Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          CblFGnrITqjbTlrfNV79rh9ZPB/FOO5ayeR7MJjIZIY=
Subject key identifier:   88:B5:43:61:AC:ED:C7:E6:58:BF:8E:88:80:A0:B1:CE:02:A2:1E:3C
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       34D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          34AC
Signing time:             Mon 12 May 2025 14:31:14 +0000
Manifest this update:     Mon 12 May 2025 14:31:14 +0000
Manifest next update:     Mon 19 May 2025 14:31:14 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: Nscwsj++yv7lcykRNAVn2zJ1KfJ6ifG8Whmhyum1ImY=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=)
                          4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=)
                          5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 14:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13527 (0x34d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: May 12 14:31:14 2025 GMT
            Not After : May 19 14:31:14 2025 GMT
        Subject: CN=68220632-1c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:c0:25:5e:5e:76:74:42:6a:26:83:1b:48:
                    38:7b:53:23:0e:e8:28:46:4a:24:62:1b:a2:a3:23:
                    7d:8d:d1:4d:a0:a3:3f:77:88:0e:ab:74:b5:91:52:
                    e9:9c:3d:15:63:86:9b:5e:b7:7b:cb:07:81:8a:b9:
                    58:f6:65:d9:ab:b2:1d:0c:23:87:93:91:dd:75:66:
                    ab:ca:41:3b:4f:62:db:20:d5:80:cc:e9:cc:97:53:
                    8c:e5:f7:37:1b:43:91:98:8f:48:82:28:34:9d:6b:
                    6e:04:47:e5:2b:c9:b0:aa:7f:b9:57:6c:87:6c:8e:
                    a9:ca:3f:22:14:50:e5:8e:ba:31:a0:42:4e:10:89:
                    bd:c3:42:06:26:e9:0d:a4:bf:3d:8c:a7:d4:63:66:
                    1b:9b:09:d0:7d:e2:a4:54:f7:10:43:39:11:26:68:
                    8c:b3:fe:3a:f6:3f:d0:9e:2d:b9:4d:3c:aa:0a:0e:
                    e5:41:0d:27:6a:f5:d9:5e:87:64:a3:61:8e:58:57:
                    01:0d:5d:75:31:f1:d5:6d:45:c4:45:15:ce:72:2a:
                    9a:a6:59:d9:23:d5:10:69:ec:62:46:f7:56:a3:f7:
                    89:8c:17:84:81:ff:33:59:18:89:53:82:ee:d3:78:
                    ba:cb:54:b5:dd:51:61:8f:ae:6c:b5:73:13:ea:0a:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B5:43:61:AC:ED:C7:E6:58:BF:8E:88:80:A0:B1:CE:02:A2:1E:3C
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:fc:be:c5:76:44:a4:1d:47:ce:5f:68:77:a8:d8:16:4f:
         61:a7:bd:21:36:2c:e5:83:60:85:08:bf:57:b4:2a:a7:3d:af:
         75:aa:ad:3e:78:25:f3:9c:99:34:5f:ba:5c:3d:4f:7b:e3:ab:
         f4:9e:42:d8:56:52:43:e0:87:cf:fc:ac:a4:67:65:c9:54:42:
         80:32:18:b0:80:50:80:1a:ed:a4:41:b1:e4:8e:9f:28:78:99:
         26:b9:3a:10:ce:a7:54:3a:cf:d5:df:17:28:f0:1d:9b:7b:c7:
         1d:03:be:83:0a:60:dd:2e:a4:f0:a4:d2:1b:ad:55:c5:dc:91:
         83:0a:b0:6a:86:69:67:5f:7e:ed:6e:dd:fa:d6:e9:d1:d3:4a:
         2e:d3:c0:39:c6:30:dd:d5:3e:d9:01:12:6f:b6:af:a8:f9:8a:
         3f:cb:0e:72:74:25:bd:3e:a5:71:95:f8:c2:de:71:03:6b:12:
         f6:80:ba:e8:60:ca:f8:ac:c8:84:68:d3:ba:06:ed:da:34:8c:
         35:63:e1:a8:42:7e:b8:47:6b:36:d9:95:85:62:8f:f2:04:0a:
         db:08:eb:3a:9a:e6:76:b6:23:04:9d:67:e1:c4:b8:82:9f:f8:
         1a:4c:dc:96:01:1d:46:08:be:0f:1c:02:fa:2e:5c:87:0e:70:
         0d:89:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:09:36 2025 by rpki-client