Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          vTuopQ4zJ3gvfylikqwM9rC4YcZoGaNvj80HAzh1h5Y=
Subject key identifier:   EE:0C:FC:68:80:1A:FE:5F:F9:83:04:05:44:CF:9C:6D:11:E9:EA:0A
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0E93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0E70
Signing time:             Wed 02 Jul 2025 17:57:04 +0000
Manifest this update:     Wed 02 Jul 2025 17:57:04 +0000
Manifest next update:     Wed 09 Jul 2025 17:57:04 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: d1eNrWGxibN7SiyBu34t51YHWGkGmC0bjwFU9PITzjM=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3731 (0xe93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Jul  2 17:57:04 2025 GMT
            Not After : Jul  9 17:57:04 2025 GMT
        Subject: CN=686572f0-13fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:c4:7b:74:c0:22:51:e2:ee:e9:f3:91:aa:
                    c7:a5:cd:5a:c8:42:a7:64:7b:be:34:83:97:af:0e:
                    3b:9b:9f:c8:de:95:f1:f8:f2:aa:1d:85:d6:28:b4:
                    53:6d:3d:06:55:5f:0d:a0:4f:c3:59:28:6e:93:13:
                    b0:55:ce:fc:c7:44:b9:44:a1:bd:b9:5d:59:80:9b:
                    70:c4:a2:01:a9:68:9e:8b:28:7a:25:2d:e9:69:c1:
                    77:9b:51:f5:03:40:25:20:60:1f:dc:2d:7b:d8:9e:
                    b5:ac:f8:55:89:39:93:6e:25:f3:69:2a:d9:ac:95:
                    ab:68:39:cf:20:bb:e8:5a:4e:97:0f:c8:c4:2f:e3:
                    0c:f7:cc:37:5a:4b:e1:4d:48:d2:e4:2a:6e:83:4d:
                    50:9e:47:3a:0f:39:38:27:0e:c1:17:6c:d4:a1:32:
                    35:ea:65:25:69:be:ee:82:e5:d6:b0:f4:c0:9d:b1:
                    a3:03:1d:25:98:6f:f8:56:ec:cb:99:e3:23:e4:3e:
                    fe:56:1b:51:22:8a:f5:ab:77:f2:9b:16:ad:4a:6a:
                    9b:3e:91:ae:b2:0c:b8:57:8e:c3:2d:c6:af:2b:58:
                    75:f4:92:4e:57:ca:b8:82:34:a6:ec:80:4d:71:ba:
                    8c:3a:f9:b2:d8:dd:a0:da:06:b8:8c:46:65:22:1a:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:FC:68:80:1A:FE:5F:F9:83:04:05:44:CF:9C:6D:11:E9:EA:0A
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:fb:09:ce:62:59:7d:f7:59:79:7b:9a:96:9f:ac:39:9d:
         1e:4a:c7:ed:e9:a8:e6:80:83:79:8a:63:06:bd:71:1f:aa:28:
         ab:26:af:c2:e2:eb:0e:03:17:ef:59:12:1d:b8:85:7d:a1:15:
         6e:e3:94:be:a5:f7:d0:fe:43:a4:f3:4d:e8:69:c4:8d:31:d7:
         60:44:2b:fa:c0:ea:4c:9b:76:4d:76:12:4b:89:0c:88:27:83:
         b0:93:98:0c:a8:2d:9f:92:ef:20:07:ad:13:78:76:c6:25:d2:
         54:c2:06:ca:5d:c2:8c:e3:b2:10:f6:55:2b:19:88:b5:c6:62:
         d5:bd:98:aa:f3:40:36:86:f0:34:cf:f3:72:85:c0:35:7c:cd:
         a6:2b:d2:79:4a:1b:a3:b3:92:19:d4:e7:e6:76:bd:05:7e:27:
         57:44:f5:ca:f4:58:8f:a7:c7:d2:e0:ed:bb:05:86:bf:af:68:
         fe:1e:9c:e2:9e:7b:5d:0b:62:fd:d8:76:6c:d2:d1:e5:24:8e:
         08:2e:2d:fe:59:6d:f4:19:de:df:db:96:6d:2b:e6:d1:2e:b4:
         65:ca:28:b7:55:8f:11:c2:45:aa:94:43:e4:cc:89:d1:ee:2a:
         3e:ef:6d:80:c0:67:96:1a:d0:27:4a:88:42:72:2a:a5:12:c4:
         27:52:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:55:21 2025 by rpki-client