Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
File:                     EYuDYeRNUFJcthNQslJrWfbeLc0.mft (raw, json)
Hash identifier:          gb1HJb0CzVfkB/J87yE+n7c6L8EBrJugbevWsd5gnNc=
Subject key identifier:   AA:B4:70:D2:48:6E:00:87:49:89:9E:53:43:32:82:56:68:92:18:5F
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
Manifest number:          0157
Signing time:             Fri 25 Apr 2025 03:13:51 +0000
Manifest this update:     Fri 25 Apr 2025 03:13:51 +0000
Manifest next update:     Fri 02 May 2025 03:13:51 +0000
Files and hashes:         1: EYuDYeRNUFJcthNQslJrWfbeLc0.crl (hash: oSkTxyoFCZ0sEJ6FdCLkIRXrT7/g5nghs8ZX0bkV78s=)
                          2: 6A13CBAC04D711F0BC472C19C4F9AE02.roa (hash: NpaEZC+frVowfr+OkTk62XtMeb2kHhDxkhfc9nCsgm0=)
                          3: 62752E9404D811F0BE92A51DC4F9AE02.roa (hash: ZKVR1lrcdLxvriA1prCteQU1sWugc5ZdRQWr2+79yO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A, serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
        Validity
            Not Before: Apr 25 03:13:51 2025 GMT
            Not After : May  2 03:13:51 2025 GMT
        Subject: CN=680afdef-4be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:6e:0c:d2:a8:26:1f:84:c8:3b:c9:00:1a:
                    e9:ea:72:33:19:4d:65:e1:a3:e8:7a:77:83:51:2d:
                    f0:c1:63:12:c7:ab:28:44:0d:f6:7d:85:70:c5:6a:
                    67:d4:dd:ed:c2:56:ac:9a:e5:d0:10:f6:db:45:0f:
                    17:6a:fc:1f:17:fa:fc:f9:4c:91:d9:4c:3c:4b:94:
                    42:b8:92:19:03:ee:19:fe:db:92:2c:a8:e1:6f:21:
                    71:b7:16:11:8a:d3:15:4f:27:7c:ff:04:48:67:cc:
                    bf:74:57:d6:62:48:38:b2:77:20:45:b5:da:ad:c7:
                    24:23:a2:15:16:0a:43:fa:83:bf:0b:29:f4:19:01:
                    71:7e:c4:35:7a:66:fd:4a:b6:0c:e1:ff:82:cb:3d:
                    9f:b6:ad:fd:a8:52:2a:4a:fb:c0:b9:db:bb:13:46:
                    a9:37:91:d3:ee:46:54:ad:6c:d2:af:ea:7c:25:5d:
                    a5:a5:4b:5b:3c:41:c8:52:c7:fc:5f:a3:85:dc:69:
                    7c:47:fb:37:04:64:5a:ef:5e:a5:2a:f6:3e:61:36:
                    3c:2b:6e:40:2c:a3:e2:48:a6:41:66:3a:d2:8f:fb:
                    b8:09:a6:ee:9e:28:78:e0:06:52:81:b5:31:d0:ec:
                    cf:c6:3a:3a:c7:6c:c9:8a:3c:e7:a4:58:08:f9:b9:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B4:70:D2:48:6E:00:87:49:89:9E:53:43:32:82:56:68:92:18:5F
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:39:86:69:dd:55:0f:00:62:a0:9c:78:18:b0:7d:29:b2:fd:
         8f:88:5d:50:91:7c:6c:ca:8f:3d:20:11:8b:97:00:62:3c:a8:
         82:8d:cd:18:40:2f:d6:e0:1a:3e:11:ed:f3:8b:36:a2:ee:d3:
         95:2e:5c:19:5d:e3:e5:ee:9a:aa:f3:29:1f:cd:68:b9:93:7c:
         23:7e:33:ff:49:a2:6e:e1:a9:b9:b1:24:67:83:70:63:22:cb:
         56:a2:82:50:ed:29:70:c9:4b:81:25:a8:df:85:d1:c8:08:e4:
         2c:40:80:e8:23:c5:02:b7:80:2f:18:c1:ac:77:50:67:bd:ab:
         65:0d:64:1f:58:1d:f3:db:db:a9:09:ff:9b:3e:83:69:a3:cd:
         8c:03:4a:dd:1b:df:4c:e4:46:81:70:30:61:ec:60:44:d1:17:
         e3:1f:99:0c:41:0c:ab:0d:f2:3b:69:67:e3:21:0e:08:f9:98:
         52:ff:4f:03:da:4e:69:ca:19:fa:ed:a2:1d:91:76:7a:46:23:
         a0:3a:9a:5e:88:99:9e:0d:76:60:b5:dd:9a:fd:1c:8f:ed:15:
         d7:6c:f8:38:36:96:af:36:e4:e7:d6:c7:8d:83:84:02:93:42:
         0b:d3:9e:c6:89:b2:ee:4a:90:7e:c2:89:74:04:b9:6b:d3:13:
         04:f4:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:29 2025 by rpki-client