Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File:                     EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier:          Y+NSSysexNN1QrEPQnwNmTEKwQYKVm5wMTIf9JYVqIo=
Subject key identifier:   51:7E:0C:09:A7:DD:32:78:0F:B3:1C:75:C6:88:31:0C:03:FC:13:39
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer:       /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number:          039B
Signing time:             Tue 01 Jul 2025 01:22:59 +0000
Manifest this update:     Tue 01 Jul 2025 01:22:59 +0000
Manifest next update:     Tue 08 Jul 2025 01:22:59 +0000
Files and hashes:         1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: BOz6SlhfdUItF23j6JfPcnldhRqdtfHP6iYfODGHza4=)
                          2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
        Validity
            Not Before: Jul  1 01:22:59 2025 GMT
            Not After : Jul  8 01:22:59 2025 GMT
        Subject: CN=68633873-11ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:e5:8d:23:f0:b8:73:b5:b1:0c:7a:82:b2:
                    ee:98:dc:c8:82:5d:2a:11:41:d4:5b:46:ca:8f:62:
                    09:ea:2d:e6:29:be:36:9c:e5:d4:2e:c0:95:cc:1a:
                    1c:32:bd:d7:d2:cf:c7:17:e7:89:20:e1:e9:51:17:
                    66:03:e0:d0:35:fe:02:d5:ae:b8:03:b3:d0:c6:e8:
                    57:7c:11:78:9f:3d:87:89:37:1e:81:19:d8:ed:6d:
                    cb:66:ab:95:26:3b:cc:45:9d:0f:f4:67:3d:97:49:
                    61:6d:95:e2:e5:1a:a3:eb:97:43:c8:ae:a8:8d:38:
                    ff:fe:32:8d:df:95:6e:25:48:ab:65:ef:33:8f:d0:
                    f4:ce:e5:97:4b:b4:31:ca:95:5b:a7:1e:04:8b:34:
                    05:86:fc:14:55:94:16:df:35:bb:ee:aa:4d:41:3e:
                    95:a4:72:3d:3a:71:fe:ee:16:18:8b:98:38:0d:6f:
                    9b:70:0b:ba:7a:10:2f:1c:63:b4:3c:41:45:ff:5c:
                    85:f3:59:e0:84:30:1e:81:57:64:7c:ba:1a:77:31:
                    87:a9:0b:d9:8d:5e:04:87:85:15:61:bb:54:a9:d7:
                    38:26:14:e7:b7:16:b3:63:67:00:ac:f2:96:b1:81:
                    c2:e6:b5:39:38:1b:2c:9e:db:ec:6b:15:63:f7:de:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:0C:09:A7:DD:32:78:0F:B3:1C:75:C6:88:31:0C:03:FC:13:39
            X509v3 Authority Key Identifier:
                keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:28:ce:16:f0:d9:d9:1a:90:03:5a:3f:5f:3a:8f:c5:dd:
         79:da:61:fd:81:40:80:db:5e:c8:c7:93:7b:af:d7:d0:40:97:
         ec:54:3c:80:5e:f2:ba:5b:68:af:89:a3:de:e8:f7:78:19:0b:
         2a:b3:90:fc:7d:d0:72:e3:d9:6b:c4:f0:e1:fe:8b:e2:3d:8f:
         3c:1d:6b:59:de:a3:90:61:6e:16:f3:aa:5b:8d:a9:a0:3c:b1:
         40:21:9f:56:68:5e:d1:a5:a9:50:90:ad:8c:c0:a6:c4:65:ca:
         96:18:a3:6b:4c:97:52:28:ea:ac:dc:38:43:fc:af:4b:5a:eb:
         1f:bf:58:f5:0b:c6:85:d4:48:c8:2f:e7:7c:cd:3d:b1:23:4c:
         48:43:6a:8e:0b:9c:40:f7:42:bd:4c:a7:5f:f1:b6:de:6e:e8:
         4b:0e:f2:f1:c4:ec:8c:3f:e0:f3:c4:5c:ec:b7:89:1c:2c:c1:
         bd:08:29:a0:1f:2b:54:5d:1b:0d:85:ae:5c:2b:fe:c3:60:7f:
         2e:27:3d:05:53:72:d1:5c:0a:af:2e:96:49:c1:60:c7:5c:07:
         fe:37:ab:ac:3b:83:c3:49:4e:7b:82:d3:34:92:60:5b:ae:b2:
         da:f8:70:8d:35:f7:38:ad:72:89:cc:ab:9d:b8:0f:27:05:8a:
         0a:9d:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:36:21 2025 by rpki-client