Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File:                     EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier:          pP0XZVwRbXrAQlr24vL5wHU9XoVO0m1OBTd0jlImPTM=
Subject key identifier:   A6:2F:83:41:F2:CF:4A:15:4B:4D:7C:5F:B2:8D:FB:5E:3A:62:61:55
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer:       /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial:       0C87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number:          0C75
Signing time:             Fri 20 Jun 2025 18:15:09 +0000
Manifest this update:     Fri 20 Jun 2025 18:15:08 +0000
Manifest next update:     Fri 27 Jun 2025 18:15:08 +0000
Files and hashes:         1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: cSszL4NXXJvMb22KhUbk91o/i/hbzktbHS6vZJYXlgg=)
                          2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 18:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3207 (0xc87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
        Validity
            Not Before: Jun 20 18:15:08 2025 GMT
            Not After : Jun 27 18:15:08 2025 GMT
        Subject: CN=6855a52c-9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:4d:ee:94:57:0e:43:6c:0e:4e:aa:ee:1c:
                    49:e0:53:91:e5:07:98:90:b0:a0:55:7e:a7:e1:21:
                    bf:c4:10:78:17:ee:69:7b:22:39:be:70:83:1d:24:
                    d1:fc:55:6f:93:43:b7:75:42:f5:51:4d:ab:3e:37:
                    1a:49:30:0f:7b:a3:43:20:f4:81:21:7b:0c:e1:12:
                    de:49:cf:1c:7b:d0:e7:2f:ce:0a:ba:d7:83:70:38:
                    38:86:5f:04:f8:16:b6:34:be:6e:a8:5f:66:6a:5f:
                    42:da:5f:19:cc:01:db:e7:c8:e2:66:10:bd:28:a6:
                    cf:66:26:02:50:ba:4a:66:53:66:b4:60:6d:73:93:
                    09:f5:6d:2d:be:0c:2b:ce:ee:b9:63:19:7f:61:50:
                    43:81:df:9f:d8:ba:17:94:54:a4:b4:ca:bf:4a:46:
                    8d:fb:ef:56:46:0e:08:02:48:9e:21:e7:2b:24:7a:
                    5a:50:0a:e9:16:a3:a3:db:45:67:4d:40:51:00:31:
                    bd:1c:95:dd:5f:1d:7a:7d:5b:75:fa:e6:4e:a3:bb:
                    bf:7c:3b:c1:3e:7f:8c:a5:17:a4:f8:8d:48:6d:33:
                    1f:49:b1:54:56:88:9a:c7:38:f6:2e:d3:a8:99:ef:
                    fb:fc:7d:6c:d7:37:1e:86:dc:40:fc:78:3e:cb:e1:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:83:41:F2:CF:4A:15:4B:4D:7C:5F:B2:8D:FB:5E:3A:62:61:55
            X509v3 Authority Key Identifier:
                keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:c3:7d:0c:30:4f:48:af:6c:7a:ac:70:77:7e:c2:ff:a4:
         7c:3d:7f:93:5b:7f:cb:84:b8:4a:78:d3:97:3c:e9:2a:7b:52:
         39:f0:1e:da:fc:29:3b:c0:3c:87:15:37:54:d1:db:b6:bd:8f:
         89:6c:72:b5:90:1b:6e:c2:a7:16:ca:ca:52:23:7c:15:27:e1:
         72:95:33:18:42:37:be:a0:61:ed:0d:ca:a5:72:99:0d:ec:61:
         88:14:7a:e6:d3:5f:22:3d:76:c7:d7:16:bf:72:03:a9:31:ed:
         65:21:22:f4:f0:0b:4a:fd:4a:a8:e5:a8:63:7f:ae:c5:78:7d:
         7d:c9:54:36:ab:4d:fa:30:52:0c:55:3c:49:00:a8:d4:74:3a:
         34:3e:f8:6c:1e:e7:4e:1f:49:1a:38:43:4b:6e:00:a2:75:39:
         29:9d:95:9e:f0:5a:7e:c8:a2:b6:bd:37:da:73:ff:bc:4a:5a:
         e8:f8:30:e1:bb:57:02:bd:bc:f8:9d:53:a1:f3:65:e7:f5:48:
         e4:2c:ba:81:83:46:a7:6f:f6:bc:9b:ad:e1:39:e0:05:09:c9:
         4f:c1:59:26:c2:2a:eb:5c:54:08:bc:99:18:bc:51:75:26:b1:
         66:e1:a9:d8:c0:d1:35:d2:be:06:0f:8a:f8:a7:62:d2:28:8c:
         83:6c:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:23:24 2025 by rpki-client