Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File:                     EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier:          OxxGksAN/n0Oo0neyHh9EILvGRJtc4IvSE/kcZyn0KY=
Subject key identifier:   3D:80:3F:87:6F:24:A9:80:61:8D:45:F1:F0:02:1D:9A:27:3B:55:C7
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number:          0147
Signing time:             Sat 23 Aug 2025 04:24:22 +0000
Manifest this update:     Sat 23 Aug 2025 04:24:21 +0000
Manifest next update:     Sat 30 Aug 2025 04:24:21 +0000
Files and hashes:         1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: dSz307VOPMB+GArkZ5JlYapmMo7OP8b8H7RGARRWiS4=)
                          2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: r83+P5wwwiIwwYZo3ZZK7LMVTjywGsoMBTEhdRdJ9rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: Aug 23 04:24:21 2025 GMT
            Not After : Aug 30 04:24:21 2025 GMT
        Subject: CN=68a94276-878b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:ce:aa:9e:3e:d0:68:bc:7b:5b:de:bd:bf:
                    1c:14:fe:b9:e7:26:b9:36:bb:f1:9f:af:b2:66:df:
                    b7:e8:f2:51:39:c0:7d:2a:1c:75:a8:de:03:c0:1a:
                    b0:d3:76:cc:b5:68:28:c6:35:78:3c:0b:02:83:41:
                    53:a3:83:c8:ee:0b:35:cd:10:cf:8c:46:32:c1:93:
                    84:c7:c4:28:d2:20:db:d1:0a:eb:9e:1d:7c:af:b5:
                    06:3a:c8:7e:8f:39:ea:b3:4e:9a:b9:2f:70:66:c8:
                    84:49:13:57:75:73:81:9f:42:b7:a9:d4:4a:71:53:
                    96:37:2a:49:ba:2f:8b:05:e3:37:ee:95:a9:70:46:
                    15:f1:11:8b:8f:2a:79:e1:75:3c:53:30:ff:f5:8b:
                    c3:f9:b5:fa:0c:fb:f7:fd:b2:7f:0b:75:6f:2c:bc:
                    20:b2:36:36:f8:c5:3c:dc:68:1f:e1:3f:8b:fd:c6:
                    b4:c1:d7:4f:ac:4c:f0:63:84:5b:07:53:d4:cb:d3:
                    a3:3e:ec:ab:01:f3:f2:0a:30:2c:3c:c0:86:a6:ca:
                    3c:65:be:33:15:67:dc:b8:e2:cd:5e:d4:94:b0:61:
                    0b:86:28:39:00:92:cb:13:00:35:ff:15:e6:be:3e:
                    88:07:ef:60:e1:7a:c6:cf:54:40:9e:f6:2c:a8:e2:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:3F:87:6F:24:A9:80:61:8D:45:F1:F0:02:1D:9A:27:3B:55:C7
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:1c:d7:66:8e:98:0b:6b:bb:6d:1a:a7:d5:1b:f1:3b:6b:
         2c:c9:db:76:d7:be:bd:57:1e:03:08:e8:8d:67:28:c2:e5:1f:
         77:53:2f:44:10:3f:bc:61:3f:95:89:08:d7:be:fd:96:4f:87:
         8d:4c:96:b7:34:7d:b3:69:bc:4f:0d:a2:6f:7a:10:88:a3:a9:
         0d:13:4d:85:7a:20:e5:10:4c:5f:01:82:df:97:b4:63:82:84:
         30:20:0a:bd:d8:ef:30:db:c1:ee:1f:05:35:c1:8c:e1:a7:cf:
         fe:12:69:17:64:d8:f9:37:5a:6f:d3:fd:54:59:3a:41:3a:fc:
         eb:f0:8a:1b:db:fb:c4:19:68:40:cc:56:c0:17:6b:94:68:11:
         c0:d2:bb:50:3b:8f:77:c5:78:08:5d:31:f5:d6:21:36:e1:06:
         9e:63:db:a3:5c:02:63:03:21:e2:ff:2a:fb:f9:ca:e6:48:d6:
         25:b8:71:68:a3:ef:55:6f:56:5c:75:d9:8d:cc:94:cb:6a:eb:
         ab:ce:e9:01:b7:d5:ff:d4:ef:a1:5e:99:51:3f:a6:07:e4:c8:
         11:f1:03:9a:9d:8b:3e:85:55:fd:fb:dc:3a:00:a4:2a:98:bf:
         8f:c1:d5:ae:02:95:b7:1a:bb:b1:90:56:e2:b4:00:b0:51:68:
         5f:d7:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:49 2025 by rpki-client