Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File:                     eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier:          udH5kdpuLDTgppPXgGhYbVq4e5EYfM8lat4lojF79eU=
Subject key identifier:   34:EB:C2:0C:30:47:57:A6:B5:16:67:D4:71:7A:44:F0:8C:92:FF:BE
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number:          01FD
Signing time:             Fri 25 Jul 2025 02:34:35 +0000
Manifest this update:     Fri 25 Jul 2025 02:34:34 +0000
Manifest next update:     Fri 01 Aug 2025 02:34:34 +0000
Files and hashes:         1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: vBb1DWooYXqRTo77DCAvKt1FxQDLGWMfofsjoyXLttM=)
                          2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: lL1Uo6lKBPims7sIcK6Rx8lWBhL0RLQ4pwqUL45ZkTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 02:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Jul 25 02:34:34 2025 GMT
            Not After : Aug  1 02:34:34 2025 GMT
        Subject: CN=6882ed3b-5fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:e5:04:24:7e:e9:a6:1d:e6:9a:86:cc:67:
                    f8:e1:28:91:68:07:75:62:b1:92:78:1c:82:59:89:
                    d0:a7:19:be:b8:f3:47:d4:4e:5f:d6:cd:3b:fd:23:
                    b8:ff:2d:2a:3a:f2:41:f8:16:62:73:82:38:d5:a2:
                    41:cb:50:1d:96:f7:b1:a4:1c:38:8b:15:60:b7:7e:
                    62:73:ca:d8:f9:50:d0:9a:f4:97:7a:a9:6f:13:8d:
                    dc:10:84:9d:f4:fa:3b:67:72:b6:2f:06:11:c2:3d:
                    bc:41:71:2d:4e:ed:80:5f:09:94:9f:67:89:96:7a:
                    52:00:e1:69:13:23:95:70:61:33:72:2d:bc:8b:d5:
                    d0:e1:f2:8e:07:65:87:90:ba:43:51:f8:04:71:58:
                    68:a6:5f:c9:81:45:78:3e:8d:d7:17:f5:6b:a9:3d:
                    13:9d:6e:87:02:fb:1a:96:72:6e:9b:17:18:bf:58:
                    e1:7b:b8:74:ac:c0:55:be:77:d8:c8:2f:a9:94:9c:
                    6a:c3:6b:e3:29:da:e2:96:cc:39:52:c9:e5:d4:21:
                    61:c5:e5:32:60:7d:7c:ac:17:c3:e8:23:06:8e:a5:
                    ce:43:4d:e8:b4:81:c7:9a:26:7d:ac:a1:02:aa:d7:
                    d1:06:30:ab:ea:dc:d4:41:51:91:f5:78:ea:f4:31:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:C2:0C:30:47:57:A6:B5:16:67:D4:71:7A:44:F0:8C:92:FF:BE
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:e5:03:91:00:5e:e2:08:b4:0b:c6:74:a0:5c:b0:94:40:
         e7:01:61:70:95:e7:d5:db:2f:1e:e9:b5:9d:97:20:2a:2c:cf:
         74:87:46:d2:34:39:bb:12:f0:d2:78:38:d7:1b:a6:1b:dd:4a:
         32:ea:75:32:7b:d5:27:a3:ee:22:e1:dc:50:7a:24:3f:3c:42:
         7b:3c:d9:bc:85:2b:2a:d1:25:e8:e0:1b:84:77:31:86:a8:6a:
         d8:21:2f:95:9c:f8:30:b8:82:49:9a:f6:73:10:32:5a:b6:d2:
         f3:ca:6c:59:4c:74:39:2d:d0:d3:51:6a:3f:af:82:70:12:fb:
         df:a3:bd:f4:59:e0:8f:0f:85:a8:e8:fd:0a:37:be:14:6e:de:
         2b:44:63:b0:3c:a5:a8:d5:27:44:f9:26:0e:9f:30:96:89:2a:
         46:d9:e0:02:74:71:eb:13:ed:a7:06:c5:28:0f:31:a7:f7:84:
         7e:0c:3a:6a:a0:d7:91:0a:3a:f4:94:5b:46:a0:e2:4d:6f:7f:
         e8:96:06:43:e9:72:45:2c:b3:77:70:e2:31:ed:64:d8:8a:a1:
         2e:9c:38:d7:e6:7b:c8:73:95:b7:6a:23:9b:20:3f:52:1f:c1:
         4c:4d:bd:96:8c:b1:94:ab:bf:36:82:77:3b:10:f1:b5:50:ec:
         d1:8a:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:58:06 2025 by rpki-client