Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
File:                     h6EudRSbPYpNJyoTCT72rJslLPM.mft (raw, json)
Hash identifier:          rZceqjNhvrrVojDf2T9lEMyzgKy8zE2c090SFD6ELKc=
Subject key identifier:   52:B2:1C:12:92:BD:41:8C:26:24:0B:EC:71:4A:DC:0F:DF:04:1A:EA
Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
Certificate issuer:       /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
Manifest number:          017D
Signing time:             Fri 09 May 2025 02:50:26 +0000
Manifest this update:     Fri 09 May 2025 02:50:25 +0000
Manifest next update:     Fri 16 May 2025 02:50:25 +0000
Files and hashes:         1: h6EudRSbPYpNJyoTCT72rJslLPM.crl (hash: 2sGb2NfdXeb6Ft4GiGH8JX5mu+ZErEumAk4gbbPZ0vA=)
                          2: 91A7AB90D79F11EE8DB3B465C4F9AE02.roa (hash: 2HWdv17EpTEWjq5kuiP/dX72VR2GQ0qIyejXonfT4f4=)
                          3: 62DD62F6D09111EE87557671C4F9AE02.roa (hash: jNpa+dAr3QW+U0IxiZkpakx746GE32XZB4uy5TxxMOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
                          rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC76, serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
        Validity
            Not Before: May  9 02:50:25 2025 GMT
            Not After : May 16 02:50:25 2025 GMT
        Subject: CN=681d6d72-385a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:be:94:b9:e2:cb:8c:ec:26:f7:42:bf:10:23:
                    52:9d:d1:fa:72:7b:5e:54:d9:e2:65:81:07:09:6e:
                    c5:d8:6b:61:60:6a:e0:b6:9f:02:6b:a1:ea:d5:64:
                    a7:33:f3:34:b1:5a:7a:72:7a:5e:2e:7e:d9:4f:7c:
                    06:10:95:d8:23:c8:7a:a7:3e:49:89:3d:5f:f2:e5:
                    c6:9f:30:a2:eb:b1:fd:96:78:7a:2d:e3:60:02:64:
                    13:8b:fb:57:da:72:79:0b:3b:c4:0a:d7:46:90:14:
                    f7:8f:ee:f3:f9:11:7a:43:dc:a4:ec:38:79:40:20:
                    10:7a:cf:8b:90:78:67:50:f8:67:26:8e:10:43:7d:
                    2e:3b:e8:c4:67:5e:f1:e8:fd:42:c5:f5:60:7e:a2:
                    8f:92:56:38:9f:38:3b:ad:47:de:da:1a:ba:1a:39:
                    da:4e:f4:8d:49:28:b8:3d:ec:c7:7b:4a:14:29:c6:
                    28:03:28:b7:3d:36:91:ee:6a:18:47:db:5b:d6:0f:
                    d3:1e:16:8f:fe:61:a9:58:b4:ff:1a:d8:6d:09:3e:
                    1a:d5:21:88:d7:60:c9:c8:90:0f:41:f7:fe:6a:a0:
                    58:dc:7c:a7:2b:69:40:3a:24:4b:5f:37:e5:70:4a:
                    58:e3:1e:2f:90:fa:f8:07:e5:ce:65:fe:b6:2c:bb:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:1C:12:92:BD:41:8C:26:24:0B:EC:71:4A:DC:0F:DF:04:1A:EA
            X509v3 Authority Key Identifier:
                keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ca:cd:1f:15:02:7d:4e:df:41:40:46:6f:0d:25:7d:ed:89:
         60:42:71:04:d0:af:b1:47:8d:2e:10:bf:c5:79:38:54:92:71:
         c9:74:eb:44:ff:45:61:29:59:f7:25:d9:e8:64:28:09:87:32:
         5d:27:fb:b2:cf:e0:14:c5:65:c3:d5:12:68:af:90:6d:81:a5:
         8e:a5:08:0b:6e:23:df:87:d4:3c:44:6f:d5:20:8e:bb:af:93:
         c7:b5:6e:4c:87:45:e9:52:58:b5:b4:79:0a:0b:5e:14:b0:96:
         ed:2d:6e:43:28:b7:c5:d2:b0:67:37:cb:9e:5b:18:0a:8a:c7:
         79:f4:79:7e:e6:84:d1:e5:46:db:86:ff:56:ab:e0:ac:06:d3:
         34:85:e1:be:98:0d:14:13:29:b0:3d:93:d7:0a:35:bb:31:11:
         a2:c3:6a:3a:f7:b2:05:8b:6b:3d:eb:56:2a:f7:80:7c:e1:20:
         88:1a:f9:31:e4:db:15:5a:6b:9d:b2:50:ae:3f:a8:94:d8:a5:
         d6:53:b9:df:b0:8a:e6:5c:50:ff:5e:b3:c3:90:71:ae:59:e3:
         a7:81:61:c5:4a:08:78:3d:45:fb:d3:38:b5:c9:f5:eb:73:e8:
         ff:b5:f6:07:ff:1a:8a:08:0d:87:e2:4d:37:dc:c1:5e:0f:e5:
         5b:1a:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:24:29 2025 by rpki-client