Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
File:                     EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json)
Hash identifier:          DDMTreR0jeEOcFV6ZbFIFdVT4eetk/hEXzXSTl4P+NU=
Subject key identifier:   16:A4:EB:D2:9B:C9:8E:16:80:36:E6:C5:61:02:EB:4C:8E:AE:6D:98
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Certificate issuer:       /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial:       0EF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
Manifest number:          0EF0
Signing time:             Mon 30 Jun 2025 17:51:29 +0000
Manifest this update:     Mon 30 Jun 2025 17:51:29 +0000
Manifest next update:     Mon 07 Jul 2025 17:51:29 +0000
Files and hashes:         1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: CaLllZKE5UjarEEdxIOrWVkdDUVSMcyM7y40tNdZRQQ=)
                          2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
                          rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 17:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3831 (0xef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
        Validity
            Not Before: Jun 30 17:51:29 2025 GMT
            Not After : Jul  7 17:51:29 2025 GMT
        Subject: CN=6862cea1-8a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:2a:34:5a:3e:da:db:74:f2:be:62:e9:10:
                    2e:8f:54:e4:a3:1f:a7:5a:56:f9:c7:22:c7:25:5e:
                    1f:f2:07:55:1d:1e:df:39:56:69:18:ce:d3:eb:a6:
                    59:c5:cb:12:66:dc:f1:10:13:58:0d:c6:c1:75:68:
                    8c:5e:9a:09:f3:8b:1f:53:f5:c1:5c:3f:d5:f1:ce:
                    b3:32:92:ee:7f:8f:21:19:9e:07:7a:56:ad:d2:ee:
                    16:ba:e2:b6:31:47:b4:a0:90:16:c9:32:48:a3:aa:
                    88:76:d5:b6:af:d3:37:12:42:11:99:e7:af:f0:92:
                    8e:84:19:ee:8f:fd:38:61:89:97:cb:f3:8e:7d:38:
                    59:02:d4:8e:09:9a:19:ee:f8:4e:19:73:7c:73:fc:
                    73:f7:18:bd:a9:68:91:a7:08:e7:93:13:91:2c:ef:
                    71:2f:d7:fb:75:f6:fa:ec:c7:e4:0f:08:41:95:31:
                    f6:44:b4:67:7a:e4:f7:2b:37:34:88:86:c9:55:8f:
                    aa:4d:64:b1:f2:8e:8f:df:67:c6:ca:03:f9:ac:01:
                    d5:d7:6b:5a:d3:12:f4:0d:c8:28:7d:d2:f8:d4:17:
                    17:13:8f:e6:10:4b:5c:a9:e7:cb:2a:e4:28:b1:d3:
                    22:b4:5c:92:1f:79:39:53:19:3a:b8:9f:2d:9f:a7:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A4:EB:D2:9B:C9:8E:16:80:36:E6:C5:61:02:EB:4C:8E:AE:6D:98
            X509v3 Authority Key Identifier:
                keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:d6:aa:37:82:0e:40:68:bf:f9:db:c6:e6:24:42:45:b2:
         0d:6b:89:6e:60:91:ed:64:ff:d5:d8:bc:23:94:5c:9b:4a:d6:
         01:4d:55:09:42:4c:86:06:d1:53:c9:0e:ae:bd:51:26:d4:a4:
         f2:f3:76:df:2b:ad:fd:51:d8:7a:f2:7e:5d:64:02:ab:c3:f3:
         13:d1:63:e1:92:27:6f:58:89:be:5c:f7:0e:5a:34:4e:fc:1a:
         2f:c8:ab:7c:a2:f2:f6:53:9e:f1:6f:d6:e4:99:5b:32:66:07:
         57:1e:68:c8:c2:ab:f4:71:ce:f6:76:83:39:a0:fe:13:29:1d:
         62:e4:f3:dc:2a:6d:2b:22:bf:2a:76:fe:6b:33:15:ae:de:8b:
         29:65:bc:c1:8d:5f:55:d8:44:89:14:c9:98:09:96:b4:0f:61:
         22:3b:69:48:2c:50:20:15:55:1e:c0:49:23:4c:6d:33:56:66:
         2a:c2:b1:6e:68:25:3e:0a:ba:a7:ba:d4:0c:9f:1d:2f:56:91:
         8d:5b:82:12:74:03:0d:f9:e4:d1:b9:dd:f9:a9:90:9d:01:8e:
         1e:87:f3:ba:62:8c:68:58:0a:bc:72:54:c6:c8:94:32:0d:2e:
         a0:e3:90:b2:68:8a:f3:86:ac:42:9c:d6:0d:b8:4f:8e:44:be:
         ba:e1:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:02:54 2025 by rpki-client