Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File:                     EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier:          trzpjcNIfrnzze4Xl6ChbqYdUom2wBO+vD4MPTeHqkQ=
Subject key identifier:   15:9E:DE:9D:5C:93:30:9C:C6:84:DB:82:55:8B:C7:A6:51:93:B0:51
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number:          0148
Signing time:             Wed 23 Jul 2025 04:28:37 +0000
Manifest this update:     Wed 23 Jul 2025 04:28:37 +0000
Manifest next update:     Wed 30 Jul 2025 04:28:37 +0000
Files and hashes:         1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: pflr2UNZVgVsTVV9BM2OXd+xZsr3IOxfSoNpW4YCFpY=)
                          2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=)
                          3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 04:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Jul 23 04:28:37 2025 GMT
            Not After : Jul 30 04:28:37 2025 GMT
        Subject: CN=688064f5-29d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:90:ba:5d:c5:a5:57:bc:ad:09:13:85:87:
                    aa:44:17:8b:6f:7f:41:b6:bf:a6:f3:75:d0:78:97:
                    2f:4c:05:a8:f3:34:bf:1c:b5:43:90:08:a9:c8:ec:
                    83:8a:48:6b:95:6d:ff:30:60:fd:e3:65:0a:3a:a7:
                    ef:7a:d4:00:00:bf:6d:e6:83:72:d3:bb:7f:8c:d9:
                    8f:23:c2:82:6a:76:23:a8:9f:ec:f7:75:ea:3b:2c:
                    1e:88:3a:ad:1a:f1:26:89:e1:e4:9b:6c:03:f2:37:
                    3f:b3:55:26:b7:1a:37:de:3c:d7:80:a5:07:b1:c0:
                    09:2d:71:76:1f:93:c8:4e:11:22:bf:36:16:2c:64:
                    ea:0c:15:76:c3:01:92:8e:21:54:9f:4e:44:e0:9e:
                    09:a5:2e:b7:16:15:19:09:9e:a3:8c:48:1e:9b:74:
                    7d:7c:ea:da:49:b2:d5:f1:12:de:34:b6:69:24:7b:
                    86:d9:e7:8b:25:3a:0d:0c:da:74:b7:af:ed:93:38:
                    77:c7:e6:5b:06:f2:87:fe:3a:de:dd:7f:cd:14:c1:
                    a8:f4:b2:0c:76:a1:89:a0:70:4a:14:b2:ff:bc:44:
                    fd:9f:36:d4:40:32:f9:34:d4:68:b1:e5:42:d7:76:
                    9a:27:47:12:8b:7e:77:19:5b:c8:eb:e7:97:f3:50:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:DE:9D:5C:93:30:9C:C6:84:DB:82:55:8B:C7:A6:51:93:B0:51
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:e7:74:dd:80:3a:81:9c:69:68:f3:58:f4:4e:f7:79:e6:
         12:9c:a6:d4:fa:ad:15:72:ab:4e:b8:a1:33:92:88:a1:16:85:
         c7:c9:7c:21:66:8d:dc:e1:c0:8c:fe:9e:93:66:7f:89:99:88:
         b9:6e:ca:aa:d5:c3:2b:db:4a:cf:6d:9c:a8:6d:7b:71:93:34:
         96:04:06:e8:e9:a2:ba:59:10:a6:34:66:b2:a9:df:b6:d9:f9:
         4c:f0:d5:02:f1:81:4e:6e:9d:2e:cd:0b:3c:6b:2a:26:ed:cf:
         b7:9e:fa:f1:17:8c:23:c9:6d:15:58:a1:5f:0c:65:e2:2f:48:
         03:f6:eb:7c:b3:7c:47:45:56:5b:79:02:95:57:6b:e4:94:ca:
         18:25:6c:07:43:70:19:a7:a2:e7:c0:d3:0e:00:b8:7a:f0:04:
         34:09:9e:8b:c6:31:24:85:e5:a8:ec:7d:c3:fa:e7:08:7c:e1:
         1c:2f:6b:81:db:5c:5f:fa:31:e0:d4:1f:98:cd:7e:58:f6:25:
         65:76:5b:d3:7c:07:82:82:a5:8b:d8:8c:a0:e2:fe:d3:d6:33:
         47:81:54:a2:c6:34:bd:b9:01:28:06:18:99:e9:a3:6e:82:ab:
         4e:57:2b:8b:96:21:ec:a9:84:1e:49:70:a6:13:f0:eb:a0:0e:
         0c:fb:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:00:31 2025 by rpki-client