Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
File:                     euliL4NM9MbPWtGpivB9UBVFpL8.mft (raw, json)
Hash identifier:          HB0n07tN+5c0nJvnLmFD/PC3Xht/R27gHBoIKpjCDLE=
Subject key identifier:   DA:7D:F3:82:33:92:96:84:4A:C1:D5:8B:96:6F:44:40:38:33:9D:74
Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
Certificate issuer:       /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Certificate serial:       0A55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
Manifest number:          0A4B
Signing time:             Wed 18 Jun 2025 19:35:38 +0000
Manifest this update:     Wed 18 Jun 2025 19:35:37 +0000
Manifest next update:     Wed 25 Jun 2025 19:35:37 +0000
Files and hashes:         1: euliL4NM9MbPWtGpivB9UBVFpL8.crl (hash: Nd4xKvdP4VoRXbtoQAUggeZ4xDk3n6D4f227YIfexnU=)
                          2: 61096B522DB111EDA42EBE42C4F9AE02.roa (hash: 24dZPAjPwsi+X/J+G66aSyT7fcYpOELO2E3lKkZX6no=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl
                          rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 19:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142661, serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
        Validity
            Not Before: Jun 18 19:35:37 2025 GMT
            Not After : Jun 25 19:35:37 2025 GMT
        Subject: CN=6853150a-e0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:fa:9d:27:15:64:bc:af:c6:d9:71:71:55:
                    d5:50:c4:08:79:e8:81:01:19:08:0a:30:dc:7b:cd:
                    7a:69:8f:91:13:3b:34:0d:45:b6:b1:21:13:46:8c:
                    e7:57:f1:9c:c2:3d:ec:15:b7:74:d8:d5:a0:98:43:
                    de:37:c7:4f:af:39:0a:30:f5:85:dd:b8:d5:2b:91:
                    e1:05:cf:ee:81:61:c2:9b:d3:fc:61:b1:22:bc:33:
                    cc:25:fb:c7:6b:05:7d:a8:ab:ad:4a:d1:6b:f4:6a:
                    dc:80:ca:61:a6:ea:f6:f6:88:57:ce:85:69:c6:cd:
                    83:1f:55:04:86:0b:eb:fd:10:65:aa:a5:1d:3d:6c:
                    8f:73:ac:42:f3:ac:13:81:a2:95:df:38:c6:e0:9a:
                    0b:a3:2d:de:df:ae:0a:fc:8d:d3:8e:86:57:50:b9:
                    cf:c4:b1:c8:e9:ca:d1:dc:4c:b5:31:65:89:06:a1:
                    1b:92:ed:e7:67:3d:5a:e8:7e:d4:7d:93:94:96:91:
                    a6:5c:83:99:07:09:e9:a0:59:94:23:6c:80:08:b4:
                    6c:d3:c2:df:b9:c7:37:3f:87:4a:68:ae:64:d7:64:
                    59:38:53:ab:40:43:99:3e:78:7c:82:90:a6:e4:31:
                    9d:b2:aa:18:55:cd:72:a4:2f:fa:2b:76:3a:fb:57:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7D:F3:82:33:92:96:84:4A:C1:D5:8B:96:6F:44:40:38:33:9D:74
            X509v3 Authority Key Identifier:
                keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:15:e9:28:02:19:e9:92:2c:17:57:79:76:c0:71:47:5b:
         6d:4a:d5:d4:5d:83:96:f0:6d:2f:d6:e3:b0:a6:0c:1e:44:97:
         f6:ad:f7:5e:b1:94:bc:75:47:c7:7f:bc:5b:32:42:60:9a:d8:
         18:ea:2a:ee:f8:fb:fe:93:75:81:c4:7d:05:de:f9:b2:d2:84:
         04:0f:4e:ee:10:7f:1e:fc:4b:70:ef:74:2d:34:cf:b2:f6:4f:
         8b:6a:38:e5:ec:46:10:cb:ef:c4:c4:db:20:9d:42:19:e5:3d:
         fb:49:2e:b3:92:6b:52:3a:16:6f:5c:cb:6b:c6:3b:e4:8d:f2:
         ce:5d:1c:3c:da:f1:f3:3a:2a:e2:59:08:61:85:84:b7:17:1b:
         0e:cf:f7:0f:db:c1:37:fd:7d:51:7c:41:ba:4e:89:61:07:32:
         ef:03:b7:6c:8c:72:70:93:a8:f6:09:4c:ec:81:62:ee:d2:a2:
         39:22:15:c3:7d:5e:19:a7:5c:c3:a5:1d:97:b9:7f:49:fa:c7:
         4d:96:ce:6a:f8:11:25:28:ec:8b:64:49:6b:45:b6:1b:7b:2d:
         d4:ce:c9:37:1b:be:6e:fb:56:1c:c6:cd:db:27:95:38:1e:f9:
         dd:c0:c6:b2:a3:43:89:83:43:14:8f:f7:bb:91:ea:a4:f3:a3:
         fe:28:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:19:29 2025 by rpki-client