Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
File:                     ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json)
Hash identifier:          yPXDI7CQqA91iSWRKFa6i7UHyN1E71ePoGrHu2QoHwQ=
Subject key identifier:   16:CD:61:D5:3E:D9:0C:96:F8:30:33:A0:51:33:69:44:DD:4E:1A:51
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Certificate issuer:       /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
Manifest number:          0B
Signing time:             Sat 09 Aug 2025 08:40:08 +0000
Manifest this update:     Sat 09 Aug 2025 08:40:07 +0000
Manifest next update:     Sat 16 Aug 2025 08:40:07 +0000
Files and hashes:         1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: k0D237CuRzNWu4X88FUjI/wbAIkdbnKtBwhigzfUYcw=)
                          2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: 75vTSE08rNUq4HiUVLq5ZXr6WX1vmudvT/BKb5VXT9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
                          rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
        Validity
            Not Before: Aug  9 08:40:07 2025 GMT
            Not After : Aug 16 08:40:07 2025 GMT
        Subject: CN=68970968-96aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:a8:87:14:46:a6:b1:42:b9:76:13:70:8b:
                    6e:1b:c2:09:d5:53:c9:f8:31:37:e6:e1:a9:28:92:
                    0f:14:d9:49:d3:8a:90:30:af:ad:7b:7c:47:d7:c3:
                    a4:7a:62:8b:f3:41:fc:bc:9a:a5:41:29:dd:f5:ad:
                    f9:c7:48:27:ea:0a:9e:dd:bc:39:1a:21:e3:42:5f:
                    f1:6d:e6:87:0d:28:e1:8f:8a:f1:ce:83:08:29:c7:
                    78:70:55:2c:2f:8f:42:11:b2:25:c0:61:02:38:fc:
                    77:98:9f:20:e6:4c:02:38:4e:4f:55:02:53:0b:2f:
                    5a:b9:ad:98:47:fe:99:47:ba:4b:62:9f:01:97:98:
                    85:87:06:cb:43:43:f9:76:d4:a5:61:fa:20:5e:2d:
                    13:a7:11:8c:2e:75:35:cc:ba:aa:55:85:6c:c6:45:
                    39:44:c5:4d:dc:3e:9b:ab:bc:9c:de:48:fc:0d:47:
                    3d:0b:b1:0f:d8:59:5b:b3:6a:49:0c:48:21:dd:59:
                    4d:ab:5a:4e:4a:d2:19:a8:5d:fc:ca:d5:d6:4c:1f:
                    91:b5:a5:30:a8:45:a4:7e:b7:8c:68:13:32:f9:6e:
                    3a:5d:4b:6c:7a:1e:a7:a9:f3:96:f0:9d:92:10:f1:
                    0e:70:71:b7:87:00:9f:6f:87:92:03:d4:49:66:86:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:61:D5:3E:D9:0C:96:F8:30:33:A0:51:33:69:44:DD:4E:1A:51
            X509v3 Authority Key Identifier:
                keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:b4:c5:e0:5d:ce:0c:35:bc:8a:4c:31:1b:24:39:26:7b:
         dd:cb:ce:3b:51:a5:13:0e:9e:b3:95:23:76:8d:e0:1b:e5:60:
         8f:bd:ae:2d:40:d8:8a:f6:24:2f:5e:c6:9a:53:a3:17:6d:e3:
         a5:0b:c4:95:38:cd:ff:7c:4d:8e:37:a6:1f:06:cc:bb:0f:d8:
         6f:dc:9d:24:69:a8:22:4b:b9:29:33:ee:37:44:79:71:7e:fc:
         14:5d:de:96:e0:c2:3d:21:b7:ff:38:20:81:45:54:dd:ad:44:
         b7:52:78:66:82:4c:38:b2:85:35:12:10:2b:fc:62:9f:93:af:
         57:c7:72:99:c2:a6:4f:35:18:f4:ec:69:59:15:0c:2c:8d:7c:
         a1:9e:50:be:14:e0:11:0a:6c:53:d2:37:00:70:6d:dc:5f:1e:
         f7:b7:50:a2:51:45:97:06:ce:d5:e7:67:4a:7b:31:80:31:03:
         13:f9:65:0d:fe:18:e1:d4:c1:be:fd:99:26:7e:c0:8d:37:a5:
         48:5a:20:b7:35:9a:b5:81:b8:0d:86:1a:e8:f5:09:2e:0a:5f:
         b7:a4:21:32:c0:96:59:38:9b:8a:e6:22:c0:fc:46:48:b0:2e:
         12:7f:08:8c:f5:f8:cb:3a:7d:62:f4:0c:68:9f:b8:d3:fe:db:
         07:1f:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:27:02 2025 by rpki-client