Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File:                     EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier:          uzxRE2Fv8oiog46s1jo/MhxRHeFpMBSX1OAU4AwF8fk=
Subject key identifier:   1D:8A:58:B2:8E:30:27:76:09:88:9B:4D:B2:22:7E:D7:6E:78:FD:08
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer:       /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial:       086E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number:          1326
Signing time:             Thu 12 Jun 2025 19:16:53 +0000
Manifest this update:     Thu 12 Jun 2025 19:16:52 +0000
Manifest next update:     Thu 19 Jun 2025 19:16:52 +0000
Files and hashes:         1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: taQe1lRNsgAkJuA5eqFQ3tEXnzKoyqUcHI/sLRWA30s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
        Validity
            Not Before: Jun 12 19:16:52 2025 GMT
            Not After : Jun 19 19:16:52 2025 GMT
        Subject: CN=684b27a5-45c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:57:b3:33:4e:6b:7c:f9:c7:12:3d:f2:0f:
                    ec:74:5b:56:b5:77:64:d1:54:9a:61:ac:7e:60:3f:
                    61:e6:16:8a:5e:ea:fe:89:33:85:2d:9b:b5:6d:e3:
                    ce:11:27:9a:da:5a:9b:d2:6c:37:53:3e:09:35:36:
                    07:11:8e:ba:b2:fb:9b:46:3a:c4:06:0c:f5:c0:17:
                    f2:25:8e:d2:3b:d9:1e:de:b4:fa:a8:26:47:cc:2f:
                    fc:eb:86:38:ac:a6:d5:92:27:89:b9:e0:16:2b:f8:
                    4e:81:1e:9c:40:60:e0:cd:31:3d:41:9c:e0:38:c1:
                    c9:9a:6b:f4:9d:12:6b:e1:b7:7c:91:6c:f8:06:2f:
                    3e:90:8c:df:69:c0:4e:3b:cd:a5:aa:ae:2d:fb:74:
                    8f:8d:2b:a1:a1:62:a6:82:0f:dc:8f:cd:4b:44:fb:
                    72:04:e8:27:9b:87:d3:5e:c5:8c:b9:10:7f:47:59:
                    36:c0:aa:52:9e:89:06:08:16:39:d9:1e:44:af:45:
                    a5:f5:25:94:77:bd:6c:da:1a:b0:73:a3:12:17:0e:
                    7f:5f:f0:46:c9:74:61:3a:79:50:4a:8e:b7:65:b5:
                    5f:59:21:70:a5:51:46:74:46:21:8c:62:2b:c9:64:
                    9a:ca:ac:58:bd:41:b1:5f:3a:a5:0c:4c:87:34:8f:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8A:58:B2:8E:30:27:76:09:88:9B:4D:B2:22:7E:D7:6E:78:FD:08
            X509v3 Authority Key Identifier:
                keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:c5:fc:3c:c2:69:5b:a3:7f:6c:ee:2f:6b:d8:73:dc:82:
         a3:19:4a:27:d9:6f:4a:bc:2c:a5:e2:77:e3:fe:70:1c:84:52:
         22:df:30:4c:b7:7f:1b:71:67:50:f9:12:77:10:ea:78:59:ad:
         34:83:1d:9e:b3:c1:2f:8f:2b:c7:a4:cf:25:0c:12:4e:6b:9e:
         97:9a:f7:48:1d:17:71:ba:1e:b2:c3:68:30:77:ed:5f:f0:24:
         61:6b:eb:6e:9a:bf:a8:3a:0e:f6:43:5c:11:ca:d2:eb:71:4d:
         12:e9:31:3f:6c:bf:ca:cd:ba:09:14:65:35:21:df:6f:00:79:
         6a:04:c7:df:32:1d:0c:75:1f:50:12:4b:1d:f1:8c:12:98:fd:
         ba:84:6e:f6:b2:38:07:aa:80:ba:31:ed:da:0b:0c:d6:3c:21:
         d6:cf:9f:78:53:d3:b1:40:e4:20:c0:0e:75:cf:58:75:d0:30:
         b5:0c:b2:96:e8:aa:bf:7f:86:52:6d:c9:1c:18:b0:f6:25:69:
         f2:e5:ff:4b:f2:86:b9:99:47:00:09:b1:b2:ce:ef:5f:58:78:
         64:1f:8e:5a:78:22:e7:6d:29:b3:da:91:08:f3:6e:fa:1c:19:
         77:d6:c7:c5:84:a7:e4:20:d1:73:6a:c8:ff:e4:50:dc:71:a3:
         e6:91:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:26:23 2025 by rpki-client