Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
File:                     EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft (raw, json)
Hash identifier:          tFU02YOFXzG+0/ZDSMDs1I9nvM69HomeSy1yl8d5ubU=
Subject key identifier:   0E:98:88:06:3D:71:B3:8C:C0:E3:64:5D:E5:0E:BD:E7:90:AD:14:AD
Authority key identifier: 11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C
Certificate issuer:       /CN=A913D208/serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
Certificate serial:       044B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
Manifest number:          0445
Signing time:             Sat 29 Mar 2025 00:30:43 +0000
Manifest this update:     Sat 29 Mar 2025 00:30:43 +0000
Manifest next update:     Sat 05 Apr 2025 00:30:43 +0000
Files and hashes:         1: EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl (hash: BdP9KANyK80FMZTjmaeDU0thNOzxL5OEa4AtCF+amGQ=)
                          2: 9C0D9C2C4DF211ECB01A1042C4F9AE02.roa (hash: GHnF6i7M1wJiMCIU6p9YZwqjjEAkSVWafMM0uIW4wUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl
                          rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 00:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D208
        Validity
            Not Before: Mar 29 00:30:43 2025 GMT
            Not After : Apr  5 00:30:43 2025 GMT
        Subject: CN=67e73f33-64ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:7b:10:85:a0:59:cd:10:05:aa:ec:f5:e2:
                    2e:f5:72:c1:e7:a3:3e:22:5d:ce:8b:ec:17:50:2c:
                    84:f4:db:40:72:f1:3a:0b:5d:d1:a4:40:67:15:d3:
                    83:14:7d:9b:22:d7:ab:10:ad:86:75:df:26:f6:8c:
                    53:78:ce:43:73:95:b1:4a:07:b3:83:fd:5d:7e:37:
                    b8:af:47:94:17:6d:48:5b:ea:fc:57:36:f9:1e:24:
                    4c:4f:f6:96:da:ee:00:77:f4:eb:fb:f2:d1:9d:73:
                    7d:b1:36:22:20:bf:5d:16:85:86:e7:be:df:c3:54:
                    7a:0c:12:6f:57:13:55:d2:a8:fc:f5:01:36:de:d6:
                    b0:65:ef:e3:92:98:11:c5:b5:22:72:aa:80:61:25:
                    fb:34:3e:36:5b:ac:ce:93:c0:bd:5f:32:3d:d1:ba:
                    fd:05:1e:b0:47:62:04:c7:35:56:b7:62:d6:0e:34:
                    39:02:23:88:a8:1d:43:b1:1c:5c:7c:eb:d5:08:93:
                    b9:36:13:95:2b:35:88:81:08:28:58:93:36:6c:72:
                    b7:9d:12:92:34:2f:3f:ea:0d:a4:6c:8b:7c:ce:29:
                    99:b3:ae:3f:bc:73:b9:95:98:89:1a:31:47:fd:78:
                    77:d4:df:da:35:4e:3e:9a:21:96:f3:73:88:e5:c6:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:98:88:06:3D:71:B3:8C:C0:E3:64:5D:E5:0E:BD:E7:90:AD:14:AD
            X509v3 Authority Key Identifier:
                keyid:11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:12:f6:c2:e5:69:f3:24:46:53:b3:d2:bb:46:89:51:33:
         06:b6:1c:4f:1c:b4:6a:89:3c:f0:22:e0:f5:15:53:0a:2f:e6:
         6e:6c:d1:49:8c:b5:79:9f:18:90:44:2c:81:7b:37:49:f2:ba:
         c1:ce:81:ac:2a:66:a2:89:b0:2d:e4:a7:62:f9:27:f1:c4:12:
         3f:83:ea:08:75:6f:3c:05:7b:b4:20:d2:fc:cb:8d:5c:7d:69:
         3e:5e:12:6b:21:97:02:0a:4e:a9:26:b0:41:ff:93:b9:45:42:
         fa:27:90:d2:4d:d7:00:6a:2c:c3:b1:be:59:f2:c5:75:11:ab:
         ea:ef:4e:7d:fd:7d:8c:97:d6:28:2e:1b:e3:a5:21:06:1b:c1:
         13:da:28:97:1f:3b:e8:f3:05:36:35:f1:59:40:fc:1c:6b:d6:
         8a:10:28:68:5d:74:a9:e6:e8:5a:25:b6:6a:06:ce:74:24:9f:
         0b:17:c7:76:aa:5a:67:ed:52:57:ae:8c:64:a4:ba:25:e2:20:
         16:de:e1:70:7e:8d:af:f6:c3:d5:6f:c8:78:78:55:df:55:c8:
         bd:41:44:21:78:95:ef:fd:45:60:4e:f1:a9:4a:73:58:1c:d7:
         f6:b9:18:52:e0:fd:2a:c2:67:a5:4a:be:6d:4e:ad:e8:b3:b2:
         03:e5:6f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:08 2025 by rpki-client