Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File:                     Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier:          EvkaFHiqaGuSCabzOJ68JvSP4wLfJj0Mwq7kVGLqhfs=
Subject key identifier:   06:F7:5D:F9:5D:1F:26:2C:FD:DA:CA:A3:55:A3:63:A8:C6:6D:DA:5E
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer:       /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number:          F1
Signing time:             Thu 03 Jul 2025 05:29:43 +0000
Manifest this update:     Thu 03 Jul 2025 05:29:43 +0000
Manifest next update:     Thu 10 Jul 2025 05:29:43 +0000
Files and hashes:         1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: uQz5WWdbIlx65+l3Grdq0N3Z9slUonsB/f2ACTWqzYc=)
                          2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
                          rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
        Validity
            Not Before: Jul  3 05:29:43 2025 GMT
            Not After : Jul 10 05:29:43 2025 GMT
        Subject: CN=68661547-cc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:91:e5:48:d7:73:03:33:10:f6:4f:a0:83:
                    d6:03:af:df:02:ee:8a:fd:dd:a2:06:71:99:0d:d5:
                    ac:c8:7a:63:9c:51:1e:5d:60:1f:ad:a0:b5:50:c8:
                    08:66:39:13:fa:d2:21:d8:09:fa:bb:ec:8c:65:2c:
                    79:eb:4b:8f:a7:eb:4d:c3:da:29:85:cf:c7:af:93:
                    f8:04:5a:62:a6:1a:1c:33:e8:c9:c3:1b:42:be:05:
                    1a:31:c1:2c:eb:dd:61:61:b4:0e:3e:99:c7:4e:81:
                    9d:96:18:03:c4:93:35:2e:13:9e:bb:14:96:bc:1e:
                    8e:fd:98:69:7b:c0:43:ea:4d:92:b2:e7:e4:e1:7d:
                    b1:08:f3:80:e4:f0:5e:68:4d:f8:3f:e3:a2:05:4d:
                    ae:af:a7:b0:68:4e:b3:95:34:9f:f2:96:67:c4:db:
                    9f:be:eb:41:38:35:4d:f6:27:c1:65:a6:dc:06:4c:
                    3d:7d:55:cc:79:ff:12:20:05:de:de:cf:70:67:24:
                    c9:c6:a5:39:4d:e5:88:a7:0b:3d:11:db:2a:18:3d:
                    71:7f:86:ad:d1:44:a2:06:68:b2:70:31:b1:6f:59:
                    e4:73:94:84:f5:0f:c6:ad:2f:c6:a4:08:28:3d:d3:
                    9c:71:b3:24:0b:66:a4:dc:3e:1c:1a:11:82:06:58:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:5D:F9:5D:1F:26:2C:FD:DA:CA:A3:55:A3:63:A8:C6:6D:DA:5E
            X509v3 Authority Key Identifier:
                keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:26:9e:4c:74:5e:70:e2:40:2a:75:dd:a5:ae:37:a1:f6:
         46:b6:f7:99:3c:37:eb:6c:85:c0:40:a5:03:3c:7c:a1:55:0c:
         3a:2e:1c:65:02:c1:c0:27:ab:cc:70:9c:21:92:09:6c:96:7a:
         7b:ef:90:bd:83:a3:b2:6b:a6:34:89:e1:91:c5:28:e8:79:65:
         33:1d:e6:a9:f8:0c:d1:6c:dd:4d:09:a8:f3:a8:08:e7:45:31:
         a9:4f:bb:89:72:7a:02:19:cb:23:1c:d8:1b:fa:7f:e4:a7:3f:
         0c:a1:ad:a8:1a:18:b4:51:9f:ff:ce:47:34:84:ac:99:8e:9c:
         9f:39:67:28:71:28:16:31:b9:c0:46:a4:a2:bc:77:75:2c:5b:
         06:4e:db:f8:46:b1:09:0a:cd:55:6e:0c:15:a0:18:99:0d:c0:
         aa:d1:d2:9f:da:39:88:38:78:70:72:90:4d:99:5b:52:63:57:
         9b:43:5f:f3:53:f7:84:71:c4:b0:b2:df:5f:55:97:bb:f8:a1:
         65:16:2f:79:91:34:83:7a:07:a5:2a:bc:52:f9:ef:94:13:7c:
         09:6d:1c:d3:bf:8d:ed:a5:8c:94:4e:db:2e:84:2b:54:6e:51:
         3a:5e:c8:c4:10:63:78:0c:db:21:ee:76:4b:9f:d5:01:a2:22:
         06:ec:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:17:30 2025 by rpki-client