Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File:                     eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier:          4njkOtz+rIjEyh9NIYiWVOuPOfsLipNr2firWPWF2jM=
Subject key identifier:   69:18:85:83:21:86:7B:D9:5B:AE:66:73:2B:A8:CA:58:C4:73:C2:13
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number:          01A1
Signing time:             Tue 01 Jul 2025 03:45:47 +0000
Manifest this update:     Tue 01 Jul 2025 03:45:46 +0000
Manifest next update:     Tue 08 Jul 2025 03:45:46 +0000
Files and hashes:         1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: kf8FbYSv9lX35EVKxQl+K5kM6mX/HccHP+k2bD2seAM=)
                          2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: xpJQj3FLnsfznpdCwuN3h/+cdNnHyzN0YqXddFix6QE=)
                          3: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: 2GHJ1eE18Gw1U3Nhz428VPqQLi1QexDRz0jLOu9pd2U=)
                          4: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: vA9puEUvhfG2n8dLVkfh+qkvE8ijdTRvg0CgqQT4yNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: Jul  1 03:45:46 2025 GMT
            Not After : Jul  8 03:45:46 2025 GMT
        Subject: CN=686359eb-1b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:81:a9:b3:5d:f4:6c:90:f0:e8:e8:bb:24:
                    7e:a2:ea:fd:a9:03:51:4c:5e:8c:d2:d6:b5:7d:0e:
                    c9:e4:13:f6:c7:78:82:5a:cd:dd:09:9d:64:4c:0b:
                    67:4d:33:19:74:e9:01:1e:fa:7f:80:a8:46:b7:64:
                    dd:1a:bd:79:56:c9:13:6a:04:87:db:a3:34:9f:03:
                    f3:5a:43:b8:96:76:39:1f:76:00:31:db:61:bb:bb:
                    96:cd:39:ad:9d:9e:51:4d:ab:6c:d5:1d:3f:90:44:
                    e8:e1:a4:b2:2b:c7:de:1c:64:40:40:d5:dd:8e:64:
                    24:3c:4e:3d:60:69:07:e8:38:e2:d4:55:ca:4f:57:
                    6c:5b:e2:cf:a6:a9:a6:4f:0e:3e:5b:a1:1a:0b:29:
                    a2:9d:46:ba:52:3d:13:5e:ca:57:2e:b6:5b:cc:6d:
                    10:e6:ff:cd:86:8f:b6:7b:46:67:48:20:80:10:2b:
                    0a:6e:de:f2:bf:45:9e:51:16:8d:16:8d:93:5c:f1:
                    ff:b1:03:03:d7:67:59:99:cf:73:88:5f:68:6b:15:
                    3f:38:03:38:26:c2:aa:3f:d3:7d:c4:e2:a8:de:b3:
                    1f:f9:56:f2:f7:11:a0:14:47:23:b4:c0:f8:46:14:
                    9a:bd:73:36:2c:71:ba:38:07:f4:d7:fc:35:f9:e2:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:85:83:21:86:7B:D9:5B:AE:66:73:2B:A8:CA:58:C4:73:C2:13
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e3:30:c4:af:e5:1a:b6:95:1a:91:91:26:24:b2:ab:dd:13:
         b6:22:6c:66:63:37:f4:f4:2b:d2:2d:31:14:0d:1f:72:62:9a:
         83:ad:02:b0:33:60:ce:1f:f2:fc:54:c4:86:17:c5:3d:d8:9b:
         e2:71:cb:02:57:75:81:87:86:a0:a7:91:58:85:2d:18:98:18:
         13:8e:29:cd:d0:50:56:19:a9:a3:64:fa:4f:78:14:76:50:f5:
         e2:46:ff:d6:29:27:d9:bb:47:38:78:42:5a:60:79:22:f2:98:
         7d:15:5c:79:d3:c0:0a:22:69:37:c7:99:e4:67:96:5b:7f:c2:
         86:7b:5b:1c:8e:01:62:be:94:db:7f:00:b3:9a:3f:ec:38:58:
         a7:bd:3c:0a:bb:32:fa:ff:db:ac:58:18:11:38:47:3e:62:76:
         39:f1:3e:ad:67:16:e1:eb:a1:66:79:0c:b2:d9:f1:fe:c6:60:
         48:53:4b:9d:2c:92:bc:8b:ed:70:f1:d5:8c:26:5b:3e:c3:aa:
         25:39:27:bc:60:09:de:ef:4c:62:72:4f:ce:af:e2:67:a4:96:
         8c:97:fc:18:61:63:1f:25:18:66:44:62:62:86:2e:0d:b5:81:
         a3:65:f0:d2:b0:b5:d1:62:d0:41:4a:c1:d4:dd:ce:79:e7:47:
         dd:a5:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:29:00 2025 by rpki-client