Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
File:                     eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json)
Hash identifier:          NE2IhYKJB/86UvHwbRdICiBOjGZMmcHxAXdiquP/9Ek=
Subject key identifier:   F0:A4:BA:DA:81:4B:74:35:1B:C1:7A:8B:5D:E5:8E:B4:3F:5F:D1:FC
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
Manifest number:          01BF
Signing time:             Fri 25 Apr 2025 02:11:54 +0000
Manifest this update:     Fri 25 Apr 2025 02:11:53 +0000
Manifest next update:     Fri 02 May 2025 02:11:53 +0000
Files and hashes:         1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: xLYQuNn/an3QeM/nS8rGRMCm2T8XTLpVtiJb/rnPGIQ=)
                          2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: Apr 25 02:11:53 2025 GMT
            Not After : May  2 02:11:53 2025 GMT
        Subject: CN=680aef6a-d39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:cf:64:c2:9c:f2:82:44:15:20:96:ca:2a:
                    3c:e5:79:fd:c2:89:42:42:a6:7d:b0:4a:30:7a:39:
                    b5:c2:ed:34:fa:8f:22:cf:a8:b1:17:91:44:52:02:
                    a5:94:9c:d4:41:48:66:0d:6c:cf:5f:6d:0e:33:c9:
                    ae:63:08:04:84:5e:72:5e:b3:38:e9:0d:57:5b:38:
                    65:5d:51:b5:b4:c9:9c:1e:17:96:0d:43:d6:6f:bc:
                    b0:5d:f5:c1:77:d9:f9:18:3e:dc:54:e9:45:68:c6:
                    87:86:d8:3e:7c:7b:a8:7e:85:8d:a2:86:19:0a:86:
                    7b:a2:9f:73:ac:44:24:28:20:df:01:0d:65:d4:23:
                    b9:1d:c9:18:c6:77:15:1d:53:14:e5:d2:18:d6:ff:
                    bc:6a:de:f3:1b:c9:05:8e:da:40:66:e9:59:c2:51:
                    99:c9:43:f4:f9:3a:0a:cc:ed:30:1c:69:eb:a1:bd:
                    54:04:50:c1:c1:a0:96:f4:63:fa:cd:4b:7f:46:30:
                    aa:f2:d3:21:e5:39:51:e1:6f:b1:26:d0:7e:e8:5f:
                    d4:93:10:6a:8f:11:65:32:de:b7:dd:7f:9c:2e:ac:
                    40:40:3f:3b:d7:8f:24:ba:fc:d5:e1:e5:99:2c:58:
                    0d:36:ba:e6:85:8f:79:df:3b:45:70:d9:fc:b3:1b:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A4:BA:DA:81:4B:74:35:1B:C1:7A:8B:5D:E5:8E:B4:3F:5F:D1:FC
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:8d:c0:79:29:54:7f:b5:12:09:82:e4:88:25:ab:26:be:
         b3:63:81:90:75:c8:dc:5d:26:34:df:42:89:d1:6d:7a:e5:00:
         fe:3b:30:e6:f9:1e:1c:a7:a9:e6:b2:47:c4:b3:13:f8:62:95:
         1c:4b:cb:14:53:f6:dd:22:39:c2:a9:8e:58:28:3b:3f:ba:d3:
         7b:04:9b:9b:80:54:f6:c6:4e:20:bf:c7:c7:51:8a:1c:b2:84:
         30:ef:3b:6b:25:11:f6:9c:85:fe:1f:f2:79:81:d1:fe:06:35:
         3f:80:99:b9:07:13:37:ad:68:a6:2a:ac:8d:4c:0c:34:10:3f:
         10:4a:6c:c5:e0:ab:00:3d:40:71:9d:24:e7:08:09:54:15:c9:
         b9:e8:e9:bb:0a:1e:59:f9:e4:ae:37:7f:9a:d2:0c:14:5e:64:
         e3:d2:c8:83:b7:08:bc:93:49:21:9c:68:9c:5e:8f:91:35:9d:
         e9:f2:a3:18:a5:c0:eb:32:4e:66:27:56:84:b5:71:cd:c4:74:
         2c:1e:a7:7c:48:57:39:02:6e:eb:b0:fe:67:f2:e8:49:7b:ad:
         02:60:bd:79:e3:7c:61:87:5b:b0:2d:38:50:2a:27:6a:01:a7:
         25:89:2f:e9:5a:b0:39:4c:c3:be:56:85:fe:44:d2:34:00:0f:
         94:6a:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:53 2025 by rpki-client