Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          iLtgH9ILMP0GXAYmbToN0Q00v+Pwhy75IC3g4aOAti8=
Subject key identifier:   08:61:E4:BD:55:03:56:38:09:4D:60:3F:64:B3:C8:99:79:2A:02:5D
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          0196
Signing time:             Sat 19 Jul 2025 03:41:23 +0000
Manifest this update:     Sat 19 Jul 2025 03:41:23 +0000
Manifest next update:     Sat 26 Jul 2025 03:41:23 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: 81gLFqeH02TW/7+BwxlXZf7Wx2GYCdHn/yLw0oujRD0=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Jul 19 03:41:23 2025 GMT
            Not After : Jul 26 03:41:23 2025 GMT
        Subject: CN=687b13e3-fe0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:4d:43:f8:0c:28:50:78:a5:37:b0:86:ff:
                    79:85:d6:cc:48:ae:9d:d8:1a:92:c9:a3:37:9d:91:
                    e3:84:cd:dc:3e:94:f8:3c:a0:9e:f5:4c:75:b5:fe:
                    0f:dc:4a:4a:3e:e8:67:f9:6a:68:9e:0a:06:04:cf:
                    aa:db:5d:95:81:1d:25:bd:8a:7b:12:d4:9d:71:f9:
                    93:d0:e1:1e:cf:38:e5:9f:40:b5:9d:03:fa:2a:69:
                    b8:28:10:96:54:12:de:12:5b:c7:29:b6:31:df:72:
                    4d:61:af:4e:18:da:87:04:f9:c8:ef:42:91:66:5e:
                    60:e2:f0:51:5e:fb:db:64:dd:45:e0:1b:cc:db:81:
                    5a:ed:45:eb:27:65:62:e4:56:29:84:ec:a8:ee:5e:
                    a1:3b:5c:f3:22:b6:e7:bb:5a:85:d5:f0:92:4f:0c:
                    bb:26:78:8e:9c:1d:31:50:7b:27:31:d6:5d:a9:68:
                    61:21:43:2c:8e:09:f3:f4:3e:6f:ad:a9:b3:99:de:
                    c0:30:48:ed:b0:42:a9:e0:99:e4:fa:8c:00:db:b1:
                    aa:01:01:ad:96:02:23:f5:46:62:a4:01:c0:ae:1e:
                    14:ce:c9:06:44:fb:bd:45:11:78:c8:66:0d:a2:4a:
                    64:24:f0:42:cc:9b:f9:68:49:48:83:dc:44:f6:bf:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:E4:BD:55:03:56:38:09:4D:60:3F:64:B3:C8:99:79:2A:02:5D
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:10:dd:04:06:4d:ee:1c:2a:64:60:66:a5:f6:38:8f:a4:84:
         7a:db:b1:85:8b:f9:4c:0a:cc:b1:aa:3b:1f:f1:9b:d1:4b:7e:
         4f:c0:a0:f2:81:b4:08:82:67:f9:da:a1:3a:8c:7b:80:47:0e:
         ae:7f:07:a8:46:04:fb:7c:65:31:18:f6:62:5e:3b:6d:95:c9:
         39:2e:3b:99:23:2b:f4:48:53:79:7c:7d:7b:03:a2:15:e9:ea:
         1b:ef:3c:80:07:33:56:38:16:70:46:40:c7:ce:3c:4c:8c:02:
         06:c4:c3:29:82:68:d9:29:42:8e:92:29:cd:08:02:16:b1:9f:
         ab:88:89:b5:d4:b5:71:49:7a:74:a1:0a:0d:a8:1d:42:5e:1a:
         f6:f4:29:66:24:f1:d3:fe:31:e4:39:c9:0b:1c:8d:50:e2:5b:
         3a:53:34:e9:3d:89:14:7a:9b:c1:ca:51:44:d4:1e:b4:3b:94:
         1e:27:c7:3a:05:2d:21:5b:d6:b9:9c:f4:5d:99:03:59:a2:1b:
         d2:ad:60:0b:84:b7:87:b5:45:b2:65:e1:91:0f:55:64:10:8d:
         bb:21:5a:8e:f2:42:c9:77:5d:13:1b:1a:28:3b:6e:c7:40:a4:
         de:3f:c8:9e:bd:6b:09:43:53:08:3f:97:cf:1b:3f:57:82:b9:
         2f:94:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:06:35 2025 by rpki-client