Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
File:                     eFGQATcElYfBJg7e1Re30ooYjrM.mft (raw, json)
Hash identifier:          yL12xpBebkbVVLeAxSv6TIOfoTgcZ4p61B3S3+eR5pQ=
Subject key identifier:   0C:03:E7:DF:9E:FA:4E:7D:63:D3:03:D5:F5:FF:62:B9:2C:14:D9:63
Authority key identifier: 78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3
Certificate issuer:       /CN=A9130D7B/serialNumber=7851900137049587C1260EDED517B7D28A188EB3
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
Manifest number:          05A2
Signing time:             Mon 12 May 2025 22:57:56 +0000
Manifest this update:     Mon 12 May 2025 22:57:56 +0000
Manifest next update:     Mon 19 May 2025 22:57:56 +0000
Files and hashes:         1: eFGQATcElYfBJg7e1Re30ooYjrM.crl (hash: t3ehES2i65VR82RGxwOYkoNBIkq7aVAFPd9HIhrqy5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl
                          rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 22:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130D7B, serialNumber=7851900137049587C1260EDED517B7D28A188EB3
        Validity
            Not Before: May 12 22:57:56 2025 GMT
            Not After : May 19 22:57:56 2025 GMT
        Subject: CN=68227cf4-b63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:19:55:47:8a:84:bf:17:2b:af:d6:af:68:
                    a4:f2:18:d9:8a:b1:1e:69:4d:f3:1a:96:28:31:22:
                    f2:a7:f4:37:89:8f:d4:35:00:d3:2b:c7:48:93:d5:
                    57:fc:f2:90:a2:ef:73:71:33:3d:07:b2:d7:c7:75:
                    a2:d0:20:4c:8a:90:93:23:6b:2c:ff:58:83:39:43:
                    a4:fc:ad:e3:b5:fa:19:b4:e3:55:bb:9f:84:28:52:
                    88:5c:27:e8:f2:59:b7:7e:65:1e:80:c1:54:d1:e7:
                    46:61:f1:42:51:fc:dc:b1:a2:d4:69:e4:c6:92:1c:
                    1c:84:d7:03:b0:25:4c:f4:b0:48:4e:1f:28:42:c5:
                    ef:f0:b5:e3:f0:0a:e5:2f:69:a3:92:5d:c5:bc:3d:
                    44:da:6d:f1:0e:88:8a:8c:0a:6f:9c:95:03:b5:8a:
                    61:3c:c7:41:42:82:d7:8f:9d:55:33:f6:8d:58:50:
                    17:be:43:80:d7:b7:af:ea:fe:c9:3a:5e:77:d6:9c:
                    43:2d:83:2d:43:0a:da:03:46:bd:35:f4:dc:a2:9e:
                    02:d7:58:8f:6e:38:be:c5:32:e3:26:37:43:3a:28:
                    8e:69:fb:65:69:f7:d6:47:56:a4:32:2c:1a:77:52:
                    ed:33:9c:8d:a4:7e:20:69:5a:d1:cc:2d:54:e5:40:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:03:E7:DF:9E:FA:4E:7D:63:D3:03:D5:F5:FF:62:B9:2C:14:D9:63
            X509v3 Authority Key Identifier:
                keyid:78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:12:07:1c:4e:87:22:91:9e:e1:fd:0e:7e:d7:49:d5:1c:2c:
         18:5d:b7:26:a6:a1:f6:46:bf:69:40:13:45:69:6f:08:f5:4a:
         0a:2e:f1:bb:da:aa:07:8a:cb:3a:c8:c5:64:af:8c:91:c5:56:
         c3:54:07:bc:0b:56:85:45:ee:35:24:89:1e:cc:39:bb:a8:0b:
         a9:ca:63:bb:b7:5a:f7:f0:74:2e:bf:ca:d4:b1:1c:1e:0a:a4:
         03:f6:bf:bc:21:f4:9e:f6:c9:f5:ef:63:ed:ab:1b:1e:e2:cf:
         48:01:b6:84:bb:29:df:06:93:df:c0:92:85:55:8c:88:70:f7:
         cf:ce:a3:79:30:6e:40:ce:fc:d3:ec:ec:25:24:3b:0b:15:cb:
         e8:af:2b:78:9b:67:b5:38:8b:cd:b4:43:ce:1e:2e:f6:e3:4d:
         46:fa:14:ed:30:9c:80:79:64:65:87:a8:c8:c3:78:32:18:e5:
         a3:d7:28:78:80:e6:ea:3a:81:2d:e3:09:4a:8c:71:a2:d7:46:
         36:9d:70:14:46:62:02:39:b1:91:ef:c5:65:b3:eb:e2:31:31:
         8d:90:46:43:f9:c8:a6:b4:72:22:c1:bf:77:35:cf:21:f1:72:
         6a:f8:de:ec:83:be:5d:25:ed:d4:e3:d9:3c:30:bd:56:02:a1:
         6c:98:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:20:42 2025 by rpki-client