Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File:                     et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier:          32+2wrbkRdfxO+xtautQYfCXTtUwWFiVh4IodFNXP5E=
Subject key identifier:   EB:B9:10:D3:E9:CC:16:50:1C:A2:70:94:58:F4:FA:C3:1C:9D:15:93
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer:       /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial:       06C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number:          06BC
Signing time:             Thu 12 Jun 2025 21:47:36 +0000
Manifest this update:     Thu 12 Jun 2025 21:47:35 +0000
Manifest next update:     Thu 19 Jun 2025 21:47:35 +0000
Files and hashes:         1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: 4lVSd11/kPGdA6joYpZ8aBwGo4CRrCyndqRfHKOyr8A=)
                          2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
                          rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
        Validity
            Not Before: Jun 12 21:47:35 2025 GMT
            Not After : Jun 19 21:47:35 2025 GMT
        Subject: CN=684b4af8-acee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:b4:df:74:ae:a3:2e:6c:ba:f7:53:dc:da:
                    82:2e:77:d2:95:31:3c:94:44:62:97:e9:f3:5b:09:
                    30:9d:6a:8a:40:7f:a5:77:ff:b4:ff:85:14:5f:91:
                    4a:45:21:4c:41:f2:5a:d6:9d:38:f0:e6:ad:5b:71:
                    ac:bc:29:d8:10:7a:aa:98:e4:b1:c8:34:bd:84:07:
                    dc:b2:d0:00:49:1a:25:60:f8:95:b4:76:f4:36:43:
                    59:bd:5a:cd:1e:90:d8:51:cc:4b:94:21:33:7f:99:
                    93:27:56:aa:e1:47:ca:5e:8f:14:b5:51:0b:17:46:
                    9c:36:74:60:3f:89:5a:01:5c:52:3a:69:1c:ac:f8:
                    7d:7f:81:fa:24:66:9d:e1:87:85:44:06:c3:03:2f:
                    93:0b:18:31:f7:89:23:63:cf:20:60:c9:8d:86:32:
                    be:11:11:4b:69:35:6e:1c:5b:2e:8f:2c:39:d2:8a:
                    f7:c5:23:1d:e6:49:ab:ff:17:fb:07:bc:1c:ff:3b:
                    0e:ca:f6:85:07:99:e9:9a:7b:4e:11:a8:be:57:5d:
                    d4:6d:75:72:0c:94:b5:2e:29:97:1b:46:ca:95:c3:
                    b6:44:aa:0c:51:fb:fa:fd:68:17:ca:5e:74:04:cf:
                    6d:8b:d7:3d:ef:15:3c:26:3e:4d:45:d2:8b:e1:a6:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:10:D3:E9:CC:16:50:1C:A2:70:94:58:F4:FA:C3:1C:9D:15:93
            X509v3 Authority Key Identifier:
                keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:cd:3f:28:d6:92:bc:65:ba:eb:7c:04:83:05:19:e0:dd:
         bc:0d:c1:e5:ba:94:a2:79:21:f8:30:13:cd:4c:7e:9a:31:bf:
         91:33:1b:26:96:57:de:55:8e:25:8f:b4:fb:43:23:7d:be:80:
         0c:06:af:73:35:1b:0e:ea:a1:65:50:fe:dd:84:39:a3:1d:d4:
         c6:86:9f:a5:4f:e3:45:83:57:77:81:bf:35:8d:a1:d8:f1:f1:
         97:73:2b:cf:9a:e8:7b:1f:95:1c:cf:ed:7d:9e:3e:f2:c0:2a:
         9c:c9:28:ce:36:4a:9b:c9:04:d7:43:a6:0a:ab:5b:13:f9:4c:
         a6:f6:e0:cb:d6:42:a1:a1:a7:b2:bd:80:71:4b:e3:11:1c:ff:
         15:73:64:57:07:33:72:e7:58:97:d5:f6:16:b1:d2:c5:f7:59:
         6e:6e:42:35:83:be:9e:44:bf:86:7c:9f:0c:10:e7:0b:57:22:
         33:c3:75:5b:7e:cb:57:17:0b:08:bb:df:4d:89:eb:7c:56:76:
         c3:ae:9a:12:bf:e3:68:4f:2c:fb:ca:cd:d6:79:ed:4a:7a:e8:
         69:45:ae:72:20:16:d2:34:67:dc:1a:b8:25:f7:1d:26:12:01:
         8e:ed:f3:eb:ac:57:af:81:30:62:f7:90:e0:ff:40:df:ee:2c:
         a8:38:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:18:57 2025 by rpki-client