Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
File:                     Eb6TUALwKMF878tfClhoOZJbU0o.mft (raw, json)
Hash identifier:          XMqwoMLVNO6cSXSI1byekn/mll0HhpiQ+D6Vmfa9KlM=
Subject key identifier:   92:91:1C:3A:D5:24:D4:53:6D:D8:90:5A:9B:94:96:39:25:93:8E:E4
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       0488
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
Manifest number:          0470
Signing time:             Mon 12 May 2025 23:58:07 +0000
Manifest this update:     Mon 12 May 2025 23:58:06 +0000
Manifest next update:     Mon 19 May 2025 23:58:06 +0000
Files and hashes:         1: Eb6TUALwKMF878tfClhoOZJbU0o.crl (hash: 9R1dzgrUp08se0GJQZG8RDn6ckbeXbE/+z3aMS40P1Q=)
                          2: DD6C545E09C811EE8591800EC4F9AE02.roa (hash: XHEj0/VOcaEAp8kGdqYnSsA9MJOujRUQRX0ZVKAE4yE=)
                          3: D510745CEDB011EF8DFB1285C4F9AE02.roa (hash: mkdcNiRN7WmsqgoxZDJMLaSm19QMGSaPtxWNLxau8CI=)
                          4: D4811B86EDB011EF8DFB1285C4F9AE02.roa (hash: UANLL/DIhHAE6oC8FAukWCm16igdFVnOAgYy/cB4YuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
                          rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: May 12 23:58:06 2025 GMT
            Not After : May 19 23:58:06 2025 GMT
        Subject: CN=68228b0e-7cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:42:51:60:75:7e:42:3a:da:83:c4:0f:33:
                    18:f9:04:f3:01:f7:f5:07:3c:11:e1:f4:46:32:81:
                    a3:f4:57:5b:4a:b4:00:bc:9b:2f:b9:38:7f:a6:95:
                    48:ec:ba:a8:83:96:bb:3b:28:37:32:ac:ca:35:3c:
                    e0:a7:c8:23:2b:b6:a4:dd:35:1e:1b:6c:d4:a4:be:
                    91:7c:03:06:92:dd:e6:ca:42:98:f2:8c:96:e1:46:
                    57:fd:a1:28:0b:84:d1:8d:80:81:40:01:8e:1e:62:
                    70:39:2e:bf:46:ea:3d:73:9f:ea:12:2c:bb:9c:14:
                    3b:ec:9e:a0:85:ad:79:50:60:23:44:54:25:50:88:
                    6c:6b:bc:b2:23:c5:1e:92:53:b0:f3:41:f7:42:cd:
                    36:6d:94:d7:23:55:ac:51:aa:c3:36:07:9f:29:7b:
                    18:73:9b:c6:c5:d3:b6:54:9b:f3:34:10:be:3e:ed:
                    2f:a5:28:fc:00:98:ca:ef:3c:a1:f2:16:37:c3:89:
                    85:42:23:aa:08:50:58:94:d8:3e:fb:a7:5b:4a:7c:
                    9c:20:52:5f:7e:d0:c2:f0:3c:67:83:71:b1:90:7e:
                    69:16:52:fe:fc:fd:af:00:d5:79:c3:68:c3:77:7b:
                    6d:3c:99:3c:45:31:4e:83:95:8e:b5:82:a9:39:77:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:1C:3A:D5:24:D4:53:6D:D8:90:5A:9B:94:96:39:25:93:8E:E4
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:fd:44:d5:7f:a0:ee:22:96:35:33:12:32:c3:6a:c7:39:
         db:fb:0d:a6:1e:0f:41:63:c0:92:4c:28:77:e1:34:b1:9f:94:
         3d:05:d3:f1:72:ae:fd:40:59:96:1d:de:c8:71:ad:05:1a:1a:
         98:10:7d:f2:03:d8:da:e4:a8:16:90:1b:1d:2f:03:19:00:1a:
         71:5a:61:77:e7:51:75:f2:19:b4:d7:57:c5:88:06:95:83:d4:
         5f:57:10:b2:14:35:f0:36:ab:e7:7c:64:9d:81:3f:88:e4:4f:
         2a:0c:46:0f:c4:30:37:41:59:bf:2f:1a:df:6c:ed:69:ba:df:
         7e:eb:0d:6c:3a:1e:d5:cb:11:0f:ef:04:8f:04:c8:1a:a6:75:
         a1:7f:2f:8b:f0:c4:ab:d5:34:25:e8:94:24:b4:a1:56:4f:a1:
         70:2f:fe:7a:0f:58:e9:e4:e1:6c:96:c3:cf:ba:41:74:89:8d:
         63:2b:5f:e5:83:3f:4a:a9:ee:31:85:9a:95:98:9e:91:a4:31:
         ed:6d:85:90:56:10:09:98:dc:1f:83:72:f3:c0:a8:73:b2:e8:
         19:eb:d1:df:ef:08:cd:0d:31:e9:f7:fb:eb:49:72:7a:cb:80:
         bd:14:9c:0a:d6:ab:60:d4:25:2d:ae:b4:6e:c3:bc:74:22:9b:
         4e:66:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:38:13 2025 by rpki-client