Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
File:                     eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json)
Hash identifier:          NpnVtd3rB6tF4ENZOu6RIuhAHUw8PghpeOPZfuVsmoA=
Subject key identifier:   F0:FB:84:96:E6:35:DE:03:2B:28:DF:A7:7A:79:2F:1F:BB:49:60:D8
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Certificate issuer:       /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
Manifest number:          0320
Signing time:             Tue 13 May 2025 00:57:27 +0000
Manifest this update:     Tue 13 May 2025 00:57:26 +0000
Manifest next update:     Tue 20 May 2025 00:57:26 +0000
Files and hashes:         1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: hIRNJ6sJVv9P9F66k+N7p5oPviYF1aTzZobtiLhnRpA=)
                          2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
        Validity
            Not Before: May 13 00:57:26 2025 GMT
            Not After : May 20 00:57:26 2025 GMT
        Subject: CN=682298f7-f77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:86:5a:b6:87:e6:d2:ac:fd:a7:3e:e3:b1:
                    d8:e2:49:18:6a:b5:99:e9:7d:ea:9f:95:3e:7e:4c:
                    8a:45:8a:dc:ff:93:5b:52:e3:bf:9b:60:ce:ed:46:
                    f0:5b:ae:e0:79:80:e2:b0:01:fb:a3:30:b8:1c:23:
                    c2:cb:ad:cb:85:50:69:aa:30:1b:1c:75:72:3c:89:
                    e3:ec:13:ec:3d:83:3e:05:c6:09:b3:d3:6c:66:57:
                    a1:ff:6e:a2:07:dc:f7:bd:d8:a9:40:30:2b:f5:46:
                    60:57:fa:3e:0d:fb:8b:fa:b3:fa:69:5d:ab:94:ff:
                    cd:a7:f0:d1:87:c4:55:ed:98:23:a0:bf:47:7b:05:
                    e4:1b:76:e1:e6:7c:3b:52:e5:c9:10:bf:4c:a3:54:
                    70:07:9a:66:c1:5e:aa:59:81:51:75:ec:29:53:0c:
                    8a:28:ac:e5:bf:7b:1d:1e:64:5c:ef:af:09:13:77:
                    e0:68:0c:4c:94:4f:d9:ee:c3:b4:1d:e9:1d:02:f7:
                    8b:db:1e:a6:2d:16:c4:0b:be:ef:52:16:4b:ec:b1:
                    49:90:69:26:94:b5:2a:72:39:47:37:bc:14:38:cd:
                    82:87:b0:bb:7f:cb:d2:ff:f3:c0:13:c1:6f:ae:cb:
                    6f:2f:9d:44:6e:ae:97:75:a6:0b:55:fc:60:13:ad:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:84:96:E6:35:DE:03:2B:28:DF:A7:7A:79:2F:1F:BB:49:60:D8
            X509v3 Authority Key Identifier:
                keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:9c:06:a4:f8:08:52:00:43:36:14:9f:e0:9f:67:d2:15:
         44:f5:6b:51:6f:4f:fc:01:ab:85:d9:1e:d2:c8:54:8d:76:33:
         a5:ef:e1:96:90:1c:c2:9e:18:37:15:7f:0a:e1:c8:f7:ad:27:
         68:82:4d:e2:bc:66:23:c1:08:cc:4c:3e:da:b8:53:2c:3e:58:
         d2:03:01:1a:d0:49:52:3d:b8:11:cc:ed:d7:27:56:50:6f:d9:
         35:33:ae:30:ea:60:13:3f:08:3e:a2:b3:49:e8:9f:0e:c4:82:
         9e:b0:db:2c:5f:59:52:77:aa:03:ff:74:d2:4c:35:d5:8f:b0:
         1e:e5:e4:03:ca:db:f9:3e:8f:83:c2:4c:4c:73:69:72:00:10:
         2e:1f:41:05:5e:50:5d:87:1c:4f:10:a1:4a:29:c6:91:16:e4:
         d7:bb:cb:d2:f2:34:06:c6:c8:12:51:8c:d2:3c:b4:34:c0:82:
         d5:65:b1:4e:25:5e:9d:87:15:01:61:58:65:0f:63:15:97:08:
         a5:62:0d:cf:70:44:3e:5b:1f:dd:d0:08:4a:a3:42:68:ba:0a:
         94:3f:7e:9c:5a:28:af:6b:2b:a4:a1:a1:5b:81:61:d7:b3:d1:
         61:63:16:56:e9:11:01:4f:48:9a:fc:c8:1d:87:69:04:1a:91:
         da:f2:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:57:01 2025 by rpki-client