Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          AZualt8haJSAK3WXbPMhpDN2xcwZgIm99YNffyBxlb8=
Subject key identifier:   65:04:C0:B0:7C:44:51:C1:27:4C:F7:09:1C:97:B1:60:40:C3:92:D0
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1D20
Signing time:             Fri 08 Aug 2025 16:18:08 +0000
Manifest this update:     Fri 08 Aug 2025 16:18:07 +0000
Manifest next update:     Fri 15 Aug 2025 16:18:07 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: jTTpdyetv3S3UB2OmgpG5OEZ6JKnMxg/D45W1k/muac=)
                          2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
                          4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7465 (0x1d29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Aug  8 16:18:07 2025 GMT
            Not After : Aug 15 16:18:07 2025 GMT
        Subject: CN=6896233f-bc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:6c:fe:57:68:bc:9b:ec:59:a0:bc:0d:8b:
                    27:c4:4a:cb:6e:e3:ab:06:89:9e:ef:cf:f1:f3:d6:
                    26:a4:fb:ab:74:fa:16:3a:26:ac:7d:51:c4:f6:7c:
                    cc:88:6e:3f:b0:5e:a4:08:e5:45:ef:c9:5b:39:0e:
                    c0:66:3b:3d:3d:95:da:15:b0:e6:58:18:99:27:96:
                    4d:f9:ee:a1:20:b2:ff:25:44:01:17:10:a4:f2:df:
                    47:7f:e0:4e:75:8b:8e:2c:43:ef:17:bc:13:1c:2a:
                    5f:cd:65:f4:97:67:6f:9d:36:03:83:a9:7c:63:d8:
                    2c:31:ab:86:9e:bf:02:46:b6:c8:09:eb:b0:2b:ed:
                    62:31:d4:cb:c1:4e:83:69:98:2e:67:04:22:22:04:
                    f6:9e:8c:6d:5a:58:36:a1:b8:1c:7f:b2:c2:b3:5c:
                    46:04:6b:2b:e7:00:e0:65:74:a5:57:a0:c7:92:34:
                    26:45:e2:a0:83:d9:2a:8a:a4:32:b0:bd:2b:66:50:
                    81:de:eb:3b:20:15:25:e8:40:23:ed:af:ae:87:86:
                    78:21:2d:32:ca:c0:69:36:a5:be:49:78:0f:ae:a3:
                    ce:ea:02:91:6f:e7:dd:b3:c9:d5:24:38:58:62:9d:
                    13:90:d0:d7:e7:26:40:2b:fc:e9:41:0c:31:5e:b9:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:04:C0:B0:7C:44:51:C1:27:4C:F7:09:1C:97:B1:60:40:C3:92:D0
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:45:e6:c1:66:c8:e7:21:4b:61:55:dd:bc:72:d0:07:44:
         53:30:bb:51:80:60:e8:e0:01:46:de:d7:c0:68:f0:19:79:c3:
         c1:6a:60:17:4d:c2:06:d5:84:eb:09:ed:6e:fe:15:b6:1b:84:
         65:8d:c6:1a:5a:0e:4f:75:da:62:b7:59:e5:92:26:a2:27:ee:
         e2:50:2a:bb:d3:20:71:f9:09:d6:10:98:1d:da:fd:43:4f:8a:
         6c:05:d8:fa:55:c8:30:80:c4:7d:f0:7a:0b:34:37:76:05:f0:
         2f:26:54:d8:ec:26:94:38:91:70:0a:aa:58:78:f5:bd:f2:26:
         63:d1:fe:79:be:95:c7:2d:89:e0:57:24:bc:5d:e7:a8:98:92:
         78:65:6e:de:47:5c:88:18:fd:cb:51:d3:7d:4c:fe:6f:72:0b:
         88:6c:9f:0d:09:13:7d:ee:6e:03:13:02:de:1f:09:30:02:e4:
         04:b4:f6:c2:f9:8a:8f:63:86:6f:b8:71:8e:5e:35:02:3d:e0:
         96:63:4a:71:07:19:f6:03:41:0e:50:e6:31:f0:e1:57:e2:18:
         5d:f2:5c:80:25:20:ae:ac:19:8d:8b:4f:bc:d5:28:cf:da:b7:
         77:71:63:48:8b:89:dd:a0:6b:b4:df:cc:7a:e2:f4:e5:b2:80:
         20:9a:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:10 2025 by rpki-client