Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File:                     eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier:          hLLcCUxpGIf11OXhxKVZ1pFVsojuDqwQTOv3HS2crb8=
Subject key identifier:   F1:0A:FC:98:82:08:C7:BC:47:5B:9C:4A:55:EA:97:63:E1:A8:CC:28
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number:          0174
Signing time:             Sat 05 Apr 2025 03:15:06 +0000
Manifest this update:     Sat 05 Apr 2025 03:15:05 +0000
Manifest next update:     Sat 12 Apr 2025 03:15:05 +0000
Files and hashes:         1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: xbthX9NBqHGzOVKO/xUI3ibXcUcOubL2wIWmcfG2ZnQ=)
                          2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: 7WHyHjNWLPyCNdr9Jt2Biy5nLokqFlZbQ5cyMPArM34=)
                          3: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: XORYrB61hKsE1xP0fppMstPXZHwJjPTojAE7nqufrOw=)
                          4: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: MVaQUhneNZ1PZ257HA9kFSZNDSi2GRzywb/MEmXLJwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858
        Validity
            Not Before: Apr  5 03:15:05 2025 GMT
            Not After : Apr 12 03:15:05 2025 GMT
        Subject: CN=67f0a03a-77a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:d5:2f:19:15:02:a1:c2:98:30:a4:88:65:
                    85:76:5c:23:f7:c9:63:ac:22:7b:b8:ce:14:84:41:
                    6c:f6:8e:c6:65:a2:32:e3:ba:12:7f:7a:05:e2:a2:
                    88:1c:95:8c:c1:aa:5a:ac:a0:c8:8f:aa:e3:34:f6:
                    3a:60:22:7d:91:fd:31:1e:ae:84:27:e8:20:ed:88:
                    2f:47:d7:4f:2e:02:23:29:00:1c:8d:90:ef:c2:da:
                    c2:7c:49:b1:46:f1:a4:fe:d0:84:90:40:6c:3c:49:
                    97:db:da:db:b4:d5:67:de:78:b8:c8:57:f2:ca:ad:
                    27:83:39:ac:f4:e3:c9:73:2d:42:ca:a6:7b:4a:23:
                    8d:09:a1:00:95:52:08:d2:59:40:c4:e8:95:08:03:
                    79:9c:5f:56:4b:c3:99:f8:7d:ce:49:c5:b4:1d:db:
                    c1:72:69:75:df:f5:e3:3c:ac:f5:dd:a5:3b:a9:a5:
                    37:2c:e8:ab:8a:41:ec:2e:7c:43:6a:a9:e8:8f:ee:
                    af:50:fe:d2:fd:09:8c:63:33:23:ca:aa:70:c5:28:
                    16:e1:2a:c4:f6:41:20:fa:38:64:b4:10:8c:bc:11:
                    8d:b1:45:28:a2:bb:88:24:cf:d6:27:21:67:34:9a:
                    e3:39:84:1e:4d:2d:9b:59:93:f5:8d:0e:86:db:d1:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:FC:98:82:08:C7:BC:47:5B:9C:4A:55:EA:97:63:E1:A8:CC:28
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:64:62:3c:52:3a:00:3a:96:81:4f:2a:e0:df:1d:8a:6e:2b:
         79:b0:1a:2d:ba:d4:a3:e6:a3:cc:35:a9:39:7d:44:4b:0c:ae:
         4e:53:ce:ad:2e:48:c1:d2:cc:a0:d2:fd:81:e4:46:56:74:15:
         c4:49:c7:2a:3f:4e:ea:c8:6b:68:26:1d:ef:e7:a7:c8:99:e7:
         eb:7e:e1:bd:61:c0:2e:39:77:57:25:a7:07:ad:85:65:2b:58:
         e3:e5:54:14:e5:68:ad:c9:c9:7e:c4:79:cd:3d:ea:b8:45:e8:
         85:ee:42:fc:ab:c3:22:38:1f:5c:c0:fe:12:de:60:1b:01:a0:
         52:f0:6e:40:da:0b:ad:4b:52:85:9c:fd:72:78:93:50:13:24:
         48:e0:b9:50:a2:b7:3b:53:48:63:e6:d5:16:65:86:8e:bd:a3:
         97:bc:69:bd:15:e8:22:d2:b9:6b:89:ed:e9:6b:7a:26:ae:b7:
         d7:33:35:ac:fd:c8:d1:b3:70:ba:f3:dd:98:66:96:fd:5a:56:
         a5:02:e1:8e:f9:5a:7c:7f:4a:61:64:9b:92:0f:77:6a:c0:9a:
         86:73:5d:b5:19:a2:62:53:dd:e6:ac:75:1e:98:62:d8:c7:c2:
         33:df:28:21:e9:4a:92:e6:54:46:c3:9a:c8:1c:e1:ef:d1:bc:
         9e:03:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:09:29 2025 by rpki-client