ec:89:2f:09:d2:7c:44:1e:35:
                    ae:84:7a:d9:97:4e:99:ef:c5:49:3d:4f:e7:06:8c:
                    35:0c:c6:b9:d7:71:80:34:69:06:39:0e:ae:e2:1b:
                    5e:a6:b4:db:1e:70:11:bc:2f:dd:d4:52:05:ca:f8:
                    62:af:a3:a5:f2:c6:1d:6a:fc:6e:c5:19:98:0d:b0:
                    e1:91:21:b8:3a:dd:41:ee:15:24:5d:92:76:47:66:
                    99:ae:93:b5:80:bc:71:3f:da:16:f8:fb:e7:9d:c4:
                    a7:db:5c:22:2c:06:3c:17:d8:96:ff:eb:3c:a1:27:
                    e9:bb:e2:70:66:0e:53:12:b1:ee:ee:57:18:09:2b:
                    49:c9:6e:28:27:92:b5:94:9c:84:7d:6d:4d:65:e1:
                    a7:07:2e:8c:4e:41:e4:51:12:d5:a7:d2:d2:f9:36:
                    f4:0d:2e:2b:ec:4e:c8:27:f4:1e:62:92:da:41:39:
                    e4:77:2a:02:51:53:4a:39:c5:1f:56:4e:c9:2d:8c:
                    8c:71:11:a9:e7:47:ec:00:b2:f9:8b:ef:ed:d3:6d:
                    18:21:ee:a1:78:6a:5b:2c:09:a2:2c:1f:a9:11:5d:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3B:69:6D:30:2B:22:34:89:A4:7A:05:00:29:C6:5D:0D:B1:0D:99
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:14:ee:f6:b7:65:1d:e8:37:c2:66:34:f5:d3:f5:f6:ad:34:
         67:68:6c:3f:a8:b2:96:93:12:1c:67:ff:6e:d1:67:c9:53:2d:
         1e:47:65:4a:c8:69:49:39:b4:e6:52:ea:a3:7c:e7:6a:5c:31:
         91:85:8a:c1:06:fa:57:28:34:0d:b0:a7:67:ef:f3:c7:16:1e:
         fd:56:5f:a3:fc:ec:1e:8d:41:e1:3b:b2:3e:f4:8d:db:8c:c5:
         6f:83:57:4a:13:4b:2f:98:59:f1:27:94:25:56:44:68:51:34:
         67:24:60:f9:15:ab:9e:bf:da:11:90:4e:db:ed:9f:fa:a4:8e:
         10:be:66:86:c5:ef:c4:cb:a5:74:e4:ba:f6:9a:76:b9:b1:84:
         e1:30:89:ed:00:55:08:e3:48:83:bd:b2:07:6f:93:ec:c4:53:
         f1:56:e1:b9:b4:5f:c7:ee:2b:c0:1c:2f:65:1e:17:3c:e8:f9:
         c6:b8:0f:ed:3b:25:f5:07:53:6d:a5:d7:c5:46:4b:38:bc:2a:
         b9:b7:9c:d1:8d:0a:e7:2b:3e:ec:c5:76:bd:bd:21:00:c3:e2:
         84:f5:90:c0:56:80:73:33:a2:8b:94:51:d5:14:80:1a:00:0e:
         ff:54:9f:bf:03:60:68:62:71:4b:3b:df:12:22:d0:96:e1:53:
         49:ab:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:24:57 2025 by rpki-client