Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
File:                     e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json)
Hash identifier:          +krM6DO8hNuiVlZbiJJLigwscUDWmaz9/woA5SqXvCY=
Subject key identifier:   BA:8F:7F:CC:BE:B3:7C:50:FE:B2:7C:28:1C:29:82:7E:31:2D:10:78
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
Manifest number:          0643
Signing time:             Mon 16 Jun 2025 22:19:57 +0000
Manifest this update:     Mon 16 Jun 2025 22:19:56 +0000
Manifest next update:     Mon 23 Jun 2025 22:19:56 +0000
Files and hashes:         1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: WVeGHKP2eb5E+E+MLVh1SpEfkDkpW1ee0GPL8PZHCqk=)
                          2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=)
                          3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 22:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Jun 16 22:19:56 2025 GMT
            Not After : Jun 23 22:19:56 2025 GMT
        Subject: CN=6850988c-b566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:4c:b6:8b:23:80:5a:80:de:3b:58:f1:03:
                    d6:d6:c5:17:bb:f6:14:e2:b0:8b:41:fc:bb:94:9e:
                    56:df:7c:73:f9:cd:c9:ad:bd:67:40:98:36:37:8b:
                    57:25:eb:9f:04:bc:73:0f:2c:e8:4d:23:9b:69:8f:
                    dd:73:44:ae:a4:39:1a:e7:2d:7b:71:c4:16:89:1c:
                    8d:ae:c4:13:f7:20:a3:1b:88:7a:f3:d9:3a:35:6a:
                    35:11:c9:53:7c:22:53:a0:7f:41:6d:df:ce:e3:c3:
                    85:3c:be:ce:c3:ca:ff:ed:db:ad:4a:44:1e:11:46:
                    10:20:f6:2c:35:a5:f4:b0:2c:e5:0a:d8:47:e1:ef:
                    38:c7:47:14:07:05:7f:0d:2d:4c:c5:5e:32:90:74:
                    6f:8b:4f:cf:73:e0:7b:39:ed:1d:71:2a:f7:de:33:
                    07:7b:8d:3f:95:33:37:cb:1c:0e:47:8d:93:8b:f0:
                    02:a0:57:1c:f5:92:ea:a0:93:b2:a6:8c:6f:b7:f9:
                    bd:01:83:0b:d0:43:88:d9:32:eb:d5:a6:0d:16:93:
                    02:fb:16:05:e0:fb:9b:f2:0e:dd:e1:2c:3d:3a:f7:
                    d6:a2:31:41:78:47:53:17:ca:5d:d3:8f:d4:c1:cd:
                    42:a1:28:1e:8e:19:b6:aa:19:ed:6c:0f:28:a8:c4:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:7F:CC:BE:B3:7C:50:FE:B2:7C:28:1C:29:82:7E:31:2D:10:78
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:36:36:e1:24:78:90:4e:aa:20:53:57:25:55:5f:15:e0:
         4d:8d:c2:99:f0:d4:e1:20:01:e0:28:21:8b:da:0f:25:62:f6:
         e1:ca:dc:cb:af:5b:75:14:35:c6:db:07:fc:e8:4e:98:23:49:
         d0:fd:d2:7a:ea:d3:00:d6:57:e9:33:ff:15:c1:6e:a1:fd:be:
         47:28:5e:fb:b6:d0:00:24:50:4f:e7:47:c4:0b:b3:7d:aa:08:
         73:67:0c:1a:ef:3e:85:c0:dc:fa:d8:56:e8:76:45:8a:1b:5a:
         4b:2b:34:75:f8:d4:80:df:f6:61:de:a6:2d:8d:60:41:3d:1b:
         31:da:d4:23:8e:96:9a:a3:40:f7:b1:de:36:9f:f0:3b:05:63:
         cb:4e:7f:db:67:02:d0:95:c5:b9:e9:fc:56:8f:18:76:d6:2d:
         6c:cd:d7:99:e7:32:b7:13:34:0e:99:a2:c1:e3:d4:02:72:61:
         2b:13:22:7a:92:21:12:14:26:7e:11:57:7b:33:5b:61:16:53:
         8a:c9:cf:90:7c:d4:9a:ca:6c:0d:79:72:78:1e:88:5b:a8:1b:
         98:41:59:b5:7b:95:d8:7d:1c:37:64:7c:de:2c:fc:b6:d8:e2:
         e3:ef:1b:12:12:9b:06:cc:e8:19:ab:9b:8d:a4:1b:3d:21:32:
         a7:74:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:34:43 2025 by rpki-client