Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          +9GWZNnAxch1PAOW1Yu/0BXhLYvHd3zQJnwMCQdeK2A=
Subject key identifier:   CA:0F:F3:79:C1:DF:22:D5:71:6F:9C:75:53:50:AE:FB:6A:AD:AD:2B
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          03F3
Signing time:             Tue 01 Jul 2025 01:05:25 +0000
Manifest this update:     Tue 01 Jul 2025 01:05:25 +0000
Manifest next update:     Tue 08 Jul 2025 01:05:25 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: tx8NYYuis20AM7z0uXgvnAilvpmik8NuTDoyOJR4yIo=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Jul  1 01:05:25 2025 GMT
            Not After : Jul  8 01:05:25 2025 GMT
        Subject: CN=68633455-e289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:f5:70:4f:f1:e4:67:60:e5:70:55:7c:0c:
                    23:29:45:8c:48:76:f7:cc:f6:0a:8d:c8:45:18:35:
                    16:9b:ef:1d:23:5b:9e:cb:95:8e:1e:59:ba:27:bb:
                    0a:bd:9a:50:82:e0:dd:24:71:d8:63:c0:cb:ea:12:
                    9e:e2:b3:51:ad:cc:18:96:27:2e:61:0b:84:0d:5c:
                    b8:2e:7b:99:b5:44:61:99:7a:88:be:3c:f9:15:b4:
                    3c:81:05:7f:68:d9:8b:a1:6a:a1:91:d3:ef:53:9d:
                    09:1f:57:4e:26:41:7a:e4:ab:e6:2a:15:83:d4:ea:
                    81:da:c5:13:36:98:08:21:33:82:3c:e8:0b:01:c2:
                    4d:56:ab:6f:83:03:9c:88:22:2e:9c:4f:69:bc:61:
                    cb:68:47:0a:da:14:3d:e5:8c:fd:93:34:b0:03:13:
                    ed:87:92:7f:2e:5c:d0:98:ba:bd:ab:46:69:13:47:
                    20:92:4f:8c:73:d0:e0:41:bd:ee:43:9b:29:89:36:
                    06:19:63:4a:fb:76:03:aa:f8:ed:af:f3:c1:30:ca:
                    ea:79:5c:55:a0:bb:04:11:f9:53:9d:b8:6e:81:ad:
                    e1:4f:fe:95:2d:68:93:17:93:c2:60:09:67:22:be:
                    bb:2a:74:81:f9:01:ab:1c:26:41:3e:8c:2f:2b:ca:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0F:F3:79:C1:DF:22:D5:71:6F:9C:75:53:50:AE:FB:6A:AD:AD:2B
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:33:11:39:77:9d:24:ba:4c:ee:e3:67:b5:ca:c7:d5:31:
         a6:ca:9b:c5:cf:6a:18:1f:54:d3:08:4d:6f:52:e1:98:c6:74:
         e1:c2:5b:23:37:46:29:1e:ad:85:c1:78:60:62:43:94:51:85:
         d8:3d:13:8c:7e:40:d5:8e:37:43:25:39:39:59:9a:f2:d2:cc:
         8f:79:91:8f:5c:56:47:a3:c5:55:81:f5:ab:b4:76:0e:5c:bc:
         fb:4b:f7:8d:08:db:11:21:55:46:89:27:84:aa:37:ea:e9:fd:
         2e:b7:2e:e8:21:5d:4c:dc:33:01:ac:4b:f0:a3:ca:9f:4f:63:
         b8:4e:2d:95:5b:a6:5d:ab:16:7a:25:54:83:ae:84:0e:42:ab:
         9a:d6:7e:a1:48:71:ee:e6:8e:00:04:cb:9d:8c:b9:86:07:ca:
         79:c9:8e:74:39:19:cc:85:29:21:d2:2e:c1:8e:0e:8e:e3:a0:
         7b:d6:ec:b8:01:1b:03:d0:15:e9:22:57:de:07:f9:93:86:62:
         1a:f9:a9:61:28:4b:b6:05:6d:c3:94:86:c7:a3:b8:14:3a:2f:
         4c:e3:36:de:ef:20:99:7b:c0:13:81:4d:ed:ef:55:24:4a:e4:
         1c:5a:59:75:b0:ce:81:f4:26:51:1c:26:91:18:7e:d9:c1:fb:
         46:d9:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:05:58 2025 by rpki-client