Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
File:                     EYuDYeRNUFJcthNQslJrWfbeLc0.mft (raw, json)
Hash identifier:          CYGjm4KIc/v03YqgmcxniVonQbKct8sMVkTWmwcuusw=
Subject key identifier:   A9:DF:3D:24:7D:5F:CA:C8:9B:89:FC:B1:32:3A:B1:ED:80:F0:A0:63
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
Manifest number:          015F
Signing time:             Sun 11 May 2025 02:55:28 +0000
Manifest this update:     Sun 11 May 2025 02:55:27 +0000
Manifest next update:     Sun 18 May 2025 02:55:27 +0000
Files and hashes:         1: EYuDYeRNUFJcthNQslJrWfbeLc0.crl (hash: M+EKe/k1h1MA9lTpvRRoIdWfGn4CrQAxBEwR8yvpexc=)
                          2: 6A13CBAC04D711F0BC472C19C4F9AE02.roa (hash: NpaEZC+frVowfr+OkTk62XtMeb2kHhDxkhfc9nCsgm0=)
                          3: 62752E9404D811F0BE92A51DC4F9AE02.roa (hash: ZKVR1lrcdLxvriA1prCteQU1sWugc5ZdRQWr2+79yO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A, serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
        Validity
            Not Before: May 11 02:55:27 2025 GMT
            Not After : May 18 02:55:27 2025 GMT
        Subject: CN=6820119f-8c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:08:2e:d8:07:47:6b:ad:e1:ee:78:d4:91:
                    35:28:f0:a1:f7:a2:aa:07:d0:81:8e:33:4d:20:dd:
                    b1:35:36:11:7e:c8:61:94:59:06:49:f8:1b:79:5a:
                    57:cb:42:c1:8b:47:6e:f5:44:03:af:5f:98:ce:f0:
                    0b:7b:50:6c:10:be:c5:b4:5b:ed:23:d3:13:91:b3:
                    44:b3:10:c6:89:a5:66:d1:c2:e8:2a:6d:38:5b:a3:
                    9e:13:45:4a:94:46:d6:22:35:ef:bc:c5:59:1d:b8:
                    cb:bf:6b:b3:a5:e8:46:cc:17:18:98:36:77:eb:03:
                    e5:7e:8d:f2:14:71:d9:7b:93:ab:74:54:b3:f2:f4:
                    c9:b6:e6:de:fe:50:e4:1c:34:7a:bb:6d:7d:d5:ef:
                    73:f2:49:f3:87:9f:a0:35:17:f1:6e:87:df:1e:e3:
                    e2:0c:56:3e:38:10:22:e4:d9:d9:a3:59:f3:41:5b:
                    21:f5:06:ae:0d:90:e6:31:2b:18:f2:d3:ac:1b:cb:
                    c7:da:bf:50:57:4f:b9:5d:fd:17:e7:03:1a:a8:10:
                    e8:31:c1:75:d8:31:20:12:7a:c1:49:87:5f:3d:50:
                    f9:df:09:2f:db:a8:33:34:cf:5b:c6:47:52:83:a8:
                    ff:bb:e7:5e:58:2d:67:26:d0:f6:3f:92:b1:33:da:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DF:3D:24:7D:5F:CA:C8:9B:89:FC:B1:32:3A:B1:ED:80:F0:A0:63
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e1:f6:90:c0:5d:3d:f2:15:7d:a1:5b:a6:8a:81:d0:16:bc:
         18:a4:cf:9b:ee:d6:83:a8:c0:02:93:3d:20:09:fe:d3:51:60:
         39:3c:8e:25:d9:5e:72:71:b2:5e:6a:76:2e:e5:b5:ad:cb:8a:
         ab:70:90:a5:1e:07:da:69:1f:f0:62:e9:59:0a:c2:0c:b5:c7:
         85:c5:93:6d:d3:85:e6:eb:b7:10:11:05:0e:7a:b1:86:de:5e:
         37:ca:99:ff:e5:1f:69:c7:cf:41:48:54:9f:b2:02:34:ed:7e:
         16:ff:8a:d3:2f:98:20:70:28:95:19:db:54:37:a2:a7:ec:01:
         0f:09:63:7a:50:18:8e:61:9f:04:b9:79:c8:10:70:61:a2:ed:
         9a:08:a1:f9:61:c5:87:9d:a7:d2:47:6d:71:70:69:20:c3:68:
         ce:83:6d:7b:03:5e:12:d1:59:47:f8:70:80:15:9d:52:06:86:
         88:2a:e1:c8:1c:a8:89:55:c7:20:db:d2:d8:65:18:28:e8:43:
         3c:16:b8:73:9f:cb:24:23:a4:3e:1a:75:5b:05:b9:4c:92:4e:
         71:01:db:71:5d:d5:d9:0c:d3:a0:9c:d2:83:15:71:35:a3:69:
         7d:f0:a1:12:fa:90:97:c1:bd:89:3c:ee:54:ed:c1:ef:c5:b1:
         3b:2c:31:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1MEIyNTI2QjU5
RjZERTJEQ0QwHhcNMjUwNTExMDI1NTI3WhcNMjUwNTE4MDI1NTI3WjAYMRYwFAYD
VQQDEw02ODIwMTE5Zi04YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA644ILtgHR2ut4e541JE1KPCh96KqB9CBjjNNIN2xNTYRfshhlFkGSfgbeVpX
y0LBi0du9UQDr1+YzvALe1BsEL7FtFvtI9MTkbNEsxDGiaVm0cLoKm04W6OeE0VK
lEbWIjXvvMVZHbjLv2uzpehGzBcYmDZ36wPlfo3yFHHZe5OrdFSz8vTJtube/lDk
HDR6u2191e9z8knzh5+gNRfxboffHuPiDFY+OBAi5NnZo1nzQVsh9QauDZDmMSsY
8tOsG8vH2r9QV0+5Xf0X5wMaqBDoMcF12DEgEnrBSYdfPVD53wkv26gzNM9bxkdS
g6j/u+deWC1nJtD2P5KxM9qovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnfPSR9
X8rIm4n8sTI6se2A8KBjMB8GA1UdIwQYMBaAFBGLg2HkTVBSXLYTULJSa1n23i3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjc2QS8yRkJBOEJGRTE5
NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVGSmN0aE5Rc2xKcldmYmVM
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VZdURZZVJOVUZKY3RoTlFzbEpyV2ZiZUxjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Rjc2QS8yRkJBOEJGRTE5NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVG
SmN0aE5Rc2xKcldmYmVMYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAj4faQwF098hV9oVumioHQFrwYpM+b7taDqMACkz0gCf7TUWA5PI4l
2V5ycbJeanYu5bWty4qrcJClHgfaaR/wYulZCsIMtceFxZNt04Xm67cQEQUOerGG
3l43ypn/5R9px89BSFSfsgI07X4W/4rTL5ggcCiVGdtUN6Kn7AEPCWN6UBiOYZ8E
uXnIEHBhou2aCKH5YcWHnafSR21xcGkgw2jOg217A14S0VlH+HCAFZ1SBoaIKuHI
HKiJVccg29LYZRgo6EM8Frhzn8skI6Q+GnVbBblMkk5xAdtxXdXZDNOgnNKDFXE1
o2l98KES+pCXwb2JPO5U7cHvxbE7LDFL
-----END CERTIFICATE-----
Generated at Mon May 12 16:53:47 2025 by rpki-client