Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
File:                     erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json)
Hash identifier:          6dWX7uPr2D/yI/NghQoJRfcznFoQNWZVCCDkNycazes=
Subject key identifier:   6B:1C:42:A3:E4:23:83:55:10:8F:55:89:D1:7B:59:25:D4:BF:9A:E6
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Certificate issuer:       /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
Manifest number:          33
Signing time:             Tue 17 Jun 2025 06:33:31 +0000
Manifest this update:     Tue 17 Jun 2025 06:33:30 +0000
Manifest next update:     Tue 24 Jun 2025 06:33:30 +0000
Files and hashes:         1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: nTJy8hWriG1HPw7q5yQuQ1QU0vgTBOiwyGDWkc1JbJM=)
                          2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
                          rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 06:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
        Validity
            Not Before: Jun 17 06:33:30 2025 GMT
            Not After : Jun 24 06:33:30 2025 GMT
        Subject: CN=68510c3b-3d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:8b:5d:b3:0b:ea:80:2a:f1:7c:5d:d4:37:
                    9e:4a:98:ea:37:a9:97:b4:3f:fa:43:b3:da:3b:a6:
                    f6:56:fd:61:32:6f:9a:3f:a2:68:e3:8f:68:62:f0:
                    c1:fc:78:24:9b:6a:0e:52:70:2f:17:44:19:e7:f9:
                    ec:b9:31:6c:62:55:7a:3e:ee:56:67:ef:cc:72:44:
                    8f:cc:bc:cc:07:b4:82:7b:2c:72:c8:0c:20:8c:09:
                    60:ce:59:be:dc:73:89:7b:e9:b7:a2:9d:90:55:d8:
                    44:80:8b:8d:5a:48:e3:8d:b2:b4:ca:ff:a6:ef:08:
                    89:c6:41:de:53:67:57:ee:79:1e:c5:7e:64:b3:c2:
                    70:13:5b:80:91:a7:83:c5:31:6e:21:21:14:78:2c:
                    28:44:04:73:1d:be:e8:78:63:5e:d3:32:62:a5:0a:
                    ef:98:a7:ce:13:ca:3f:ad:86:86:b6:f5:5f:cd:11:
                    e1:d2:9c:cd:36:84:88:a4:85:a4:89:a3:ca:a0:8f:
                    8d:d1:dc:1b:d0:d8:7d:b1:ad:77:a6:99:34:d8:36:
                    ad:06:45:a2:72:60:87:e3:d7:5e:d0:01:b3:ec:ff:
                    42:fd:3a:77:9e:79:b9:24:84:91:ce:9f:da:4a:12:
                    6d:c1:94:1c:03:ae:2c:14:54:d1:05:e0:11:55:28:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:42:A3:E4:23:83:55:10:8F:55:89:D1:7B:59:25:D4:BF:9A:E6
            X509v3 Authority Key Identifier:
                keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:75:6d:8f:d9:b0:f4:a3:e3:57:32:77:27:f0:68:5f:a7:6f:
         69:7d:6a:be:d2:7d:33:b3:0d:bc:d7:22:61:bb:b3:6c:db:22:
         17:b7:a5:73:75:dc:ff:e8:06:93:49:fc:8d:7c:7d:74:22:9b:
         f8:8e:b1:b8:fd:10:82:6d:54:4e:1e:ac:b4:31:6d:f3:54:53:
         bf:a3:39:bb:53:0b:de:32:96:29:bd:22:ee:2b:b5:77:89:08:
         b6:60:36:87:6d:81:0a:df:5a:92:4b:f0:f4:70:62:f7:3c:c4:
         f1:59:33:8f:fd:9f:35:21:b8:23:5a:e5:05:7b:30:ff:54:e8:
         10:bc:e2:d9:6f:4c:e5:ee:51:b6:48:c1:6a:51:72:ed:f4:42:
         51:80:c8:23:83:b7:62:2f:c8:02:5d:bd:bf:a3:b1:d4:5a:ad:
         4b:97:c9:a1:7a:ae:92:f3:1f:30:8e:5c:8e:7a:61:30:a2:f5:
         d9:f4:e9:86:3f:80:fe:eb:ea:19:a2:2a:68:fa:78:a9:60:b4:
         45:46:38:59:33:aa:58:24:d9:6a:84:9a:d1:c3:ed:41:bf:59:
         80:b8:5f:4e:58:e1:a5:c9:2a:70:f3:b1:98:6a:a0:86:3c:b7:
         ef:c1:2e:a5:19:f1:35:7d:56:86:65:51:90:86:cf:c9:d0:96:
         e9:f8:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:08 2025 by rpki-client