Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
File:                     EOFLjOUpYxKozRGO6q9tt-Rup9s.mft (raw, json)
Hash identifier:          xqxNnlGgEopVZ3IvNz6ftw+tzdIxy4/qe2gw/UbiYWw=
Subject key identifier:   FA:19:74:F3:DC:EB:D1:3D:72:8C:98:EA:77:04:54:06:FB:D2:20:63
Authority key identifier: 10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB
Certificate issuer:       /CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
Manifest number:          02CC
Signing time:             Thu 03 Jul 2025 01:47:20 +0000
Manifest this update:     Thu 03 Jul 2025 01:47:20 +0000
Manifest next update:     Thu 10 Jul 2025 01:47:20 +0000
Files and hashes:         1: EOFLjOUpYxKozRGO6q9tt-Rup9s.crl (hash: 35+Is17CE9tnVruKTV/aq+6dVX3ipHnjsDzVXYB8YAA=)
                          2: 8D57BBAAC0B811EEA3B71039C4F9AE02.roa (hash: WiH1FUNL9JStyDVza2qR9pAjLEVBVipRErQnDykrPNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl
                          rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913914F, serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
        Validity
            Not Before: Jul  3 01:47:20 2025 GMT
            Not After : Jul 10 01:47:20 2025 GMT
        Subject: CN=6865e128-8cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:95:78:2e:fd:1b:f4:06:af:b8:95:25:9d:
                    51:00:27:33:88:cb:c3:48:eb:b5:fc:d0:95:69:52:
                    04:d1:bf:34:ba:d9:a8:bd:88:a9:55:b6:05:57:66:
                    bc:f1:96:ea:c0:5f:0b:f2:f6:f5:45:40:ae:1b:ed:
                    43:ab:e7:56:94:e0:60:bd:6d:1d:4f:8b:ee:ba:60:
                    c0:e3:28:96:35:b4:b1:ec:23:b9:c7:9a:fc:b8:a7:
                    e0:19:fb:aa:62:7e:96:4a:9b:a6:e8:f6:31:dd:83:
                    c4:89:66:14:5b:1e:40:1a:07:ac:23:f4:57:4e:86:
                    5e:43:d6:2d:63:95:95:06:b0:6a:b8:fb:97:c0:b9:
                    35:fe:4c:fb:3c:27:6e:d6:d1:f0:d5:db:02:b6:b5:
                    3b:e5:a4:1c:3b:98:9b:f7:7c:8d:05:a6:60:c3:1a:
                    52:50:a5:6b:ff:4a:08:5e:74:e3:f4:90:76:f4:fd:
                    99:dd:1a:ed:15:23:65:9b:01:43:9c:13:b5:9c:50:
                    5e:44:98:ba:e7:39:32:26:84:69:98:49:5b:cc:bb:
                    67:06:28:1d:d9:56:16:98:0b:fa:15:17:2c:64:8e:
                    7c:22:50:df:27:57:17:e9:3a:f1:6a:60:8a:c2:9c:
                    88:85:06:b7:1c:5a:fd:95:5f:9d:8a:46:1d:ce:36:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:74:F3:DC:EB:D1:3D:72:8C:98:EA:77:04:54:06:FB:D2:20:63
            X509v3 Authority Key Identifier:
                keyid:10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:ea:5b:06:18:c3:26:ad:86:16:79:2a:24:13:a3:40:f0:
         4e:16:fe:05:a7:c2:08:eb:3f:b6:6e:11:b9:42:66:d8:25:1c:
         79:4d:68:75:c5:21:34:9b:cc:09:64:4f:4c:44:93:ed:d8:1c:
         57:a2:e1:f1:8c:e3:66:b3:60:3c:f6:02:fe:6e:30:ab:db:74:
         e7:ef:dd:e9:29:57:26:35:f5:91:bd:90:f9:0b:a4:77:be:5b:
         7b:51:20:da:71:f0:4a:e2:59:0f:a5:5f:07:d7:ef:17:bd:4c:
         fa:0a:02:df:de:17:ee:ce:dc:39:50:bd:1b:c3:c2:ec:bd:0b:
         81:fe:6d:3c:d0:b1:ff:cb:5a:92:b0:cb:8e:e3:4f:2d:91:df:
         e3:6a:ed:b4:7a:64:df:09:a8:c1:58:cb:6b:20:09:b7:26:2f:
         4d:b1:5f:0d:e0:dd:6a:39:e4:23:44:cd:23:7e:9d:e9:5a:be:
         21:ac:82:84:0d:da:34:80:d0:ba:41:2f:65:e0:9c:7f:b6:f7:
         a2:62:19:4e:c6:8f:7d:79:8e:00:1d:d4:c6:8a:ce:30:62:14:
         ee:93:54:94:1c:c3:dc:3c:df:9f:35:24:39:74:f3:a6:54:bf:
         23:23:82:fc:f3:7a:7d:fa:94:57:12:52:de:ff:e7:50:b4:44:
         4b:d9:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:04:39 2025 by rpki-client