Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File:                     EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier:          7in+I85haztfQLMTbmUqHiKB4zhRrtKSaHXYZvqAGog=
Subject key identifier:   74:BD:FD:A6:5C:78:72:93:64:AB:65:C3:64:48:79:5A:D7:54:B8:80
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number:          0149
Signing time:             Fri 25 Jul 2025 04:27:44 +0000
Manifest this update:     Fri 25 Jul 2025 04:27:43 +0000
Manifest next update:     Fri 01 Aug 2025 04:27:43 +0000
Files and hashes:         1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: 5BQaQPQVrTuIlDr05VtYnYk+6YeNYl/w1wdeodkFibI=)
                          2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=)
                          3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 04:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Jul 25 04:27:43 2025 GMT
            Not After : Aug  1 04:27:43 2025 GMT
        Subject: CN=688307c0-4929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:4a:21:89:81:7b:f5:25:05:97:bb:f7:2e:
                    93:00:ab:4c:50:60:6d:9f:c6:b9:66:aa:cb:a8:83:
                    a4:35:42:8d:46:51:46:2d:df:b2:64:df:76:e4:8c:
                    f3:6d:b6:61:f8:d8:48:20:4f:1e:01:97:7d:0a:be:
                    2a:18:c0:1b:b0:6a:ce:c7:f6:1b:70:09:cd:f0:e3:
                    6d:73:a0:2c:8c:c3:fa:d8:ff:52:61:20:5f:3d:60:
                    5d:a9:d1:fa:fe:dd:7b:4e:d4:88:bd:da:d9:8a:65:
                    f3:47:38:d0:91:9b:43:31:c4:61:ea:e4:87:54:f3:
                    66:7c:f8:bf:db:f9:d7:0d:ce:ff:3a:d1:9d:67:09:
                    51:95:68:a7:5e:48:70:65:dc:f1:2f:55:63:4f:d8:
                    d1:c8:b1:b9:8c:a6:29:ef:91:84:05:44:4b:3f:6b:
                    17:e4:58:4e:bf:dc:1a:e0:77:69:bf:d3:42:f0:fe:
                    cd:f8:99:e1:95:98:bd:c9:10:c3:e2:49:45:85:b5:
                    bb:37:d7:53:17:b2:04:a4:fb:ff:42:18:51:46:d3:
                    12:fd:80:1a:2b:ba:8e:11:66:69:bc:99:e6:f2:82:
                    4d:23:c3:0e:fc:77:34:89:63:7c:7a:9e:e9:80:81:
                    44:3e:f3:11:e2:9e:e6:a0:c3:05:c4:a0:a4:e3:14:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BD:FD:A6:5C:78:72:93:64:AB:65:C3:64:48:79:5A:D7:54:B8:80
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:4d:f6:e9:52:28:4e:7c:8b:a9:ab:f7:52:f7:b5:4d:e5:
         28:19:b4:13:88:81:5b:e3:ef:18:5e:2c:6e:95:a2:55:c4:ad:
         69:65:a8:cf:a3:9f:6a:a8:e2:ca:24:61:ac:db:b4:a0:15:c5:
         ca:09:7d:ad:c1:f6:40:59:c4:ea:4c:6f:8b:61:e9:16:dd:49:
         90:25:0a:c9:bf:bc:a4:0c:26:30:a3:77:c2:a0:b2:40:23:29:
         37:65:61:53:91:72:a4:3e:91:98:45:01:e9:ff:4b:19:c0:20:
         71:6c:ac:b8:d8:cf:e9:7d:c6:37:8c:b3:98:f5:4c:4d:d0:73:
         96:b6:3e:4a:db:90:4e:c7:fa:17:61:75:5e:65:b7:4c:36:2e:
         9c:7f:55:9b:9d:ab:fd:7f:45:20:36:e6:48:fc:d0:17:b2:62:
         39:12:62:ae:fe:bb:16:4b:b4:92:71:1f:61:df:4e:75:50:98:
         e9:5b:de:d0:a4:3f:a8:29:47:ed:ab:26:7b:b2:97:ef:cc:a9:
         7f:b9:2e:85:83:e6:47:ea:46:38:ab:66:7e:33:d7:ac:43:24:
         93:43:03:6f:69:05:1e:3c:ee:5e:d5:18:91:d4:96:53:89:61:
         2a:8c:01:cb:89:19:9a:3f:31:0e:df:85:14:69:4e:ee:06:10:
         fb:30:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:55:54 2025 by rpki-client