Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          Ftw8e/ldQsvHawc1TZOVqY+xKqKNwqnel21D9DHHpeY=
Subject key identifier:   E5:12:98:94:51:04:76:D4:E7:6C:01:17:42:0A:08:88:D9:06:8C:29
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1D0D
Signing time:             Wed 02 Jul 2025 16:16:55 +0000
Manifest this update:     Wed 02 Jul 2025 16:16:54 +0000
Manifest next update:     Wed 09 Jul 2025 16:16:54 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: 0nvT4RzETpWimssEsNVdB/8r0FZ/FxhUqDh60n9MUHk=)
                          2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
                          4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7446 (0x1d16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jul  2 16:16:54 2025 GMT
            Not After : Jul  9 16:16:54 2025 GMT
        Subject: CN=68655b76-ffd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:69:8f:18:b8:3d:55:a5:68:e9:39:8a:09:
                    07:9c:d5:8a:72:08:ce:6f:bb:6c:0e:cf:01:79:e0:
                    e8:6e:56:8d:85:c0:80:93:88:c9:7e:12:62:de:35:
                    05:3f:d5:0c:22:02:7b:96:d5:d8:13:9e:81:14:6d:
                    fa:83:92:ba:e7:8a:d0:cb:23:92:92:cd:da:4f:c6:
                    a5:57:40:ff:01:9a:44:72:8b:d8:7b:98:58:b0:c3:
                    28:db:97:15:33:f2:70:c7:c0:52:ef:54:06:bc:71:
                    a7:4a:de:ff:81:ff:71:e1:79:c3:ef:bc:f6:29:01:
                    a2:85:00:6d:6f:3f:0e:28:07:bb:da:db:92:73:8b:
                    f6:57:91:49:e5:f4:95:2d:99:40:cd:2a:5b:f3:16:
                    aa:89:81:65:9f:7b:84:18:bf:c1:12:05:29:53:05:
                    90:07:07:07:2b:43:6a:3a:c2:5f:13:c3:3e:6b:90:
                    1e:9e:59:6a:40:22:43:42:1f:fa:b0:af:01:61:b5:
                    eb:3f:77:16:2f:0c:4e:51:62:5a:07:8b:ec:ce:12:
                    5f:dd:4e:2c:aa:7c:ac:8a:de:c0:34:90:5d:58:2d:
                    66:d4:9a:da:58:28:89:a1:6c:cb:a5:98:af:00:8c:
                    b1:26:6e:6d:01:da:c0:04:4c:38:14:a9:d6:5c:5f:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:12:98:94:51:04:76:D4:E7:6C:01:17:42:0A:08:88:D9:06:8C:29
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:89:7f:63:93:34:f8:9c:34:3d:e1:49:ef:18:cd:89:aa:
         d3:02:f6:fb:6f:4a:d6:af:ff:4d:65:29:db:20:30:dd:c7:78:
         fd:70:fb:b9:7d:34:2e:f5:71:b7:4c:00:cb:0f:da:c6:2e:35:
         57:92:04:21:89:7e:59:37:30:e3:88:08:74:52:8c:33:7d:38:
         4f:db:a3:17:5e:8b:16:e5:c0:e5:2b:95:90:5f:b2:ec:fe:f2:
         f6:f5:c0:88:1a:39:d1:3d:6d:9e:90:96:a1:9c:d9:09:77:7c:
         d3:6e:74:57:38:b9:dd:38:88:b4:35:6f:b3:79:83:64:6a:4b:
         5b:80:b1:8c:ef:aa:e9:d8:15:e2:54:ad:87:3c:a4:76:0f:92:
         46:ec:8e:d8:3e:17:0b:d7:df:2c:b8:da:21:a9:fe:a1:2e:ca:
         52:16:cb:eb:50:5d:a4:bc:a0:a9:a4:09:c5:3c:aa:18:db:07:
         2d:2e:71:6d:3f:ea:7e:30:85:f0:d7:e4:b1:a3:cc:b5:f0:c6:
         52:c7:96:f1:77:2f:d6:52:ed:37:d0:93:91:70:9b:85:7b:34:
         5c:40:9d:b7:56:8f:ce:7c:e2:84:31:96:ee:0d:0a:1d:ee:79:
         9f:ab:b3:e9:08:b5:53:59:46:9e:0a:b2:e7:17:ec:4e:b0:0a:
         e5:0a:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:29:55 2025 by rpki-client