Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File:                     EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier:          UlZZkC5j8n2iG2KOYPHjEFwo3OeGNSPYW8p7GW1sqrI=
Subject key identifier:   EE:07:0A:A4:18:13:7E:EF:97:4F:20:0E:D1:D1:96:43:DA:FB:80:16
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number:          012C
Signing time:             Tue 01 Jul 2025 05:02:56 +0000
Manifest this update:     Tue 01 Jul 2025 05:02:55 +0000
Manifest next update:     Tue 08 Jul 2025 05:02:55 +0000
Files and hashes:         1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: iAetmov/vVtIf7sS+0cJrR/rPekiNQXlELFS1nQUE+o=)
                          2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: r83+P5wwwiIwwYZo3ZZK7LMVTjywGsoMBTEhdRdJ9rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: Jul  1 05:02:55 2025 GMT
            Not After : Jul  8 05:02:55 2025 GMT
        Subject: CN=68636bff-0730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:28:7d:f3:70:80:58:10:54:b5:00:ee:79:
                    f8:32:58:fa:aa:3b:c8:82:c6:57:db:a3:df:47:c9:
                    fa:98:9b:0d:d9:68:2e:5b:82:17:4a:91:f3:db:71:
                    2b:31:e4:0f:b5:2e:3f:2f:8e:81:d5:20:95:b6:2c:
                    1f:7d:ba:76:1e:87:1d:26:79:b4:1e:4a:7d:04:46:
                    4c:b0:f1:64:c1:3d:43:04:a9:41:b3:76:71:57:d2:
                    4a:d3:31:27:ef:9e:41:75:2a:91:b1:34:c9:38:c0:
                    b6:6f:cd:5a:ec:48:87:98:90:5b:d2:29:ea:e6:d3:
                    68:c3:eb:a3:c2:ce:1c:d8:16:c0:54:c7:72:30:d9:
                    ab:b6:e1:00:37:ed:cc:b7:4c:20:a9:bc:ef:78:b8:
                    44:37:b5:dc:fb:51:98:5b:aa:6c:bc:c9:6b:86:61:
                    3a:a2:63:cf:38:46:ac:37:d3:a0:47:91:b0:15:fa:
                    4c:8f:2f:67:fe:6c:90:52:60:5e:c6:fb:b7:79:7d:
                    86:dc:6f:86:51:4d:f7:8a:c0:75:3f:98:e4:9d:cd:
                    9c:85:cc:4e:04:95:69:0d:12:cb:01:24:80:86:25:
                    4c:97:c6:82:1b:c4:09:14:eb:0b:77:0d:26:5c:c1:
                    84:b7:cb:2f:26:98:f8:77:99:fe:d0:4f:3e:81:5c:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:0A:A4:18:13:7E:EF:97:4F:20:0E:D1:D1:96:43:DA:FB:80:16
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:fe:49:72:49:22:b7:4e:db:30:eb:ed:cd:82:06:54:4b:
         de:ab:3f:4d:e6:fa:d8:30:90:fb:b4:9b:6d:0e:d5:c6:67:48:
         ab:3b:1c:7c:72:1a:51:3d:c6:0d:06:ee:a1:55:b2:e0:22:47:
         78:41:f7:4b:29:bc:e1:f3:cd:b3:96:22:98:86:67:8a:84:e5:
         ae:a4:a9:56:70:c4:22:a3:74:b9:a4:55:e5:c4:5f:b6:51:35:
         61:4d:cd:ed:6b:62:35:dc:0a:f8:28:f2:0c:5e:95:ff:56:c5:
         94:95:03:f7:90:cf:d5:b7:a7:b7:24:43:f4:57:4b:a5:97:77:
         07:09:6b:28:7a:e8:74:39:b1:f4:e1:ba:1d:06:b3:82:d6:88:
         67:4f:1f:e8:82:45:85:30:68:84:f7:ce:12:7f:df:35:b8:36:
         52:cd:e7:53:ce:3f:9f:fb:af:ad:e1:84:a9:32:93:fc:b9:45:
         70:f1:c4:87:e6:61:7d:2b:75:6c:9b:ce:7f:75:0f:ad:62:5b:
         bd:6e:0d:5b:17:26:c5:95:91:34:00:0f:30:e6:51:4f:26:dd:
         51:f8:3a:87:27:ab:bb:c2:09:b1:0f:5e:27:a5:69:1a:8f:62:
         fd:83:22:db:99:5b:1f:a0:b0:7d:0d:b8:bb:26:12:9a:d0:60:
         f6:d7:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:35:18 2025 by rpki-client