Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          ewkDDgycZjdKg3U6k52lBITOF3oF1P9MJUTChoTkSXk=
Subject key identifier:   EF:CD:F3:10:B7:31:2F:66:46:6B:EA:80:24:E5:E8:25:AD:31:41:E8
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       34F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          34C7
Signing time:             Fri 04 Jul 2025 14:36:52 +0000
Manifest this update:     Fri 04 Jul 2025 14:36:51 +0000
Manifest next update:     Fri 11 Jul 2025 14:36:51 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: z5cesgcwoliy1NknEcHvvjCtxcY/r6T3EqKZ92yk050=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=)
                          4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=)
                          5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13554 (0x34f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jul  4 14:36:51 2025 GMT
            Not After : Jul 11 14:36:51 2025 GMT
        Subject: CN=6867e704-7384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:57:bb:b5:e8:fe:06:71:6a:bc:ef:90:71:
                    2b:82:b2:22:f8:8a:7b:9f:ea:0e:92:2f:c7:0d:53:
                    61:1c:05:17:9e:0b:56:32:9c:d9:75:85:30:61:ef:
                    56:3e:a1:b1:48:db:00:57:e2:00:13:68:e8:69:dc:
                    97:ae:d9:f8:ef:8b:a9:ee:00:63:a7:47:44:1a:99:
                    f4:67:d0:5d:4a:36:5f:07:98:de:dd:c6:db:66:94:
                    eb:e1:9a:67:ae:88:27:c6:07:5b:0c:9e:a3:d2:86:
                    58:fc:1a:bd:30:d1:6d:fe:79:41:aa:8c:c4:13:f4:
                    a5:dc:34:55:f0:15:1c:24:0d:00:46:19:54:03:5e:
                    cf:35:3d:d0:40:92:c1:2e:a6:e1:d0:9a:60:a3:1e:
                    0c:e5:58:32:50:cb:d5:ed:1c:c9:52:ba:07:51:54:
                    24:8d:39:ab:db:2e:8c:a1:14:01:0a:20:6a:e6:db:
                    a7:76:99:7b:36:60:e2:ef:cd:fb:48:a7:a9:e9:62:
                    96:b0:c9:f5:3e:f0:79:c4:2a:eb:c2:dd:d6:1a:b8:
                    49:31:16:45:f4:27:de:84:48:31:f6:06:fb:1a:5a:
                    5c:2b:57:55:9b:9e:bf:da:9c:1a:e3:72:33:d1:fc:
                    cc:df:06:82:69:66:ae:67:65:05:4d:a1:e2:f3:d7:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CD:F3:10:B7:31:2F:66:46:6B:EA:80:24:E5:E8:25:AD:31:41:E8
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:e8:86:af:cc:57:1a:bb:e0:10:2e:db:cb:5e:0d:66:96:
         a5:81:de:9e:9e:d9:27:9a:9b:6c:8e:71:fe:88:19:6e:86:ea:
         17:75:50:54:bb:33:b1:70:02:35:88:08:ae:74:b2:57:e5:d9:
         32:e2:76:0d:aa:c7:72:07:7b:4d:c4:40:6b:bd:ae:c6:21:53:
         44:75:a0:c2:e2:1f:1d:91:3d:4b:28:56:0e:5f:93:43:b5:dc:
         77:13:90:c2:54:55:73:a1:4e:90:8a:04:95:db:92:05:c1:a5:
         f9:b8:b9:b9:37:60:46:8d:41:1c:5b:2f:20:4a:d8:13:fe:dc:
         d7:1d:d0:e6:d4:86:09:3e:4f:db:30:12:55:d0:16:26:76:55:
         da:69:65:3c:08:05:38:a8:25:32:af:52:ee:c2:4d:bf:32:f3:
         b8:3a:bf:a9:88:e8:89:bb:94:4d:b7:e8:84:a6:84:4e:dd:52:
         d5:8b:ea:7d:30:9e:8c:5d:78:02:43:dc:2b:40:97:61:f3:8e:
         1d:94:50:36:93:f9:d8:4b:db:9a:e9:cd:b1:ed:5a:14:72:07:
         74:e2:54:40:85:4c:0a:23:14:43:80:85:6e:c1:ac:d5:d1:9e:
         25:d7:a2:68:ee:9d:a0:bb:c1:03:fd:c3:dc:92:88:b2:20:6d:
         8f:34:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:43:31 2025 by rpki-client