Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          +UX984QvWqxtPM+qVmpb5TCUO/DdT3M0v464bKKmco0=
Subject key identifier:   20:BA:4B:12:B6:AD:DF:A3:C4:42:10:3A:63:A0:42:35:21:10:06:49
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1D04
Signing time:             Sat 14 Jun 2025 16:07:36 +0000
Manifest this update:     Sat 14 Jun 2025 16:07:36 +0000
Manifest next update:     Sat 21 Jun 2025 16:07:36 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: 1kQANjb0+8QPznOlc+F8cHCxBa0EPZbIA5b4rbxOCZk=)
                          2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
                          4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7437 (0x1d0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jun 14 16:07:36 2025 GMT
            Not After : Jun 21 16:07:36 2025 GMT
        Subject: CN=684d9e48-eb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:bc:06:83:9c:de:c7:1a:4f:05:e3:3c:23:
                    bd:a4:f9:a9:79:8a:6a:da:1e:44:a8:91:ca:ce:36:
                    81:80:fc:d4:69:b4:32:d9:92:12:05:77:49:57:fd:
                    20:19:10:14:ed:ff:af:5f:80:ab:ed:00:42:32:cc:
                    fe:ef:d3:50:3e:d5:45:b9:9f:e1:a7:66:0f:bb:8a:
                    f7:31:b1:f2:ae:02:51:08:61:1c:e2:00:d7:77:50:
                    ee:63:9d:36:66:79:e0:cf:eb:98:76:6c:e7:8c:1d:
                    10:91:da:ef:66:2e:e8:a9:e2:5b:0f:af:bc:1c:fd:
                    01:ef:50:84:db:26:51:ba:45:d2:fc:df:b8:ba:64:
                    4f:79:3f:c6:f5:23:88:c2:bf:1f:0f:93:4c:02:38:
                    07:81:cd:39:3e:90:23:9b:20:16:d0:38:b5:ec:3b:
                    4a:31:cd:43:27:03:3a:b7:53:96:9e:f5:f8:98:c0:
                    9f:26:f6:e9:af:f6:e5:6a:9b:eb:cf:ce:30:22:5a:
                    fd:4c:f5:cf:d2:ac:fe:4a:ce:4b:c4:03:1b:e3:71:
                    1e:d1:47:e5:1b:ee:53:bc:66:c7:de:a1:77:cd:43:
                    97:b0:af:19:7d:a6:9f:c5:6a:df:aa:31:d1:4b:e0:
                    cd:60:9c:25:aa:78:f8:1e:58:96:26:21:a5:bd:49:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BA:4B:12:B6:AD:DF:A3:C4:42:10:3A:63:A0:42:35:21:10:06:49
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:79:0e:b4:03:52:d8:43:e0:a2:85:cb:04:09:c4:90:3c:
         c8:d4:6c:a1:2e:fb:8a:b8:e4:47:bf:f2:0d:81:39:ff:08:e4:
         f2:f1:6a:82:07:78:b8:ea:3a:9d:c8:09:3a:21:82:cd:7b:0b:
         a3:6f:18:9d:95:f3:44:4f:aa:ae:00:05:fb:5c:fd:b4:74:0a:
         59:66:ad:5d:a2:ae:8e:03:f1:e5:74:66:9c:15:35:83:24:39:
         ea:2c:cb:3a:c4:e6:8d:0b:5a:70:22:30:4c:7f:9a:a3:1d:82:
         30:10:e5:30:8b:af:6f:19:07:e3:91:92:fb:98:d9:c1:eb:11:
         05:a4:ee:8e:26:ff:46:cb:d0:f4:37:8c:40:8b:91:9b:69:8f:
         09:cf:eb:ba:b0:e0:e9:f8:a9:e6:91:7e:18:c6:9c:b7:6a:8e:
         12:a0:c7:00:d9:de:b3:c7:91:59:67:33:cb:4a:9e:6a:85:c0:
         e8:83:f6:0c:8f:1d:8e:20:5c:3d:3e:1f:1b:ab:23:70:33:94:
         e1:47:87:eb:e2:1f:2d:88:91:93:89:20:98:5b:e5:24:92:e9:
         0d:db:09:51:49:2c:e4:84:93:13:5a:f1:8f:31:1d:84:f5:1f:
         96:1a:42:70:64:72:58:b7:b4:e6:d9:5c:68:82:95:1d:ec:f4:
         ee:df:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:16:40 2025 by rpki-client