Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File:                     eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier:          /vPfTmcj1AYWi8htdfGo2wWSAIkZEWhhZYhE4kK8RQI=
Subject key identifier:   7F:CB:37:ED:A9:D5:49:08:34:58:F7:CA:8B:C6:D7:01:87:31:FA:73
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer:       /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial:       0458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number:          0454
Signing time:             Thu 03 Jul 2025 00:33:29 +0000
Manifest this update:     Thu 03 Jul 2025 00:33:28 +0000
Manifest next update:     Thu 10 Jul 2025 00:33:28 +0000
Files and hashes:         1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: vtkNOn48bLmISpy78HMOliTgPlkjXjs4RjIJAh6f48Y=)
                          2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
                          rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382
        Validity
            Not Before: Jul  3 00:33:28 2025 GMT
            Not After : Jul 10 00:33:28 2025 GMT
        Subject: CN=6865cfd8-909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:2d:4b:48:a0:22:69:94:e0:03:13:38:eb:
                    b9:eb:e4:50:20:e8:bf:3b:7a:2e:63:31:cb:18:cb:
                    0b:ba:3b:ca:35:0c:ed:0c:b2:c6:f4:86:31:d5:f9:
                    77:ac:13:5f:37:e4:9d:57:6a:d9:18:14:e3:8c:87:
                    82:7c:c0:d9:33:e7:a5:83:e2:1e:99:c7:7c:f0:da:
                    a5:41:75:32:9d:8d:f6:78:84:f5:66:bf:a3:8e:07:
                    d2:ca:54:c4:03:16:ad:52:42:d5:34:0e:ab:dd:52:
                    53:ac:f3:b5:bc:05:eb:5f:d9:22:c1:5d:9c:e7:f8:
                    f0:d2:60:92:b2:83:00:66:87:3b:75:f0:d7:64:59:
                    8f:9b:80:d1:89:d2:ef:bf:e1:e2:d1:f9:35:e9:cd:
                    72:6e:28:f9:ff:54:66:3d:b2:5e:b3:1a:2e:3f:c2:
                    43:e3:7a:42:c4:80:9b:a9:eb:4a:7f:e3:70:c8:e6:
                    04:7d:63:85:66:3c:a4:e5:af:ab:d3:1e:03:5a:d8:
                    5b:b8:10:04:e3:a3:b0:e1:72:57:10:88:c4:91:76:
                    27:a4:b7:ed:fd:c3:7c:be:9e:3f:2c:fc:1c:c1:73:
                    76:fa:4c:cf:3a:81:bd:d7:d9:33:17:df:25:c9:e5:
                    48:cb:0b:16:8b:47:88:a2:44:ce:9d:8e:e1:35:de:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CB:37:ED:A9:D5:49:08:34:58:F7:CA:8B:C6:D7:01:87:31:FA:73
            X509v3 Authority Key Identifier:
                keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:66:be:75:02:de:7d:be:5e:cc:2b:b4:38:a7:f2:31:0a:a1:
         32:ab:c5:12:2f:a2:76:ff:f5:58:d0:c0:73:9d:5f:9d:26:99:
         f0:f5:76:16:c6:af:97:ed:c3:12:6d:aa:e3:8d:1c:56:7c:85:
         f2:1b:c2:a8:79:8f:97:0e:f0:d7:dd:8e:ba:d5:cd:83:d7:eb:
         a4:6b:69:49:73:c0:cd:44:3b:53:c8:60:dd:64:3b:9a:83:b0:
         23:95:4b:55:e8:8a:d0:7d:40:49:fe:75:e0:73:24:4a:ce:88:
         53:65:c2:14:83:80:16:94:d6:d7:6a:c3:ea:d8:ad:00:01:4f:
         26:7f:fe:b8:fe:5d:eb:29:c4:e6:1f:af:14:00:f4:03:e6:db:
         d1:5a:89:4f:09:91:32:85:c5:10:15:71:93:3b:62:e7:86:36:
         04:fe:30:79:44:b9:63:70:0e:a8:dc:5e:40:f3:d0:94:da:38:
         e2:d5:0a:60:e1:85:d5:cf:de:c3:fc:73:d1:9f:4b:24:6c:2b:
         05:91:da:9c:df:f1:6e:67:80:fd:c1:41:ee:58:4d:cf:ed:1c:
         ad:63:bc:7a:a5:89:64:f5:e8:20:49:59:1c:4d:d3:70:f2:cd:
         9a:1e:a2:d7:b5:6a:1b:4c:a2:b1:ed:08:a0:1b:29:e4:76:1b:
         0d:36:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:28:41 2025 by rpki-client