Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File:                     ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier:          ZKMtaRjESBF4NfKx77cWv+j6eQhwa6LYyj2kXzbh9c4=
Subject key identifier:   1A:32:A3:27:A2:C4:F1:CC:5E:DD:1F:CD:7B:E4:8F:10:20:D3:17:CA
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number:          88
Signing time:             Tue 17 Jun 2025 05:30:36 +0000
Manifest this update:     Tue 17 Jun 2025 05:30:35 +0000
Manifest next update:     Tue 24 Jun 2025 05:30:35 +0000
Files and hashes:         1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: ICbOria0YSUfUiBk0PQZwZYbqqoWI9EiUj+HQrgwXrI=)
                          2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: Y1QGQN0nXso2hopLjYxap7U6L3vOEJ5sbYbcbURZoVc=)
                          3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 05:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Jun 17 05:30:35 2025 GMT
            Not After : Jun 24 05:30:35 2025 GMT
        Subject: CN=6850fd7b-fa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:f3:f1:3a:46:17:12:e9:a9:d2:6e:94:cb:
                    13:fd:25:aa:3b:ec:ca:d0:af:8f:d5:1a:bd:f4:4c:
                    b9:f5:1d:ff:18:70:e4:4d:b0:a0:88:80:08:02:b1:
                    18:5f:65:c3:ef:55:95:73:9c:4b:cd:8f:42:8e:c2:
                    90:b1:ec:4a:69:a5:2c:ae:84:2d:c4:30:49:10:1e:
                    e3:f5:d9:a5:8c:a4:76:dd:8b:3c:f6:46:06:2b:bf:
                    e9:08:d2:be:e3:90:1c:69:e3:4a:53:88:27:35:8a:
                    c1:e3:51:e9:b7:a8:9a:05:6c:56:5d:53:cb:eb:f4:
                    fe:80:02:e7:6d:3c:04:04:22:ec:aa:e4:2c:a9:0e:
                    ae:53:0d:d5:0e:1f:1a:a2:bb:2b:27:d4:9e:46:20:
                    7f:bc:0b:12:d2:18:f7:41:89:a6:30:8d:eb:df:6a:
                    0b:6a:01:e3:7c:7c:cb:e7:59:f0:96:94:e7:b2:97:
                    ee:3c:b2:70:aa:56:6c:11:93:cf:1c:a8:c4:15:2b:
                    db:05:99:bc:63:2b:71:57:05:1b:12:38:4d:eb:b2:
                    af:94:8f:0b:cd:b8:0b:a6:0f:69:0d:ac:53:2e:dd:
                    42:3f:ef:16:92:76:da:0d:64:b5:7a:a3:cd:fb:13:
                    5c:02:9c:64:6e:2f:d2:30:21:3e:51:07:bd:a2:38:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:A3:27:A2:C4:F1:CC:5E:DD:1F:CD:7B:E4:8F:10:20:D3:17:CA
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:96:9a:7a:cf:c0:a7:d1:32:69:ad:84:40:c0:8c:f8:47:81:
         48:4b:ef:97:7d:07:5b:a7:22:d1:7a:37:79:3f:48:da:60:6b:
         3c:f4:77:0b:67:a2:c4:3e:11:c8:65:30:7a:7c:45:bd:c6:e3:
         5c:8f:33:b9:4d:01:94:28:55:18:1c:37:74:95:89:0a:73:89:
         1c:f8:03:f6:7f:11:48:35:db:57:bf:a2:e0:32:68:18:cf:3c:
         79:16:3f:75:fe:1a:ba:08:89:08:89:2f:13:04:48:48:0e:94:
         70:2e:bd:55:71:b7:ed:d7:e5:aa:ac:03:c7:b1:2c:71:8c:82:
         ad:01:3c:7d:13:3b:1f:6e:29:72:b5:bb:25:88:03:84:17:7a:
         f9:7d:87:5b:7a:1b:ea:60:fd:3d:e2:ab:6a:24:e6:98:70:68:
         76:94:80:3c:9b:52:90:21:0e:f7:45:e1:62:52:7a:5b:b5:1c:
         99:33:04:8d:19:8e:15:fd:25:ea:38:1b:f4:57:8f:ed:a6:a9:
         4e:69:1a:e5:3d:85:e3:bb:f9:dc:15:a8:f3:6a:e5:78:ac:8c:
         8b:f2:e6:ad:36:e2:f9:ac:9a:fe:f7:60:8d:25:f8:2c:a3:56:
         71:ee:ca:0f:37:61:6e:cf:c4:e2:2e:07:67:89:c9:95:61:4c:
         18:33:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:21:17 2025 by rpki-client