Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
File:                     eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json)
Hash identifier:          R1fFP5/DgRtqN1oaZwhN23VS2tc5GQTFfH/A7KFNtxA=
Subject key identifier:   39:E8:5B:07:3F:C3:E3:74:31:CD:43:C5:8B:93:9B:3D:95:86:38:B9
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
Manifest number:          01C8
Signing time:             Tue 13 May 2025 02:12:24 +0000
Manifest this update:     Tue 13 May 2025 02:12:24 +0000
Manifest next update:     Tue 20 May 2025 02:12:24 +0000
Files and hashes:         1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: x1PqqFkJRJ/Hz94/BvZfcxujYR6+SovSRtI859xHIx0=)
                          2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: May 13 02:12:24 2025 GMT
            Not After : May 20 02:12:24 2025 GMT
        Subject: CN=6822aa88-bb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:ee:1b:2f:a8:71:08:1a:47:e4:cc:c1:ca:
                    a9:31:6e:58:1f:c6:9c:52:08:7b:6d:2c:7a:a2:47:
                    d1:06:46:cb:e7:56:31:ee:52:5c:29:0b:d0:76:cf:
                    7c:c3:4a:c4:55:bf:09:84:5f:6e:fa:af:8c:51:c1:
                    f7:21:46:09:db:4c:1b:80:f4:77:cc:eb:bf:7e:4b:
                    7a:72:81:ef:49:4e:d4:e2:dc:eb:cc:b2:02:f7:43:
                    37:78:04:36:7c:d1:cc:1b:d4:93:e8:fc:5f:30:ec:
                    d6:3e:31:9f:1b:b7:e7:12:ea:89:1b:48:26:68:3a:
                    8c:76:e6:18:c8:ac:3e:24:cc:de:e8:ff:61:09:6f:
                    51:b8:d1:a7:1c:b6:6b:fb:a3:5f:ff:41:3d:f3:8c:
                    35:e5:fb:09:d3:86:f2:54:9a:ea:8f:12:0e:92:82:
                    6a:9e:4c:99:59:98:79:c8:50:b4:6f:87:22:b4:37:
                    ed:df:cd:8a:f9:a4:70:64:e5:2b:c7:d2:ba:ca:cc:
                    64:f6:4f:a8:ed:82:77:6a:a8:33:b5:41:15:d0:f2:
                    0d:0b:f7:a7:3a:e9:5b:dc:aa:cf:86:1b:fa:d4:3d:
                    1e:0c:db:4b:51:68:34:e3:0b:bf:46:56:1e:1f:74:
                    5d:bf:84:55:0a:3c:a6:56:5a:3f:d2:6d:2f:cd:92:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:5B:07:3F:C3:E3:74:31:CD:43:C5:8B:93:9B:3D:95:86:38:B9
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:f8:4f:9e:b2:f1:e2:52:3d:0b:d8:8e:91:d8:f8:5f:90:
         38:e9:ca:b9:0c:8d:41:55:05:0f:6e:7b:89:84:35:03:43:56:
         20:c5:86:85:aa:f9:30:df:c8:ad:03:2a:20:ee:4a:0c:77:96:
         f5:67:41:10:63:57:ab:2c:a3:d0:e4:f4:51:2b:88:bb:37:1b:
         74:72:62:a7:fb:31:66:7a:ac:46:07:f0:8a:17:3f:b6:32:bb:
         31:cf:50:f7:e1:78:8f:70:31:41:19:c7:06:03:49:8b:98:4a:
         57:96:b9:3e:25:84:c2:95:2b:4d:94:ee:4a:4e:b7:50:e2:8f:
         15:26:f6:9a:37:1d:b1:b5:0f:a2:00:54:68:70:b6:51:91:d6:
         73:6e:91:26:00:b9:33:e5:d9:3c:40:11:55:20:1f:37:33:1a:
         17:07:6e:c2:d4:45:0a:be:24:0d:70:86:d3:de:b6:d9:f9:32:
         b6:d2:2f:98:23:bc:e8:d2:06:4a:7f:91:a1:2a:ba:42:be:58:
         e7:b3:75:23:7c:1d:31:7d:13:db:fa:10:16:af:4e:38:c0:15:
         1f:e7:a7:39:61:33:54:9b:64:b1:62:0a:e0:aa:c4:91:67:fe:
         b4:fb:e9:69:56:19:b5:fd:87:b2:ec:56:22:f6:49:40:8b:39:
         21:f8:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:23:33 2025 by rpki-client