Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          kdqo6nk3bE7CZI46QaLWcctus3pU4+u+uyromkXAC3E=
Subject key identifier:   1C:B6:54:0A:48:5A:A3:1B:C3:D4:1B:BB:2B:B3:3F:46:B4:11:E9:EB
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          0175
Signing time:             Sat 21 Jun 2025 02:57:32 +0000
Manifest this update:     Sat 21 Jun 2025 02:57:32 +0000
Manifest next update:     Sat 28 Jun 2025 02:57:32 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: wYIqBRh+Gop7ajImxgfFkkH3YDZxnlrIMa0XVZSXgDg=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: wIa8XsPQEKgPmaham2jaYKS/+u8e3X7+t4uptXIU2FQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 02:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Jun 21 02:57:32 2025 GMT
            Not After : Jun 28 02:57:32 2025 GMT
        Subject: CN=68561f9c-eac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:e1:b8:0d:55:4f:1d:8c:7f:77:c2:44:5a:
                    e8:0e:de:9a:d8:91:27:71:7c:1a:44:6a:d9:46:95:
                    bd:6a:60:5d:c8:f5:29:24:7f:d8:25:35:56:a7:1a:
                    c7:a8:5f:90:a2:5c:36:29:80:16:f1:3d:cb:87:d6:
                    d6:79:ab:87:a1:6c:35:10:55:04:89:05:21:08:a9:
                    9f:64:be:55:3b:63:08:b5:20:9e:e6:fd:b4:7f:6c:
                    c8:05:5b:78:15:15:66:89:5b:92:55:c0:ab:20:e1:
                    a4:10:a8:01:f4:ae:db:30:d1:b0:05:c1:96:5c:80:
                    63:dd:e9:f9:48:fb:e5:6f:e8:e5:45:78:88:66:46:
                    f5:17:1a:da:a2:ad:a3:40:b8:ff:6d:40:11:89:d4:
                    ec:1c:bf:ea:a0:6e:31:32:78:cc:37:9a:c6:d7:e4:
                    67:bc:c5:a9:67:a2:29:0f:e5:a1:d5:68:fc:49:9a:
                    0e:22:c4:96:b6:bd:33:2e:fe:d7:c7:ef:1f:a5:7e:
                    b0:8c:2d:cf:03:77:b5:d8:15:a4:a8:4f:d5:eb:f2:
                    fe:98:56:bf:b7:11:13:cb:e3:31:42:14:23:29:e7:
                    19:5d:05:13:d8:d2:8e:af:d0:7a:8e:ac:0e:3c:ef:
                    6e:f0:f8:83:43:d9:12:55:db:b4:8c:66:c6:3a:4a:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:54:0A:48:5A:A3:1B:C3:D4:1B:BB:2B:B3:3F:46:B4:11:E9:EB
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:06:a5:fc:e3:34:7f:b7:9d:85:90:59:e6:25:9a:64:0d:
         f0:a4:5f:3d:de:d6:4c:37:08:bc:ac:50:d3:f7:42:79:5c:6f:
         9d:b4:39:81:83:f7:59:39:9b:98:de:68:87:2b:37:6d:51:31:
         e8:c5:54:94:a5:15:ad:96:6e:b2:8e:b5:3b:9a:a0:07:d9:9a:
         83:05:6f:f9:55:bf:d9:dc:d2:25:d7:be:70:33:2b:46:76:21:
         05:35:22:25:8e:3a:bb:1e:88:ad:0a:f4:43:91:76:a4:00:f5:
         54:ca:ae:5a:ef:86:35:ac:12:79:e2:3d:3e:4d:e1:1b:7e:29:
         cb:2e:fa:38:10:4b:be:18:94:57:b5:f5:83:a6:89:fb:66:6b:
         1e:6f:00:ca:ec:34:41:87:c3:1f:b5:97:69:5d:5f:cb:b6:5a:
         dd:65:66:7d:6d:3c:de:33:c2:be:91:1d:98:4d:8b:f6:aa:bb:
         e4:1c:dd:49:c7:48:68:fa:a9:ba:6d:3b:87:b6:67:b6:d4:f5:
         12:6c:c0:56:6e:01:a0:73:ce:5c:e4:95:bc:f4:28:9a:51:7e:
         6d:c8:27:8f:a3:3d:51:f6:ed:9f:23:8e:6f:84:f2:79:3a:4f:
         e2:d9:a2:4c:08:4e:6a:ab:2e:65:7c:4f:13:91:81:da:2a:d3:
         0f:f4:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:42:43 2025 by rpki-client