Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          zinitA9rfrYQgozLQPMqHGON5DYM0kWe4nDBFbiweiw=
Subject key identifier:   C1:E0:CC:0F:6C:F0:19:79:02:26:98:66:88:B9:D2:63:02:D3:75:B6
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          01A4
Signing time:             Sun 15 Jun 2025 02:33:41 +0000
Manifest this update:     Sun 15 Jun 2025 02:33:40 +0000
Manifest next update:     Sun 22 Jun 2025 02:33:40 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: gFrm3B2Pr9yhyXJIpkekqM1XzWMklePcf90qHViHM5c=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: Jun 15 02:33:40 2025 GMT
            Not After : Jun 22 02:33:40 2025 GMT
        Subject: CN=684e3105-0057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:b6:cc:7c:a1:a1:1e:ab:3b:0f:77:ae:e7:
                    25:eb:df:5b:5f:40:da:56:9f:c0:ec:d2:8e:16:93:
                    b4:fc:48:93:53:4e:1e:57:0c:fe:d6:88:86:7d:ef:
                    a6:ae:2e:cb:a9:73:4d:ed:10:6c:5e:9b:7d:c1:b8:
                    51:e0:c7:b8:90:c5:97:99:63:bc:f1:2d:26:e9:17:
                    dd:d9:fd:90:49:e3:ca:82:e6:29:25:53:de:bd:89:
                    66:94:4f:f6:0d:29:8a:0d:1f:4a:9e:0c:d7:99:83:
                    65:ba:49:7a:b8:31:df:1d:44:13:cf:a1:92:e6:54:
                    eb:df:09:66:4b:62:a3:e7:36:e9:38:24:0d:25:c9:
                    88:eb:9d:da:b3:6d:3a:80:03:99:1f:0c:72:cf:bb:
                    20:67:e7:ba:c2:6d:88:a9:4f:42:44:fb:d4:67:7a:
                    ee:3f:23:84:e6:ee:24:fc:2e:3c:5d:5a:2b:58:c4:
                    4d:42:04:99:bf:c5:90:4d:dc:3b:34:f1:8a:fb:70:
                    e5:0d:81:3e:b9:1a:6b:8b:8c:62:d2:b5:90:ae:9d:
                    07:0e:9e:94:42:a6:02:ec:d0:67:40:fc:05:1c:62:
                    66:88:42:f0:c1:47:f9:ae:f1:cf:9c:67:9e:c9:53:
                    56:50:26:bd:9e:7d:18:a3:a0:93:01:ca:68:3a:e1:
                    aa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:CC:0F:6C:F0:19:79:02:26:98:66:88:B9:D2:63:02:D3:75:B6
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:b0:52:f8:74:e4:a0:75:a2:80:6e:33:67:de:08:a2:eb:
         19:14:e8:17:11:15:2c:8a:bb:73:3a:29:42:b4:67:7b:18:f8:
         26:7e:41:d0:b3:5d:97:00:74:a5:49:e7:65:e0:11:4f:e9:91:
         2c:a8:a7:5d:89:f9:2f:cf:32:24:78:60:7a:d1:2c:a7:dc:93:
         a6:35:b6:c2:33:be:07:a5:71:71:05:42:36:3b:c0:bb:bd:7f:
         6a:7d:89:33:4e:d2:ea:1b:bd:32:2b:f1:9e:6f:6a:fb:dc:0a:
         dc:ef:f9:fa:7c:6c:6b:b4:f6:fa:7b:3a:48:3e:f6:a5:e4:19:
         6b:95:d8:bf:23:4a:da:de:ca:48:f2:04:f5:5d:d0:d7:d4:5c:
         cb:74:01:03:cd:17:be:3f:77:21:86:27:a9:ae:6c:17:15:5b:
         c1:64:9d:81:e3:f4:76:ef:04:3f:ba:df:b9:dd:05:52:1d:fb:
         e0:82:2b:ba:ce:18:0c:d5:8a:66:64:4e:5c:43:a2:fb:dc:54:
         48:ad:91:68:43:b1:4f:9e:13:f6:cb:ee:80:29:4e:f1:22:50:
         a6:02:93:1a:2c:11:e3:0a:33:d7:b2:91:1a:d2:ef:28:76:ec:
         86:58:5c:8d:54:f1:6d:58:7f:08:8b:3d:4d:3f:af:4e:71:0a:
         5d:c1:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:59:22 2025 by rpki-client