Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
File:                     ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft (raw, json)
Hash identifier:          1rwuF0utJqw3tFIkNkAot8ewDTrYta0xQMtwQpH3tfE=
Subject key identifier:   75:95:07:DE:98:C9:63:DA:76:75:B6:7E:77:46:2B:43:5C:A7:DF:5D
Authority key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04
Certificate issuer:       /CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
Manifest number:          0740
Signing time:             Fri 16 May 2025 22:01:26 +0000
Manifest this update:     Fri 16 May 2025 22:01:26 +0000
Manifest next update:     Fri 23 May 2025 22:01:26 +0000
Files and hashes:         1: ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl (hash: 7SjSNwECddScDkphblEkXJp99J8l/bsmNz0kpvLiuC4=)
                          2: FFCBC5B4819B11EBA2616775C4F9AE02.roa (hash: RGi1AxOawoRwJgRmO0k5Zv8or/SKX/S2c9c3Whib2CM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
        Validity
            Not Before: May 16 22:01:26 2025 GMT
            Not After : May 23 22:01:26 2025 GMT
        Subject: CN=6827b5b6-435d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:2e:a7:c1:ea:30:21:a5:fd:27:65:f7:74:
                    58:b7:44:89:5f:c1:cf:5d:47:fd:c0:bd:82:d9:6d:
                    7b:bf:c1:90:5e:ee:fb:3b:c2:12:79:f2:72:9e:eb:
                    02:b8:b8:a6:e1:c2:f5:7b:7a:67:e2:3d:98:8e:fe:
                    9c:57:21:a2:0f:fe:f6:15:62:d0:2c:f4:d3:19:15:
                    4d:88:a8:bd:5a:af:85:40:fb:b3:0d:06:b3:e4:aa:
                    5d:a9:17:22:11:60:a7:e2:c5:38:e6:d8:e2:67:1c:
                    6a:7d:d8:f2:1d:e5:d7:59:bd:92:97:ed:45:97:26:
                    5c:b5:90:cf:e5:6b:87:2b:bb:d9:d0:a2:43:a8:96:
                    ac:52:66:2f:2b:a8:a0:1a:8f:49:1f:ed:2f:48:0d:
                    02:44:6a:e5:0e:64:2e:57:fc:1c:56:49:fb:b9:5a:
                    96:66:06:7e:e2:71:12:2e:b5:b6:74:9b:9e:5d:70:
                    f5:0f:d9:99:36:2e:a0:9d:f7:9f:5c:1c:7d:1c:cc:
                    fa:17:85:2e:e2:5d:ef:5c:43:ee:ec:3b:da:31:87:
                    39:ee:54:95:94:93:1a:25:1e:1a:26:87:e2:36:a1:
                    f2:09:0a:ff:2b:79:66:ac:ad:fd:27:ec:ff:ea:a3:
                    9b:84:60:a2:2f:8a:1f:ea:15:af:08:2a:62:ae:db:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:95:07:DE:98:C9:63:DA:76:75:B6:7E:77:46:2B:43:5C:A7:DF:5D
            X509v3 Authority Key Identifier:
                keyid:7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cd:00:e4:6d:0b:ca:31:18:17:1e:53:a7:49:5f:b7:c3:ad:
         81:a2:5f:53:53:f2:bd:d0:27:78:3a:b7:c0:b6:91:b6:f3:8f:
         0f:99:0a:5b:65:29:2f:b2:ad:08:8a:db:96:a0:0a:23:b0:fa:
         57:df:43:0e:9f:4a:f0:d8:7f:c6:b9:db:a6:64:af:eb:66:05:
         22:e1:50:c7:6d:9d:a2:42:76:2c:ec:cb:10:45:e0:f2:34:f4:
         35:f3:f8:f7:da:dd:61:c6:9e:85:b2:58:31:32:73:b3:57:e1:
         5e:df:39:86:49:41:0d:e7:01:79:d2:01:93:06:0a:3c:1e:b6:
         39:18:ad:a5:30:6a:b0:34:08:cc:b5:4a:a1:84:18:57:b9:fb:
         42:a9:4d:1f:e8:d1:ba:56:a9:09:a2:d5:8b:26:09:72:77:e4:
         da:ba:3f:ae:f4:53:d9:88:1c:68:ff:3e:66:5d:86:f1:1c:0f:
         22:38:e1:42:cd:cf:13:34:ac:14:26:7e:76:31:cc:94:d1:88:
         d6:34:59:f9:b8:39:c1:72:13:a6:1f:3b:7c:4b:cc:ca:ce:85:
         d7:08:86:c9:c6:d4:70:08:f9:5d:5b:68:09:52:59:e3:9d:d4:
         16:77:a7:70:73:ad:4b:76:b3:28:12:06:55:85:a0:d1:a0:09:
         22:fe:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:39:05 2025 by rpki-client