Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
File:                     haOfEGRko23KJ0v8d_uvewMDh24.mft (raw, json)
Hash identifier:          oJ4jyMPCj+VGXtT6XaQmcQnko8wzwNWyl8SVvH8Cauw=
Subject key identifier:   A6:D5:0D:B7:73:95:3B:5B:A0:8B:9E:4A:43:34:12:9C:BD:A2:44:BC
Authority key identifier: 85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E
Certificate issuer:       /CN=A9131181/serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
Manifest number:          29
Signing time:             Fri 13 Jun 2025 06:41:10 +0000
Manifest this update:     Fri 13 Jun 2025 06:41:09 +0000
Manifest next update:     Fri 20 Jun 2025 06:41:09 +0000
Files and hashes:         1: haOfEGRko23KJ0v8d_uvewMDh24.crl (hash: 9p35gOmegxS1ykMJ2XsOTR7zoMOA6Es13N77WXZHUYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl
                          rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131181, serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E
        Validity
            Not Before: Jun 13 06:41:09 2025 GMT
            Not After : Jun 20 06:41:09 2025 GMT
        Subject: CN=684bc806-5589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f6:10:e9:11:3b:a0:af:6b:99:4a:7f:48:12:
                    ff:84:72:18:76:3f:b4:ae:76:e7:8b:4e:aa:41:5c:
                    3c:7c:40:a3:1f:6d:5b:1c:43:ad:3a:03:07:12:18:
                    f9:a8:78:17:63:86:2f:32:b5:ae:9f:c5:a6:e9:7f:
                    ac:49:06:bd:d6:cd:61:ff:a6:3d:b9:a5:a2:7e:97:
                    e8:05:3f:b0:98:85:42:35:f2:10:00:84:96:da:ef:
                    8d:71:17:bd:ca:8b:91:f7:c4:a6:f9:3f:c2:cb:bb:
                    90:06:0d:12:e1:8e:f6:50:81:89:5a:28:b4:f0:4c:
                    a0:6a:e9:2a:2f:bf:86:df:a6:31:a2:96:33:98:1f:
                    12:88:92:36:a1:f6:e2:05:b9:ba:df:7a:8c:8a:c8:
                    45:25:0a:59:2b:ab:98:4c:ae:82:69:c6:79:2b:bb:
                    f2:c5:4b:1b:7d:49:c2:43:a5:be:0f:08:cb:a1:6a:
                    11:89:a6:6f:bc:75:27:4d:67:43:ee:e1:4d:2c:d7:
                    10:c3:3f:57:aa:a0:03:27:8c:2b:bb:b0:84:e7:f4:
                    45:ba:61:3c:1a:e3:a7:ec:fd:01:e4:5b:13:ed:c3:
                    60:e3:d6:c5:48:26:c8:71:a7:9f:18:d6:88:46:3c:
                    94:c7:7e:c7:80:12:3d:dd:e9:9a:80:58:86:31:b5:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D5:0D:B7:73:95:3B:5B:A0:8B:9E:4A:43:34:12:9C:BD:A2:44:BC
            X509v3 Authority Key Identifier:
                keyid:85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:02:a3:30:20:2c:4b:bd:0d:81:eb:32:6a:aa:f2:68:66:76:
         ce:6e:b3:ca:d5:e8:f7:ee:56:ec:1e:db:e5:42:3f:07:dd:e3:
         e3:35:0d:4f:3a:a7:a3:cf:08:c3:f8:08:b9:41:a0:c5:73:68:
         d2:7f:eb:07:c5:e2:07:0d:84:ed:bd:73:55:47:04:df:d0:60:
         ba:1e:da:9e:2f:69:fe:0a:f9:6c:f2:5f:7c:ea:87:df:30:5b:
         29:26:99:0b:47:f6:4c:c0:23:f8:0d:82:a2:e4:ec:6f:2f:76:
         6a:ba:90:b7:ef:9d:c6:bd:87:a3:7d:bb:71:8d:b8:ee:81:d8:
         bb:f3:71:47:5f:6b:8a:67:37:7c:ea:3c:0f:fd:07:31:be:80:
         ea:f9:82:20:ba:08:22:6e:96:9e:34:51:ac:04:52:85:a1:59:
         03:3c:06:38:f3:d1:99:e3:37:ae:83:d4:a0:0a:79:f2:a1:ea:
         b8:4b:fa:08:25:67:d7:cf:37:ef:f8:1b:46:bf:f8:67:d8:08:
         24:49:4e:27:5c:21:23:aa:f9:08:0b:8d:c1:26:6f:db:a6:0f:
         6e:d2:28:e6:d0:a0:ef:5e:55:0a:66:05:5b:b6:67:70:44:25:
         23:56:aa:ee:3c:e4:c7:1c:91:18:74:95:aa:d4:95:31:d5:77:
         7e:fb:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:45:32 2025 by rpki-client