Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
File:                     EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft (raw, json)
Hash identifier:          oTapCUJajC99oA8C6dvEMUltQwp9zNb4xo3BzXTTYWI=
Subject key identifier:   A9:59:68:59:68:0D:CC:E2:3F:1E:55:CE:F7:37:01:22:88:1E:FE:7E
Authority key identifier: 11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C
Certificate issuer:       /CN=A913D208/serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
Certificate serial:       0459
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
Manifest number:          0453
Signing time:             Thu 24 Apr 2025 23:58:51 +0000
Manifest this update:     Thu 24 Apr 2025 23:58:51 +0000
Manifest next update:     Thu 01 May 2025 23:58:51 +0000
Files and hashes:         1: EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl (hash: iKm5OGh0hB6El7+pf90rxDOvz1i1YjRwUFBoCLBfFeQ=)
                          2: 9C0D9C2C4DF211ECB01A1042C4F9AE02.roa (hash: GHnF6i7M1wJiMCIU6p9YZwqjjEAkSVWafMM0uIW4wUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl
                          rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D208, serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
        Validity
            Not Before: Apr 24 23:58:51 2025 GMT
            Not After : May  1 23:58:51 2025 GMT
        Subject: CN=680ad03b-d4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:3e:96:d2:bf:2f:b8:d2:8d:a8:03:80:ee:
                    2f:50:d3:12:5d:5f:76:16:af:f0:e9:93:44:e8:40:
                    fe:93:5d:47:24:e4:0e:1c:76:49:57:c7:e0:16:28:
                    2d:38:ce:d5:7d:bd:39:92:a6:21:07:31:e4:58:c5:
                    3a:d6:57:bf:fe:81:bf:2c:ab:0e:a3:15:0a:97:3a:
                    1c:eb:17:24:46:1c:a1:22:2b:66:c4:27:89:07:15:
                    4f:2b:d1:14:94:42:1e:54:d6:0d:18:ab:93:00:83:
                    23:a5:1a:4e:dd:04:a2:74:b8:1c:4e:5e:96:66:59:
                    ff:7c:1f:2e:99:5a:04:f0:35:76:5e:f6:06:ed:b3:
                    f9:5c:ee:70:2e:f5:29:8b:5b:d6:7d:5b:ac:4b:de:
                    de:dd:8f:c9:56:6c:c3:d4:11:a0:09:14:5b:6b:81:
                    bc:dd:97:a3:f9:f5:51:77:87:45:5b:42:1c:11:ac:
                    96:5a:6f:84:ae:ea:7a:61:37:4c:3f:5a:a0:2b:05:
                    1a:3f:8d:a8:87:0c:fa:43:62:aa:d6:52:d5:cf:a7:
                    46:fa:6c:ab:17:c1:23:d6:67:a8:f6:c6:72:7a:e0:
                    a8:24:5d:9a:5a:63:b5:4f:10:62:6d:61:62:70:0d:
                    58:ba:32:44:3d:db:65:04:d9:3c:ea:06:97:6d:78:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:59:68:59:68:0D:CC:E2:3F:1E:55:CE:F7:37:01:22:88:1E:FE:7E
            X509v3 Authority Key Identifier:
                keyid:11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:83:c8:6c:4f:ba:e2:d3:09:a9:f1:d8:db:2b:7e:11:ef:87:
         f9:b8:dd:22:22:8d:49:52:f6:62:dc:a7:d7:7f:ef:fe:ec:0b:
         24:ab:44:f1:13:66:ed:9b:14:ca:8c:b4:cd:fc:fb:a4:da:f2:
         cb:68:85:8c:ba:ef:fa:b7:ee:fe:1a:45:8d:20:5c:b1:64:9d:
         13:97:b7:11:63:39:62:e2:38:5d:59:f7:29:6b:08:b6:43:bd:
         f6:b8:d1:21:a7:e5:7b:ff:40:d1:56:d6:6e:a4:f9:2c:27:b2:
         d3:13:47:f8:e4:4d:0b:79:de:2e:f4:d3:83:94:fa:2d:8f:43:
         ab:d8:87:4c:eb:1c:0e:cc:bf:62:cf:0e:47:44:d9:f6:83:ad:
         7f:a4:60:cc:d6:cc:b3:0b:48:df:e0:30:8c:58:a9:2e:f3:d9:
         1b:d1:0b:e6:93:77:92:9a:7c:8e:11:84:db:5b:aa:00:77:07:
         00:43:09:4e:0b:32:7d:8a:d8:fb:b2:56:00:7a:b9:19:95:6e:
         ef:49:58:0f:a2:26:c5:31:db:04:91:21:58:92:48:24:7a:fd:
         52:29:cb:26:d0:a7:05:7d:9f:dd:2a:84:51:7d:65:be:5f:30:
         8f:8f:66:ee:50:d3:e8:18:af:69:ce:90:44:ac:3e:38:4c:74:
         60:b9:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:35 2025 by rpki-client