Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
File:                     EU2YjjFR6VKba6150-lUNuU34SM.mft (raw, json)
Hash identifier:          GHC+on6W4h/xTxwYIVKdbAhfd5q0o1pxOVYlNox+IPc=
Subject key identifier:   60:9F:ED:0F:A4:C3:BE:5C:C5:5F:56:C0:7C:AA:EA:84:CF:CC:A5:08
Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
Certificate issuer:       /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
Manifest number:          07D6
Signing time:             Wed 30 Apr 2025 20:52:03 +0000
Manifest this update:     Wed 30 Apr 2025 20:52:01 +0000
Manifest next update:     Wed 07 May 2025 20:52:01 +0000
Files and hashes:         1: EU2YjjFR6VKba6150-lUNuU34SM.crl (hash: revjF4khwtxjQ59XH3LOPiWo+EXDlcCv7J2e4YBhFUA=)
                          2: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (hash: 5oc6Qp38wRPdhyK0UkEA8kQt2rT5qpKXkGxy5uDj59c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
                          rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 May 2025 20:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
        Validity
            Not Before: Apr 30 20:52:01 2025 GMT
            Not After : May  7 20:52:01 2025 GMT
        Subject: CN=68128d72-e2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:46:00:a6:ab:60:21:a9:2b:b7:fa:0d:45:
                    18:fc:5f:9b:f0:c3:ac:b1:02:73:6e:01:e5:27:4a:
                    e6:ad:f4:83:11:ac:55:50:5f:52:38:71:c1:68:6e:
                    ab:23:30:aa:0f:43:0d:8b:38:f8:61:f7:21:5f:48:
                    86:eb:a5:42:24:c9:3a:da:95:63:8e:32:41:19:6d:
                    7f:e4:7f:88:1b:c7:0e:85:6a:ca:e5:75:da:f2:c2:
                    13:77:68:02:82:06:99:0c:1b:21:c9:c1:e7:1e:d0:
                    35:9f:f9:53:cb:a4:e8:cb:a4:b8:69:21:de:65:2c:
                    e2:57:95:c2:0b:ce:ac:e8:2a:b0:33:3b:89:9f:4e:
                    b5:0a:11:f3:51:9e:04:ba:b6:77:cf:fb:f5:da:d4:
                    88:2b:38:4c:7a:a9:59:5a:1d:b2:80:a2:d6:ca:27:
                    35:08:b6:0c:63:56:87:1a:df:e1:1e:7a:c5:60:34:
                    2b:42:10:91:2d:7e:c4:cb:e8:cd:ee:c8:4c:bf:ca:
                    f6:1d:f5:54:66:8c:05:76:f5:88:8e:4b:ac:24:47:
                    21:2f:bb:fa:73:7f:7a:9b:8e:e3:b7:64:44:4a:f0:
                    25:0c:b6:dd:5f:25:01:dd:21:b3:3f:a0:a4:7e:99:
                    c6:0f:a7:19:2e:b1:c8:ff:40:43:e6:45:fb:10:20:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:ED:0F:A4:C3:BE:5C:C5:5F:56:C0:7C:AA:EA:84:CF:CC:A5:08
            X509v3 Authority Key Identifier:
                keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:fd:f1:2d:9e:f7:bc:2b:05:bc:1d:d2:5d:71:a0:e1:66:
         06:3f:5b:77:b3:d2:3c:1c:75:55:3f:81:a7:44:61:65:4f:f6:
         aa:0e:b4:67:e4:aa:76:57:30:70:56:08:b9:81:41:7c:7c:46:
         0a:fb:48:e2:55:17:61:86:72:56:70:5d:65:17:3a:2e:9c:39:
         cf:35:56:8e:44:1f:48:4a:3d:89:31:e9:37:72:a0:7f:e2:b6:
         fc:6a:85:c7:fe:16:4d:26:8f:23:51:a3:74:62:91:13:d9:bc:
         56:18:58:1a:4a:d8:6f:8b:e9:ca:64:da:23:5a:7d:73:7b:6f:
         31:e7:06:5f:2b:9f:ae:15:87:00:4b:5b:fd:15:30:ab:a1:16:
         d2:a7:a9:8c:35:f4:27:73:4e:4d:5b:bc:33:88:ca:15:86:d2:
         71:52:56:59:17:53:cb:52:ea:b6:91:31:e2:06:ac:c0:8c:b2:
         2b:9f:0b:7e:44:dd:5a:ff:48:c1:88:df:45:64:6a:fb:e4:a7:
         17:47:56:5c:45:78:10:d5:0b:3a:00:c7:8f:cf:1d:c1:d2:14:
         b8:46:31:d5:53:97:38:ed:a5:21:d1:dd:8d:33:ab:7d:b9:6a:
         f1:50:a6:f3:0a:fe:36:bd:92:cf:e5:ce:76:8e:56:76:5f:fb:
         32:d6:d7:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ2MzMxMTAvBgNVBAUTKDExNEQ5ODhFMzE1MUU5NTI5QjZCQUQ3OUQzRTk1NDM2
RTUzN0UxMjMwHhcNMjUwNDMwMjA1MjAxWhcNMjUwNTA3MjA1MjAxWjAYMRYwFAYD
VQQDEw02ODEyOGQ3Mi1lMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ZhGAKarYCGpK7f6DUUY/F+b8MOssQJzbgHlJ0rmrfSDEaxVUF9SOHHBaG6r
IzCqD0MNizj4YfchX0iG66VCJMk62pVjjjJBGW1/5H+IG8cOhWrK5XXa8sITd2gC
ggaZDBshycHnHtA1n/lTy6Toy6S4aSHeZSziV5XCC86s6CqwMzuJn061ChHzUZ4E
urZ3z/v12tSIKzhMeqlZWh2ygKLWyic1CLYMY1aHGt/hHnrFYDQrQhCRLX7Ey+jN
7shMv8r2HfVUZowFdvWIjkusJEchL7v6c396m47jt2RESvAlDLbdXyUB3SGzP6Ck
fpnGD6cZLrHI/0BD5kX7ECBN1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCf7Q+k
w75cxV9WwHyq6oTPzKUIMB8GA1UdIwQYMBaAFBFNmI4xUelSm2utedPpVDblN+Ej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDYzMy9BMDE5RTlDQUY0
MDExMUVBQjA2MTk2M0ZDNEY5QUUwMi9FVTJZampGUjZWS2JhNjE1MC1sVU51VTM0
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VVMllqakZSNlZLYmE2MTUwLWxVTnVVMzRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDYzMy9BMDE5RTlDQUY0MDExMUVBQjA2MTk2M0ZDNEY5QUUwMi9FVTJZampGUjZW
S2JhNjE1MC1sVU51VTM0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHx/3xLZ73vCsFvB3SXXGg4WYGP1t3s9I8HHVVP4GnRGFlT/aqDrRn
5Kp2VzBwVgi5gUF8fEYK+0jiVRdhhnJWcF1lFzounDnPNVaORB9ISj2JMek3cqB/
4rb8aoXH/hZNJo8jUaN0YpET2bxWGFgaSthvi+nKZNojWn1ze28x5wZfK5+uFYcA
S1v9FTCroRbSp6mMNfQnc05NW7wziMoVhtJxUlZZF1PLUuq2kTHiBqzAjLIrnwt+
RN1a/0jBiN9FZGr75KcXR1ZcRXgQ1Qs6AMePzx3B0hS4RjHVU5c47aUh0d2NM6t9
uWrxUKbzCv42vZLP5c52jlZ2X/sy1tfl
-----END CERTIFICATE-----
Generated at Fri May 2 21:57:05 2025 by rpki-client