Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          Vz5F2s8siEFYJL1VImSUsSxLXT/F2fGe/17HcszmXI8=
Subject key identifier:   E6:0B:D8:17:3E:0D:7F:C6:43:65:18:D5:BD:44:B4:39:E8:69:BE:9C
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          0612
Signing time:             Mon 04 Aug 2025 23:14:23 +0000
Manifest this update:     Mon 04 Aug 2025 23:14:22 +0000
Manifest next update:     Mon 11 Aug 2025 23:14:22 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: j1/Fgtx/X+/DuyQhmi43Mnv9KQzM+YBi9ytPs1NI8Io=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 23:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: Aug  4 23:14:22 2025 GMT
            Not After : Aug 11 23:14:22 2025 GMT
        Subject: CN=68913ece-345b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:db:5b:15:3e:a7:66:ad:c0:77:0b:fa:1f:
                    b5:18:79:89:2a:f8:84:c1:c8:9c:9d:0f:a9:cd:64:
                    4c:d1:87:9b:6d:37:75:1e:01:f6:9b:09:eb:4d:0b:
                    db:10:e3:cb:5c:88:44:27:8a:b9:da:3b:16:3b:e8:
                    35:9e:11:fd:b1:84:74:ed:17:8b:c1:3c:8e:17:d0:
                    43:6a:fc:f0:a3:f7:95:95:66:7b:1c:0e:4e:11:cf:
                    1b:bd:6c:68:8e:8d:aa:d4:45:ac:4c:04:da:73:8a:
                    66:05:35:fa:23:c5:9e:12:72:38:18:7d:ec:42:45:
                    9a:0c:bd:9e:61:5d:77:0c:f9:8a:82:b2:65:b2:1b:
                    b0:29:59:f2:a9:d4:6f:d8:69:58:8b:f7:95:b0:27:
                    61:21:b4:24:4d:6e:09:34:68:30:a9:0a:97:70:8a:
                    39:17:1d:f9:03:4f:1c:6b:aa:1b:cd:91:87:37:38:
                    24:f3:d2:2e:97:33:6d:41:c1:bb:98:33:cf:40:61:
                    34:49:5f:ea:76:b1:70:d8:b5:91:b1:bb:d8:81:9e:
                    56:92:80:d1:1e:8d:df:36:8c:07:ca:b6:9f:a2:91:
                    33:5d:04:94:42:8d:36:b2:ec:1d:b9:f8:38:1c:63:
                    fe:79:e2:93:9f:e4:12:59:fe:2c:3e:b9:29:9f:8a:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:D8:17:3E:0D:7F:C6:43:65:18:D5:BD:44:B4:39:E8:69:BE:9C
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ce:b4:e7:35:24:13:25:ef:f3:62:09:d3:98:2a:9d:2a:e4:
         47:a1:b0:f6:ec:87:59:0e:15:1c:90:d9:47:3d:3b:46:b8:55:
         29:7d:8f:0f:c9:55:8b:56:80:3d:b3:2c:e7:78:36:59:85:e9:
         e3:0d:bd:28:da:dd:77:3d:18:49:f8:0f:ba:6b:bf:70:eb:81:
         73:15:8b:a1:a5:72:13:16:ac:8c:f4:9f:b0:c3:2c:e3:0f:66:
         fc:39:32:c8:2f:f5:1b:38:b7:82:b8:85:70:c3:72:85:c9:f5:
         d1:30:2e:ea:ab:2a:5f:ad:cc:94:af:32:2a:ef:ca:1d:5a:a8:
         05:28:93:b0:51:d5:d8:36:12:4a:1b:0c:18:74:c3:ce:fa:9d:
         e6:98:fd:7e:56:7c:b8:15:c9:69:74:be:c3:86:6d:c1:70:49:
         16:a3:72:72:98:34:a7:15:b7:35:ba:46:01:e4:71:74:7c:ff:
         f5:2f:7d:26:31:e9:ab:a5:98:57:40:ff:a1:2a:24:19:a9:65:
         3c:89:56:e8:39:6f:08:91:67:f5:20:42:99:25:7b:66:1f:13:
         87:a7:98:55:c7:f7:68:62:fa:b1:5a:6b:6a:33:a8:f7:78:83:
         9f:e2:54:14:43:34:c2:0d:c0:59:53:9c:f4:9f:38:8e:b5:13:
         8d:cc:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:12 2025 by rpki-client