Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File:                     7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier:          1iBnWK5Wel1p9jkcSuju75iNOS+NNgZ6+5WRV1TJTkQ=
Subject key identifier:   0B:7B:B3:77:C3:38:BA:F7:0F:E5:34:B5:50:C5:63:58:4D:3F:F3:C6
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer:       /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number:          02FE
Signing time:             Sun 15 Jun 2025 01:01:34 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:33 +0000
Manifest next update:     Sun 22 Jun 2025 01:01:33 +0000
Files and hashes:         1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: W8qErdnRflUiVdaqIv1tVpkW5T6zMyQbB3xTZEXmKrE=)
                          2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: LMp5kVNCStiwGpSsrDjiKfBvLER7LLTCwt6mJ3nCrNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
                          rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
        Validity
            Not Before: Jun 15 01:01:33 2025 GMT
            Not After : Jun 22 01:01:33 2025 GMT
        Subject: CN=684e1b6d-cab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:ef:e2:94:91:23:bc:f4:33:d0:1b:cf:b8:
                    43:e3:b8:79:1e:a8:c0:7d:6f:11:49:a8:8a:1f:54:
                    ed:30:b5:77:e6:08:07:29:99:f7:a3:e7:6f:11:13:
                    4c:93:03:5a:6b:0c:0c:44:9f:57:1a:d7:ea:c7:05:
                    d8:15:e1:88:a7:35:4b:8f:3b:59:25:5a:a8:e8:73:
                    42:f9:79:ad:38:cb:e0:31:f2:10:98:01:b5:cd:aa:
                    e2:e0:ed:b4:7a:56:4e:75:a5:b1:2a:e7:75:bf:97:
                    77:f6:6d:47:eb:8a:e2:fb:03:68:ed:d5:df:fd:85:
                    98:4d:46:37:de:07:d6:03:e2:77:6d:ab:c3:30:e1:
                    0d:53:c4:34:9c:4b:55:7c:7f:0f:a8:5c:8e:61:42:
                    f5:4f:da:d6:da:75:2e:2a:58:bd:71:a5:3f:ed:78:
                    41:95:24:02:b4:f1:fd:4c:80:1c:37:da:84:50:e7:
                    d7:98:04:59:7d:70:1d:87:2b:e2:76:60:57:8b:d7:
                    28:b6:be:0c:46:68:fe:8f:d6:d5:28:40:ab:e0:88:
                    f7:d3:ce:2c:5c:b3:f7:2d:05:22:9a:f4:18:b6:57:
                    a6:2d:8e:0a:bb:0f:fb:d8:78:d4:4c:40:eb:13:51:
                    4e:19:95:bb:c4:9a:44:f0:fc:f7:2d:7b:04:95:4c:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:B3:77:C3:38:BA:F7:0F:E5:34:B5:50:C5:63:58:4D:3F:F3:C6
            X509v3 Authority Key Identifier:
                keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:55:05:7e:13:54:6a:eb:f2:73:91:b3:97:3e:34:9b:06:2b:
         f4:e1:a9:78:e3:45:b8:37:3e:7c:4a:23:91:fc:1d:3c:a4:1e:
         39:9e:ab:48:5b:e3:71:2f:97:e7:58:e8:68:a9:8c:4f:30:75:
         bb:03:24:87:0f:dc:74:a8:c3:b8:72:7c:48:83:1a:16:7e:78:
         54:c9:ab:66:a0:1a:66:ee:aa:2a:80:63:c8:df:76:c7:1a:37:
         33:49:a6:bd:f4:1e:43:3b:b7:67:f4:cd:39:7a:c4:27:bf:bb:
         58:37:14:58:34:6d:a9:6b:8a:f3:31:97:8e:2e:73:a0:46:6f:
         7c:f0:bd:87:13:e7:f5:78:26:a0:2d:58:92:f0:96:13:0c:e4:
         8a:55:f6:79:01:1c:80:2a:10:88:50:7b:3a:eb:54:c5:99:eb:
         62:90:ed:01:36:38:f5:4d:8b:d0:ef:98:f9:3b:ce:46:81:38:
         cf:52:72:c6:6f:3a:b9:31:19:c3:62:5f:05:00:e6:19:31:24:
         7e:86:70:e2:34:c3:0d:ef:71:5e:d0:a4:67:c5:22:96:ff:8b:
         31:e0:b2:55:3e:26:71:bb:f5:c3:53:83:54:08:ea:f8:7f:e5:
         0f:41:d9:d3:f9:84:5e:a9:20:02:e0:56:aa:a3:d1:44:04:15:
         fd:9b:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:33:57 2025 by rpki-client