Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
File:                     EouTW4ldrG6Xco__i9w1bokYU-8.mft (raw, json)
Hash identifier:          MK3HYyAnll9ED/SCaJoYQgoVQB7EQ2UVy68d3/02S1Y=
Subject key identifier:   2B:EF:31:D6:4D:23:F2:FF:9F:16:43:8E:67:44:75:A6:3C:FC:FB:87
Authority key identifier: 12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF
Certificate issuer:       /CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
Manifest number:          6C
Signing time:             Sun 11 May 2025 05:39:09 +0000
Manifest this update:     Sun 11 May 2025 05:39:08 +0000
Manifest next update:     Sun 18 May 2025 05:39:08 +0000
Files and hashes:         1: EouTW4ldrG6Xco__i9w1bokYU-8.crl (hash: RJ8P/OzQtp6aS2Y7B3/8ohya8ZIbk6P5CWlj8YpdlDs=)
                          2: 06F9E5368BB711EFB4630B30C4F9AE02.roa (hash: wAMyns8JAwyol9+kP2W1kb8SKSEmxeqxcrfUrnMoAjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709, serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
        Validity
            Not Before: May 11 05:39:08 2025 GMT
            Not After : May 18 05:39:08 2025 GMT
        Subject: CN=682037fd-835f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:f7:77:e5:d1:97:d5:ea:95:57:4e:93:3f:
                    44:f9:97:81:44:10:ad:6d:e1:15:64:fc:2d:a2:74:
                    ac:74:24:cf:b2:3e:3e:7f:33:4b:7f:69:d7:1d:e5:
                    6f:15:ab:9a:76:d9:6a:4d:27:1c:18:5d:33:8c:bd:
                    60:f7:00:1a:c8:c7:59:06:02:01:44:52:b5:ae:ce:
                    10:58:a9:1b:e2:46:ee:07:94:8a:f0:92:d3:f3:c0:
                    ef:31:36:8a:d7:d1:7b:fc:1f:09:00:7d:48:f5:09:
                    1e:c9:fd:e0:59:01:86:60:e3:83:ac:a2:df:4a:12:
                    d3:07:1d:7f:40:a6:47:99:60:e2:7d:a4:52:47:83:
                    41:10:a2:41:8f:82:a1:a1:1e:af:f4:5f:6e:f9:23:
                    1d:00:c0:39:56:b8:14:22:9d:46:12:3e:1a:6f:7b:
                    1d:30:28:f8:71:06:75:fb:f6:8d:83:ed:3d:90:59:
                    c1:5b:18:00:9a:6a:8f:23:c9:95:cd:42:71:b0:5a:
                    0c:a8:40:f3:64:ff:f0:33:bc:34:9a:3d:c5:da:0e:
                    89:ed:a3:20:6c:6c:5f:33:48:5e:31:ec:3a:24:f2:
                    0f:c0:cb:74:2a:f0:9a:03:56:d6:90:50:3a:3e:9e:
                    aa:10:ce:73:c0:df:19:9f:f9:d1:9a:8d:5d:aa:02:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:31:D6:4D:23:F2:FF:9F:16:43:8E:67:44:75:A6:3C:FC:FB:87
            X509v3 Authority Key Identifier:
