Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
File:                     eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json)
Hash identifier:          xvTKSe9MzQBRBW6SrWwHo9aRJGCnn08jhlhrwsHkQik=
Subject key identifier:   E3:27:64:32:DC:12:FC:EB:23:2D:BA:33:40:91:5E:8D:16:80:39:EB
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Certificate issuer:       /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial:       347B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
Manifest number:          3473
Signing time:             Sun 10 Aug 2025 15:18:27 +0000
Manifest this update:     Sun 10 Aug 2025 15:18:27 +0000
Manifest next update:     Sun 17 Aug 2025 15:18:27 +0000
Files and hashes:         1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: Z2dSkO6XmxYBYR2xeH40O+LVrUHk8N2/VB0qCH1fDTw=)
                          2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
                          rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13435 (0x347b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
        Validity
            Not Before: Aug 10 15:18:27 2025 GMT
            Not After : Aug 17 15:18:27 2025 GMT
        Subject: CN=6898b843-8ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:e1:b8:46:26:b1:cc:7a:05:b5:23:d8:a1:
                    8f:54:85:64:bf:ee:6e:5a:d3:37:c5:99:15:20:3a:
                    f5:2e:86:55:b1:61:7a:3d:1d:2f:e5:3a:63:f7:6b:
                    7b:47:f1:18:bf:9b:cc:7c:aa:0e:3b:5d:8c:49:82:
                    2d:d8:25:dd:8e:9b:51:71:1e:5b:d5:75:46:9c:2a:
                    c5:48:4b:50:12:fa:af:2b:65:33:18:c9:9c:e4:e4:
                    ec:4e:31:7d:19:30:ee:9e:02:7a:a2:6a:01:1d:b3:
                    36:4e:f0:55:dc:6a:39:b4:63:9a:27:a5:59:70:f5:
                    55:2e:dc:25:18:5b:d5:51:aa:ab:82:27:7a:01:2a:
                    78:15:0a:43:4a:57:64:0d:5d:a0:cf:61:22:e7:61:
                    11:8b:c7:a3:04:10:77:dd:e6:db:9f:b9:82:c4:fa:
                    e3:ed:9e:65:b8:46:77:02:23:b4:fd:2f:5e:59:f5:
                    c7:90:82:de:a9:74:9d:05:7c:c3:d5:7d:61:9e:0e:
                    d2:97:97:3e:c2:f9:5a:58:83:1d:db:fc:a4:d5:95:
                    3d:3d:27:a6:97:a2:37:cc:37:0f:43:cf:62:3c:fe:
                    d7:b9:da:6a:8f:8e:71:18:95:2a:b6:79:16:f5:6b:
                    48:3b:fb:3a:fe:2a:73:65:25:a7:f1:2e:86:b0:11:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:64:32:DC:12:FC:EB:23:2D:BA:33:40:91:5E:8D:16:80:39:EB
            X509v3 Authority Key Identifier:
                keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:69:cb:77:85:b9:1b:fe:70:b2:37:f9:4d:07:b1:32:8f:
         b1:5b:44:81:b5:79:67:c8:0c:11:a3:1b:f5:34:2b:49:c4:e3:
         65:77:64:0c:2d:b5:ad:f0:21:ed:8a:27:d8:d7:21:b9:87:40:
         58:8b:25:c2:0e:89:25:fd:84:3e:3c:79:1e:91:bb:19:b1:65:
         e9:06:43:ea:27:43:27:32:72:c8:a3:99:91:c6:29:ae:e4:29:
         7f:f8:a3:42:de:e0:93:bd:1d:8c:90:5c:19:73:4b:bc:ed:60:
         a1:57:94:73:78:d0:15:89:6e:bd:e6:ad:59:e5:38:f6:5e:74:
         5c:3d:ba:81:24:c2:76:0d:be:5b:ff:68:a3:79:f9:e6:5d:85:
         5c:06:e7:69:e3:11:a3:8c:5b:e7:57:a4:34:eb:ba:0b:eb:69:
         63:bd:91:f7:95:e2:33:2e:54:a5:5a:c1:f4:e3:1e:86:6a:64:
         57:c0:27:8c:17:35:48:66:94:58:7e:9a:c2:7c:28:fb:b9:d4:
         cd:36:23:df:1f:1a:d3:f4:e5:5e:b8:8f:ca:96:55:87:d9:17:
         fe:16:ca:7d:83:a2:9e:71:ac:8d:a2:a4:f5:a9:bf:45:4f:ba:
         4f:c1:e9:f6:51:24:d3:7c:31:96:f0:da:c5:c0:4d:22:15:5e:
         d3:7e:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:08:18 2025 by rpki-client