Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File:                     64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier:          JWQIiYV/rMfGxdAnMaWv6EjOYchDotv/3eG2hAaeXNU=
Subject key identifier:   58:28:62:CA:4D:8F:A4:8B:ED:08:8A:26:0F:2E:A9:B9:21:14:07:49
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0D8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number:          0D60
Signing time:             Wed 02 Jul 2025 18:12:55 +0000
Manifest this update:     Wed 02 Jul 2025 18:12:55 +0000
Manifest next update:     Wed 09 Jul 2025 18:12:55 +0000
Files and hashes:         1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: JvAjL1GYX0LBoeINpWu44TJy0zZeSX/NPSzemT59nhM=)
                          2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: yCxqzmWa893doOfv6hENPdTITWlM9j+UWoyn6s0IOuA=)
                          3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc=)
                          4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: UjEhrY6BSDNfZnVVPw3EjbmEipeGvEYmxIV0JR9ypjw=)
                          5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Jul  2 18:12:55 2025 GMT
            Not After : Jul  9 18:12:55 2025 GMT
        Subject: CN=686576a7-11ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:c3:9a:59:4f:4d:69:21:08:1b:28:c2:94:
                    69:b4:20:c6:52:b2:12:1c:1f:77:88:3f:86:13:b0:
                    ac:14:16:4b:6d:17:93:ef:15:f5:97:0e:ba:ae:3a:
                    8a:4e:ce:c7:b9:02:08:4b:1d:00:69:fc:12:08:5a:
                    e0:71:e1:77:f1:36:e9:37:f0:a6:2d:e2:bb:18:66:
                    b5:c5:58:5d:c6:ce:af:57:17:11:1f:2f:33:a9:11:
                    72:cb:e1:f6:c8:98:16:4e:20:12:b6:49:9e:7c:bd:
                    b5:ef:4a:5c:5e:47:cb:7e:91:34:b4:a6:45:d5:4d:
                    6f:b2:c4:f0:76:c3:27:aa:77:ab:00:67:0c:62:cf:
                    1d:01:c6:7b:34:e1:02:0a:be:fc:0d:ce:99:72:76:
                    45:87:33:3b:d3:44:a4:61:1a:fd:37:37:5e:60:c7:
                    65:c6:77:4a:93:0c:b4:89:46:d1:09:76:82:81:d0:
                    db:1d:38:f5:c8:bf:75:3e:aa:a3:8a:7a:23:da:88:
                    6f:0e:6e:8b:52:6a:d0:ed:4d:fa:6e:8b:35:46:63:
                    2a:0c:d4:e7:2b:50:66:bc:d7:20:29:b3:6a:35:b6:
                    e5:4a:9a:f4:9a:a1:2b:21:d3:cb:79:99:0a:e4:96:
                    dc:67:f0:3c:9e:8b:e7:45:15:34:03:94:39:d0:83:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:62:CA:4D:8F:A4:8B:ED:08:8A:26:0F:2E:A9:B9:21:14:07:49
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:2b:a5:4e:9e:4a:63:0c:45:ff:7b:74:c8:93:e0:0d:7f:
         1b:54:9c:82:f3:e1:f7:44:e5:6a:78:0f:d4:76:b8:50:34:33:
         59:fd:a9:51:ba:ef:4e:29:4e:d1:5f:5f:12:b8:76:29:cb:dd:
         96:5b:d3:41:1d:a9:2e:43:e9:a4:f7:ce:43:42:4c:92:af:04:
         1f:54:c9:b6:fc:62:0f:a1:e4:d9:65:2c:4c:38:0e:2e:86:40:
         84:9a:6f:81:3e:60:d0:f5:ea:4f:57:90:07:0b:31:05:e5:72:
         a6:63:a6:80:c3:0d:f2:3e:fe:ff:97:fe:65:e1:a0:1a:fe:3a:
         2f:76:9b:67:42:ca:3e:3a:64:ea:7f:fc:fa:6b:d1:37:3f:af:
         d0:b8:c8:d0:df:13:8b:9d:8c:89:b4:2e:59:65:ed:50:8e:79:
         c1:08:5e:23:30:d4:26:38:1f:aa:1f:08:86:92:74:44:f6:56:
         1e:fb:41:dc:38:4f:db:a7:b4:e5:0e:32:42:28:c7:43:e4:03:
         7f:ab:14:15:25:25:ce:1b:5c:b4:6f:36:e5:ae:29:89:5a:6b:
         64:e5:ac:7f:86:c5:4e:3d:98:3e:e6:61:a9:1b:b6:2e:78:0d:
         c7:48:a2:84:4f:a5:5c:c6:69:54:ba:42:b2:19:64:bb:ba:2f:
         3b:3d:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:30:14 2025 by rpki-client