Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File:                     EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier:          h98OO30JfBgd/DSAIesGHNoSbFDuHvWedndI2oqxxy0=
Subject key identifier:   37:41:DD:22:46:D2:E1:D9:89:70:E5:71:D8:5F:5D:E6:12:24:92:1D
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       0677
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number:          066D
Signing time:             Wed 18 Jun 2025 22:12:47 +0000
Manifest this update:     Wed 18 Jun 2025 22:12:46 +0000
Manifest next update:     Wed 25 Jun 2025 22:12:46 +0000
Files and hashes:         1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: Slkf8bTNn4V9osrb3WkPirvuQtCmziMMdBxLVqTkIqQ=)
                          2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=)
                          3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 22:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Jun 18 22:12:46 2025 GMT
            Not After : Jun 25 22:12:46 2025 GMT
        Subject: CN=685339de-6013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:e7:8b:ba:89:fe:81:2b:6e:78:34:ed:05:
                    c6:bb:e1:82:ad:7b:47:67:6c:6d:3a:d6:8b:79:2d:
                    7d:3a:ed:db:d4:e9:ec:7f:62:cb:67:a1:b5:d4:46:
                    1d:40:19:92:a7:bd:eb:8d:ce:a0:73:80:55:4c:1e:
                    08:74:66:22:35:28:25:13:e0:15:a6:bb:b7:c2:4c:
                    85:68:7f:17:36:f6:21:a4:48:e0:ff:31:05:63:ff:
                    63:5b:6a:9e:f5:bb:d2:62:d7:7e:b4:67:ff:41:81:
                    98:2c:85:b3:8e:c2:36:4c:24:73:59:bf:e1:38:1d:
                    42:7b:a9:85:64:f3:b4:1c:17:4d:87:52:c2:c3:d8:
                    f0:c6:21:8c:03:28:16:09:a5:f5:8b:11:cc:90:4e:
                    39:7c:36:18:00:54:16:d2:49:67:fa:3b:cb:f1:a5:
                    b3:d3:55:cf:47:c7:31:e2:1d:47:11:d6:a1:85:64:
                    0b:47:18:81:1e:ab:0c:91:6a:72:34:da:8c:d9:b0:
                    8f:0f:90:03:03:84:af:72:9d:da:45:fc:d2:d2:b8:
                    5a:62:26:08:7d:ee:7f:59:ad:54:72:a8:d1:75:02:
                    b3:58:a3:69:91:b7:21:19:f9:e3:a5:d7:4f:f2:fe:
                    4b:54:7b:9c:ae:2f:35:1e:11:ee:2d:77:3a:6f:89:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:DD:22:46:D2:E1:D9:89:70:E5:71:D8:5F:5D:E6:12:24:92:1D
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:06:b0:af:9b:86:c3:12:40:5b:8e:37:7c:c2:73:51:6b:
         79:7b:fc:13:43:25:42:50:7e:65:85:e2:3a:b6:5c:fd:44:3d:
         00:23:a3:e6:33:51:65:3a:29:04:ec:8a:cf:1f:12:37:63:27:
         51:f5:7c:83:d8:79:75:66:f6:82:e5:e7:44:4d:f4:b7:6f:a2:
         dc:92:81:23:19:92:fd:50:f8:af:fc:dd:e3:b6:2a:b5:57:f6:
         2b:97:3e:08:49:b7:09:32:64:88:f9:df:21:d1:0d:3b:cb:52:
         2d:a3:f2:e0:9d:11:ff:0b:c2:62:28:60:1c:fd:e1:61:97:fd:
         84:d3:d8:4e:b8:97:80:62:7b:6a:d7:98:b8:b8:2a:9d:eb:0c:
         2f:c4:42:4a:72:3e:08:36:e3:17:7f:76:96:63:26:4b:b8:6f:
         83:f8:69:57:e1:4e:70:12:03:48:75:f3:ca:4c:e3:f2:e0:66:
         17:a7:39:b2:79:60:7e:6f:90:64:c5:e5:36:af:63:64:6f:e8:
         a5:4d:65:79:ae:15:de:16:5b:6b:af:4f:a6:60:99:cf:ee:92:
         0d:74:3f:33:ca:d9:07:52:74:c4:60:82:a8:57:b3:d5:65:d8:
         e6:8b:ca:ba:75:a2:51:c4:d2:d3:b9:dd:9b:e2:0c:cd:6c:e8:
         ca:c4:86:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:13:51 2025 by rpki-client