Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          QLzL3GM5C4Riik3CnWcxOPyvQz2ORdneuTlGnqL6CNY=
Subject key identifier:   CE:EB:E4:13:2F:4F:4C:58:10:9B:A6:9A:67:02:70:3F:33:4F:79:2A
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       3516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          34DB
Signing time:             Tue 01 Jul 2025 11:50:48 +0000
Manifest this update:     Tue 01 Jul 2025 11:50:47 +0000
Manifest next update:     Tue 08 Jul 2025 11:50:47 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: mj53QzqTAAJ4/tBQyt8JHyZl7R4meXIsZFFX/icCg4E=)
                          2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: pAR1FgGTlUIXKdXPzl2g83tghG6tiadwAtJ5qGgzg7c=)
                          3: 19CCFBDE6F0911ED8A7BD268C4F9AE02.roa (hash: JTK51f8dfP+bxciKZy6FgqfkHpvTyTd0gqBndr+pK/M=)
                          4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: 8rRtO+q4Ir17qHRPB7V36mJGPMj4dxDtsLTHhGJ0+E0=)
                          5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: WY+AEtZNGfOw12yKOfvg/F8cjo6zbb8RMRrGslASsW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 11:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Jul  1 11:50:47 2025 GMT
            Not After : Jul  8 11:50:47 2025 GMT
        Subject: CN=6863cb98-1f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:5e:e8:f9:7e:d5:75:09:3f:4a:f0:ed:0f:
                    4b:3d:26:92:0b:99:e6:33:12:c0:bc:67:51:0b:1a:
                    ff:03:7f:50:1f:97:22:78:6f:6d:aa:da:8c:a3:54:
                    df:3d:7f:ea:bd:5b:9b:d0:0d:ef:c9:8d:9a:11:17:
                    6d:48:94:4a:84:9d:88:4a:33:8c:d5:e6:66:71:4b:
                    d7:59:f0:bd:dd:d9:09:47:82:fb:b2:64:84:49:0d:
                    bd:55:69:69:0b:70:97:a5:41:f0:27:cb:28:e4:7a:
                    1c:17:b4:48:4c:b1:74:b3:7e:6a:bd:cb:1d:31:68:
                    33:c9:e2:5a:ee:92:07:e4:82:cd:c8:69:51:cc:7e:
                    d0:ac:92:20:ae:5d:ad:ac:db:1a:3a:81:a9:33:db:
                    04:94:ee:7d:d2:e1:c7:8a:20:24:15:54:c7:d4:a6:
                    e9:e1:25:57:ee:9b:70:c3:00:b9:a1:3d:90:6f:d6:
                    64:9f:78:e8:a0:31:19:3d:33:68:3d:f9:8c:11:93:
                    36:73:bb:5c:24:b6:11:3e:df:cb:c7:dd:d8:6a:52:
                    41:a3:56:20:b1:64:d4:e4:8a:a5:04:50:f0:2a:c0:
                    a7:75:04:96:ff:75:49:1a:1b:b3:55:e3:17:e3:4f:
                    92:c9:73:0e:04:0e:a4:7f:f5:37:41:c1:c0:26:f4:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:E4:13:2F:4F:4C:58:10:9B:A6:9A:67:02:70:3F:33:4F:79:2A
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:96:e9:49:56:43:17:99:e4:76:63:85:1c:13:4e:d4:d7:
         ab:b1:9d:e6:7b:4d:f4:50:dd:bb:04:97:fa:7c:a6:ff:da:59:
         b4:50:63:e6:3b:c1:48:d8:a8:53:1b:ca:fb:e0:96:a5:0f:31:
         c2:fa:e8:52:f5:dd:af:2f:f2:a0:c3:ee:a6:98:27:50:27:7f:
         cf:92:04:c5:08:f7:8a:85:fb:6a:65:29:ce:ec:a2:31:37:dc:
         4b:59:fb:10:33:58:77:29:22:47:4f:ae:a1:73:b9:7d:83:10:
         b0:67:88:f0:c0:da:17:de:30:67:db:c3:bf:cf:52:06:89:bf:
         5e:de:94:f7:9d:bf:36:4c:8e:4d:3b:e8:57:66:de:27:ee:39:
         ad:66:27:88:37:17:36:b9:9b:d2:09:aa:4b:2f:bc:e9:bb:29:
         7d:dc:1c:86:cb:e6:4b:28:0f:3b:80:32:97:ad:5e:b4:7c:ff:
         f2:2c:fb:22:0f:c8:6c:02:cb:36:64:34:31:43:d2:3b:6d:da:
         07:80:2c:d0:75:99:b3:3f:ae:65:5d:e4:0c:a9:68:f7:9a:43:
         5a:99:16:89:15:2c:8b:2a:eb:eb:cb:e0:9b:4f:88:cb:97:4b:
         63:be:b0:7a:de:e4:0a:9c:dc:17:a0:9e:36:d5:af:4c:f6:ed:
         66:40:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:57:16 2025 by rpki-client