Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File:                     EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier:          0OL+9ACjNa2l7s2vOCd30OxTt0r3zfsMjPvnrsvLZUI=
Subject key identifier:   FB:88:6A:2E:A7:A9:02:64:4B:B7:9F:61:69:4E:9E:68:D9:0C:98:39
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       067C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number:          0672
Signing time:             Sat 28 Jun 2025 21:58:40 +0000
Manifest this update:     Sat 28 Jun 2025 21:58:39 +0000
Manifest next update:     Sat 05 Jul 2025 21:58:39 +0000
Files and hashes:         1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: zfN3rUps+gq23OhqwLH8ggM5kzeDI/mE5F+XDlCwgXY=)
                          2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=)
                          3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Jun 28 21:58:39 2025 GMT
            Not After : Jul  5 21:58:39 2025 GMT
        Subject: CN=6860658f-c34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:a2:92:78:ac:d2:2a:d3:09:4d:24:95:2c:
                    65:d0:e9:5c:53:d8:f5:bf:9f:68:72:b8:86:d9:ea:
                    d5:89:24:32:cd:ce:6d:62:38:a7:b9:df:7b:21:d9:
                    67:f0:45:cd:32:47:18:50:fb:c2:ce:26:7c:d2:13:
                    89:0b:99:57:1d:b8:2a:df:5d:ba:f1:44:98:af:0d:
                    a7:a5:cb:88:03:b4:b8:0e:88:a8:7f:16:ca:e9:d4:
                    e0:74:2f:14:78:8b:07:83:96:27:a1:b3:ff:83:b6:
                    cb:a6:e5:a0:85:b4:fc:1b:46:c6:59:f4:a1:74:36:
                    eb:ae:3c:f1:40:06:80:be:83:63:47:84:5f:dc:cb:
                    ed:ff:67:35:2d:34:b7:66:82:0b:63:34:e5:0a:f2:
                    a0:85:82:97:db:bc:20:40:b8:ed:28:e6:36:c5:85:
                    f9:81:29:0b:58:b1:98:38:bb:5d:88:82:aa:b4:ab:
                    a3:0f:27:b9:ac:9c:e6:94:cb:f6:33:f4:6a:b6:dd:
                    4b:a6:7c:52:ce:7d:2c:fb:31:24:a3:04:53:f3:e0:
                    27:37:6e:02:22:c2:a3:85:a0:24:60:62:3a:c6:f0:
                    8b:70:81:b8:e1:f9:ae:5c:03:c0:6b:9a:ac:1a:f9:
                    dc:f5:a1:30:7e:02:ca:f7:74:8a:b2:89:94:aa:38:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:88:6A:2E:A7:A9:02:64:4B:B7:9F:61:69:4E:9E:68:D9:0C:98:39
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:1e:c5:b0:56:bc:03:e5:5b:78:c5:10:65:4c:f3:a1:2e:
         dc:da:28:6e:5e:e8:a9:0e:f7:0c:7f:ac:0c:c3:b0:c6:3e:eb:
         73:2f:43:5a:a5:4f:c4:af:0e:60:87:f5:28:56:d9:aa:15:56:
         a1:cc:6b:ba:5e:7b:5f:52:d0:88:ac:77:c5:77:e0:98:ab:f7:
         d1:c5:e2:27:c0:c9:4a:c2:c4:34:72:d9:69:f0:7d:12:eb:cf:
         c0:34:67:be:86:d3:11:19:d8:53:ee:a3:b3:bf:02:d8:ae:c4:
         a8:be:f2:cc:c3:a0:89:3d:4e:82:3d:5a:43:9c:d4:7c:b5:3e:
         86:a0:47:ce:c6:1e:e7:fe:e5:fb:21:22:b2:48:7a:3a:f2:34:
         ac:5e:77:2c:9c:17:68:8d:bb:69:31:ca:68:9b:f9:71:e4:ab:
         2b:68:b2:5e:e4:11:fc:9f:41:40:79:03:ab:bd:c1:82:6c:7a:
         0b:1f:a0:24:88:53:24:7c:8a:1c:74:36:9e:c2:a0:44:2b:d1:
         11:5f:0b:14:71:f2:b0:72:6e:1c:74:3d:29:38:94:32:a6:e5:
         cb:63:cd:15:02:be:f9:f6:68:55:2f:73:04:59:67:09:dc:6c:
         a0:f6:4a:77:48:64:89:7f:75:05:2d:62:fc:78:36:79:22:78:
         a0:6a:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:32:22 2025 by rpki-client