                keyid:12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:82:fd:9b:b3:b5:0f:69:25:b2:77:7a:05:68:f0:cf:b7:a4:
         8f:5e:54:8a:10:8e:30:33:8e:4b:5a:ec:a4:b0:56:49:65:ef:
         15:3c:d8:59:e4:16:bd:df:fd:f7:5a:5c:e6:01:b3:9d:13:91:
         05:75:06:5a:6b:cc:0c:4e:80:5f:ca:b8:ca:37:a7:93:0f:d9:
         ba:76:b2:c5:b7:98:51:3c:7c:16:8a:b2:bc:a8:4e:f0:8d:3f:
         16:28:8c:c5:18:ce:54:d8:df:1e:26:06:a7:04:04:df:0c:7d:
         e3:44:b4:8f:ca:3f:3b:dc:58:78:9c:41:4c:b1:bb:37:d1:d6:
         2b:58:1c:0c:fb:eb:30:99:76:2a:05:b9:66:55:8f:b6:d7:9f:
         2b:f6:e6:69:01:6e:80:9e:cc:ea:2f:de:af:f6:ce:58:d9:77:
         f9:bc:6c:6f:e0:29:12:90:a0:34:92:9b:2f:ba:d9:1d:dd:6d:
         7d:ee:44:a9:7e:f0:bb:d0:a3:90:e3:5f:39:60:75:c9:d6:6c:
         58:93:ca:bd:0e:d2:8e:2d:0d:f5:d3:0d:38:7b:0b:45:5b:05:
         51:f0:86:0d:de:c2:6d:b8:50:5c:6b:2d:47:96:00:9a:eb:9c:
         ad:6a:5b:fe:f0:79:3a:27:d9:c5:69:e1:7c:92:91:32:29:a7:
         ee:1b:2b:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NzcwOTExMC8GA1UEBRMoMTI4QjkzNUI4OTVEQUM2RTk3NzI4RkZGOEJEQzM1NkU4
OTE4NTNFRjAeFw0yNTA1MTEwNTM5MDhaFw0yNTA1MTgwNTM5MDhaMBgxFjAUBgNV
BAMTDTY4MjAzN2ZkLTgzNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCexPd35dGX1eqVV06TP0T5l4FEEK1t4RVk/C2idKx0JM+yPj5/M0t/adcd5W8V
q5p22WpNJxwYXTOMvWD3ABrIx1kGAgFEUrWuzhBYqRviRu4HlIrwktPzwO8xNorX
0Xv8HwkAfUj1CR7J/eBZAYZg44Osot9KEtMHHX9ApkeZYOJ9pFJHg0EQokGPgqGh
Hq/0X275Ix0AwDlWuBQinUYSPhpvex0wKPhxBnX79o2D7T2QWcFbGACaao8jyZXN
QnGwWgyoQPNk//AzvDSaPcXaDontoyBsbF8zSF4x7Dok8g/Ay3Qq8JoDVtaQUDo+
nqoQznPA3xmf+dGajV2qAjppAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK+8x1k0j
8v+fFkOOZ0R1pjz8+4cwHwYDVR0jBBgwFoAUEouTW4ldrG6Xco//i9w1bokYU+8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3NzA5Lzc4NkJERjVFOEJC
NjExRUY5OThCQUM3MkM0RjlBRTAyL0VvdVRXNGxkckc2WGNvX19pOXcxYm9rWVUt
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRW91VFc0bGRyRzZYY29fX2k5dzFib2tZVS04LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3
NzA5Lzc4NkJERjVFOEJCNjExRUY5OThCQUM3MkM0RjlBRTAyL0VvdVRXNGxkckc2
WGNvX19pOXcxYm9rWVUtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALmC/ZuztQ9pJbJ3egVo8M+3pI9eVIoQjjAzjkta7KSwVkll7xU82Fnk
Fr3f/fdaXOYBs50TkQV1BlprzAxOgF/KuMo3p5MP2bp2ssW3mFE8fBaKsryoTvCN
PxYojMUYzlTY3x4mBqcEBN8MfeNEtI/KPzvcWHicQUyxuzfR1itYHAz76zCZdioF
uWZVj7bXnyv25mkBboCezOov3q/2zljZd/m8bG/gKRKQoDSSmy+62R3dbX3uRKl+
8LvQo5DjXzlgdcnWbFiTyr0O0o4tDfXTDTh7C0VbBVHwhg3ewm24UFxrLUeWAJrr
nK1qW/7weTon2cVp4XySkTIpp+4bK4U=
-----END CERTIFICATE-----
Generated at Sun May 11 14:51:18 2025 by rpki-client