Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
File:                     eqF9y0Q-PfjajmchB6USkODpoBM.mft (raw, json)
Hash identifier:          Fq9rorvV9srUVibe39wdRQSqORjfyHF4eBJWQPlWV20=
Subject key identifier:   AB:BE:48:55:3A:34:DB:87:57:BF:B7:FB:EA:CD:7D:A3:9D:3C:D2:E0
Authority key identifier: 7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13
Certificate issuer:       /CN=A918233C/serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
Manifest number:          0429
Signing time:             Fri 25 Apr 2025 00:10:39 +0000
Manifest this update:     Fri 25 Apr 2025 00:10:39 +0000
Manifest next update:     Fri 02 May 2025 00:10:39 +0000
Files and hashes:         1: eqF9y0Q-PfjajmchB6USkODpoBM.crl (hash: CvCfITXfCQFghLdKC7e2lxGTC7ZiCRfWFClJOW9w2fQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl
                          rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918233C, serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013
        Validity
            Not Before: Apr 25 00:10:39 2025 GMT
            Not After : May  2 00:10:39 2025 GMT
        Subject: CN=680ad2ff-ea4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:bf:a3:ee:0b:f5:cf:6c:df:ea:1c:e2:8c:
                    1b:7b:ef:6a:d6:f0:0d:de:d6:28:07:37:05:9f:0f:
                    c5:1f:17:52:ed:31:5f:5f:8b:e6:f4:bd:5d:9f:24:
                    85:ec:97:03:34:14:d1:3c:b1:4d:5b:16:ab:eb:f7:
                    ab:f2:96:31:42:86:eb:2b:cf:78:e3:93:ec:6c:89:
                    e3:16:6e:cf:63:56:00:86:05:13:3f:21:a6:ff:2e:
                    93:21:07:a8:36:54:7a:c5:b1:0b:2c:d5:65:57:07:
                    0d:ac:45:b1:82:bb:98:02:a6:c8:9f:7d:51:e9:25:
                    0e:b8:de:35:29:7a:5a:9e:71:26:72:02:07:cd:83:
                    59:75:30:32:65:67:6b:99:fa:fb:d6:70:89:76:76:
                    30:33:9c:6e:3d:9d:82:90:98:55:e6:5b:32:98:be:
                    55:30:9a:48:20:aa:8e:d0:48:4d:19:e9:03:72:6d:
                    49:25:ef:ca:3a:c9:7f:b6:c1:ef:9c:e5:65:14:bb:
                    9f:d4:e6:53:8c:d9:58:ed:0d:0c:35:01:af:45:94:
                    e9:8c:dd:5a:a3:03:64:b6:d8:fe:97:37:a6:12:7b:
                    03:be:c5:76:e2:30:54:ed:bd:69:98:cd:7b:6c:a1:
                    fe:eb:81:12:72:c3:d7:63:01:04:02:8c:e3:91:8b:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:48:55:3A:34:DB:87:57:BF:B7:FB:EA:CD:7D:A3:9D:3C:D2:E0
            X509v3 Authority Key Identifier:
                keyid:7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:62:ef:2a:7a:2f:e6:14:2b:58:26:4f:86:58:83:48:b4:20:
         25:b0:d6:cd:6b:47:51:63:b4:9a:61:31:49:4b:90:16:b2:00:
         d8:83:f4:ac:bf:0a:f0:1d:a5:3d:6d:44:c5:17:c1:13:24:60:
         3a:39:92:89:bd:9d:72:41:c5:e2:8f:0a:00:9d:bb:93:d2:7a:
         42:9f:9d:a1:19:6c:ee:bd:a0:1d:45:63:0b:8d:09:34:1e:93:
         bc:c1:26:8c:1d:8b:15:7b:4c:fc:e3:35:2e:02:0a:26:bb:d7:
         20:12:4d:08:2d:b0:31:fc:b3:f5:51:30:e9:8d:01:da:26:7d:
         63:c3:cc:87:5c:d6:72:2d:c9:f6:96:64:9d:d1:81:9c:c3:23:
         6e:98:1c:a2:c5:63:61:8c:8b:b0:77:ae:27:f6:7c:fd:3e:4d:
         ff:5c:ad:de:93:84:d3:c2:bc:5f:ad:8a:f9:5e:58:f9:c6:69:
         63:4d:80:24:5b:80:cd:39:98:5d:68:bd:64:08:28:5f:c9:37:
         18:b0:33:f5:a9:6a:d9:ed:cf:b6:48:f8:2e:37:61:d1:07:5d:
         d5:22:de:a1:e8:b7:29:60:50:d0:22:6a:1d:f5:bd:c7:d3:f3:
         be:87:1b:27:f7:19:b3:39:24:2b:51:e4:c2:cc:14:76:7d:0b:
         a8:24:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:14:09 2025 by rpki-client