Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
File:                     eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json)
Hash identifier:          5MjsLxaRxqIrBctQV3Idi2OMMV0zFkuh5sqNQZJy2SA=
Subject key identifier:   CF:1D:1B:EB:FD:78:3A:95:82:31:45:81:E8:4A:80:7A:02:D3:5B:91
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
Manifest number:          01E1
Signing time:             Thu 03 Jul 2025 02:44:59 +0000
Manifest this update:     Thu 03 Jul 2025 02:44:58 +0000
Manifest next update:     Thu 10 Jul 2025 02:44:58 +0000
Files and hashes:         1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: WCUTP4CX39lImkH2x1fWajdL0V8Bc75ROAKuwDUMgRA=)
                          2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: Jul  3 02:44:58 2025 GMT
            Not After : Jul 10 02:44:58 2025 GMT
        Subject: CN=6865eeab-0164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:e1:69:31:93:97:03:46:4a:ea:eb:63:97:
                    97:cb:cf:9e:d2:5c:8f:25:a9:b3:f8:0a:15:f6:b2:
                    00:43:6d:c2:c2:3e:76:74:03:70:45:1a:73:2f:1a:
                    c1:3f:a5:d2:a4:d6:11:f2:85:62:d8:cd:22:e7:3f:
                    8e:70:83:2c:32:d6:2d:9d:2f:01:97:1e:7b:6e:c1:
                    68:0c:54:d8:a0:52:1f:f2:cc:b2:0c:5d:9c:12:b0:
                    01:12:68:23:77:83:2a:01:09:f3:4f:fe:19:4e:d8:
                    0d:6d:fe:84:b7:cb:df:6a:b0:e0:23:d6:08:33:71:
                    5a:83:36:57:18:62:97:09:42:1f:a5:a1:44:2f:ee:
                    32:fe:db:48:3b:92:c2:2e:55:80:ab:25:bc:f0:be:
                    27:f3:94:3d:57:8f:c0:59:fa:2f:d7:57:81:f7:36:
                    df:4c:99:b9:3b:47:d8:62:65:85:98:58:c7:e2:95:
                    22:89:3f:66:cf:ad:51:dd:77:33:ad:0e:ab:18:e0:
                    2f:9f:29:ae:81:3c:0b:f1:b2:ca:8e:e9:1a:22:52:
                    ff:fe:dc:6d:2e:71:1d:9b:c2:de:ab:74:6e:a4:af:
                    34:09:84:57:4b:0d:c4:e8:01:16:56:32:dd:06:6e:
                    4c:23:7f:8b:66:84:cb:ee:5e:c8:b7:39:93:f5:33:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:1B:EB:FD:78:3A:95:82:31:45:81:E8:4A:80:7A:02:D3:5B:91
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:1a:8a:29:f3:22:6e:f6:bd:08:f2:0e:86:06:e3:d0:ad:
         60:0d:f8:33:cd:f3:11:39:d9:0e:4c:97:20:ad:d2:2d:38:92:
         46:1b:26:a8:1e:26:19:25:2c:1d:a7:1c:c8:38:4c:8e:17:ea:
         fc:7d:e4:55:e1:4e:cd:3c:f5:49:88:54:d5:af:26:0f:30:16:
         5b:03:e7:76:2f:d7:35:7c:75:0f:ad:01:86:3a:c5:57:05:a2:
         cc:0b:d3:1b:48:a1:38:69:c6:b4:7e:1e:5a:64:5b:fb:8e:58:
         1a:fc:c9:17:eb:18:c5:f8:86:b5:d0:32:6f:74:e8:3a:0c:ca:
         72:a8:ad:11:bd:b8:5d:58:f5:72:9c:da:8c:0e:9c:10:c6:f6:
         77:73:cf:73:d7:dc:bc:8f:56:e8:5e:98:1f:e3:a9:e0:98:5d:
         9e:5e:86:af:08:20:4a:7a:a8:ff:3c:0f:0a:b1:15:02:f7:17:
         8d:25:3d:d9:89:f0:43:5e:70:73:ca:d1:5b:a9:81:18:d4:72:
         fd:16:6d:1d:7d:9e:a6:24:f3:dc:1e:27:b0:37:c3:bd:30:17:
         95:ef:41:7b:c2:b0:bf:fc:a4:31:56:68:4e:32:c5:c8:96:e7:
         70:f6:52:13:a9:db:b5:c4:2a:d0:f2:02:35:9c:58:b6:83:5c:
         59:54:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:58 2025 by rpki-client