Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File:                     EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier:          ByS88rgRKOXtvLIbEPh/jfw72inh+DYLIaIf1GFpWqg=
Subject key identifier:   62:49:C6:82:FE:45:F0:A2:68:26:5D:99:36:38:B6:D7:B4:C8:6B:BD
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number:          64
Signing time:             Fri 11 Apr 2025 06:14:14 +0000
Manifest this update:     Fri 11 Apr 2025 06:14:13 +0000
Manifest next update:     Fri 18 Apr 2025 06:14:13 +0000
Files and hashes:         1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: mrGu+4bDEuMxuw2CrAg3z5cHcExBtD9/VH3WZXKfCKw=)
                          2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: EZr43Zd/nvWqNQBFSUi7UV8hDLrvC+/bbJUY/Mjkjnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 06:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Apr 11 06:14:13 2025 GMT
            Not After : Apr 18 06:14:13 2025 GMT
        Subject: CN=67f8b336-e2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:0a:19:69:da:49:04:74:e5:f0:3b:5b:39:
                    a9:6a:8b:84:ef:7e:81:b7:6a:85:d1:90:4f:83:cb:
                    12:15:cd:3f:83:a1:64:bb:cc:2a:a3:41:66:7e:c1:
                    d0:ef:da:7e:11:b6:1b:fb:ca:69:6c:e6:f4:63:3a:
                    b8:46:de:24:9f:e2:c0:d4:8f:8f:2c:ca:e4:4e:63:
                    3f:17:91:82:21:08:c8:a4:cd:80:a6:85:dc:0b:9f:
                    97:a8:8f:f0:5b:db:6d:e2:4f:0a:50:70:e0:4b:bc:
                    90:59:13:1b:04:c9:b5:a2:bf:5c:ed:ca:fa:a5:54:
                    3e:24:bb:2e:ee:fc:f3:7b:51:a3:d1:48:f3:42:dc:
                    a9:84:ec:11:cd:09:c7:95:94:f4:b1:b8:c0:31:77:
                    31:cb:37:14:3f:24:29:e6:ef:a7:0f:2d:b7:2b:81:
                    73:1c:28:84:4c:16:d6:00:1b:c7:88:3e:39:a9:9a:
                    61:2b:84:f5:40:ae:32:f0:d2:a5:29:56:13:78:b5:
                    52:6c:4f:ed:05:4b:4f:a2:d0:6a:0c:11:04:5f:0b:
                    87:4b:4a:43:0b:c6:d6:1d:ef:68:8f:92:63:4f:0c:
                    b4:d2:d1:9e:36:10:22:48:57:b0:26:05:81:ec:ee:
                    51:1b:a1:67:d3:0d:29:70:24:5d:41:fb:c1:5d:2f:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:49:C6:82:FE:45:F0:A2:68:26:5D:99:36:38:B6:D7:B4:C8:6B:BD
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:02:5a:2b:98:59:c2:76:56:f7:35:e9:87:ec:30:06:09:
         45:a5:00:7b:ec:56:6c:89:33:33:9f:b8:67:5a:92:db:60:24:
         e5:11:57:62:68:62:a8:22:1c:02:a7:e5:ab:88:75:8a:13:70:
         74:80:10:a1:44:de:33:8f:71:0f:d8:b9:95:e8:a2:a3:62:ef:
         bb:56:ad:04:80:19:4b:26:fc:5b:ab:6e:c3:79:36:f3:86:1c:
         45:f4:a1:a2:fd:0c:b6:77:ea:e4:3f:ac:19:26:7f:0e:f1:0c:
         1d:e0:ed:cf:74:99:d0:c1:a1:83:0e:c3:63:2b:2a:73:b3:31:
         da:19:a5:d9:12:79:dc:62:dc:5f:a1:f7:bb:f5:00:1b:62:61:
         f0:c5:54:5d:5f:91:63:d7:00:40:77:ce:5e:2b:03:dc:6f:5c:
         d2:c5:c8:cd:2e:4a:2b:74:d2:a5:d3:8c:38:f0:d2:7d:cc:6f:
         1d:8d:11:64:40:69:2a:d9:2d:46:6e:99:09:b4:b7:de:fa:75:
         2a:bd:0a:b9:1e:6a:bd:34:20:00:fa:68:22:d6:8b:c4:bf:c1:
         65:58:84:eb:7c:a7:12:a5:5d:24:74:38:b6:fb:f4:64:f7:0c:
         01:a3:23:7d:35:d8:be:45:d0:69:15:a3:87:b3:e9:d8:00:00:
         e9:e8:f1:7e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Qjg0NTExMC8GA1UEBRMoMTJFNjJCNUI0RDMzMDFBMDhENjdBN0I4QjNDNjVENDQx
NEYyRDkzRjAeFw0yNTA0MTEwNjE0MTNaFw0yNTA0MTgwNjE0MTNaMBgxFjAUBgNV
BAMTDTY3ZjhiMzM2LWUyZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrXwoZadpJBHTl8DtbOalqi4TvfoG3aoXRkE+DyxIVzT+DoWS7zCqjQWZ+wdDv
2n4Rthv7ymls5vRjOrhG3iSf4sDUj48syuROYz8XkYIhCMikzYCmhdwLn5eoj/Bb
223iTwpQcOBLvJBZExsEybWiv1ztyvqlVD4kuy7u/PN7UaPRSPNC3KmE7BHNCceV
lPSxuMAxdzHLNxQ/JCnm76cPLbcrgXMcKIRMFtYAG8eIPjmpmmErhPVArjLw0qUp
VhN4tVJsT+0FS0+i0GoMEQRfC4dLSkMLxtYd72iPkmNPDLTS0Z42ECJIV7AmBYHs
7lEboWfTDSlwJF1B+8FdLwI5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYknGgv5F
8KJoJl2ZNji217TIa70wHwYDVR0jBBgwFoAUEuYrW00zAaCNZ6e4s8ZdRBTy2T8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODQ1L0Q2M0VEQzUyODZD
NjExRUY4MzYxMjQzOEM0RjlBRTAyL0V1WXJXMDB6QWFDTlo2ZTRzOFpkUkJUeTJU
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRXVZclcwMHpBYUNOWjZlNHM4WmRSQlR5MlQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
ODQ1L0Q2M0VEQzUyODZDNjExRUY4MzYxMjQzOEM0RjlBRTAyL0V1WXJXMDB6QWFD
Tlo2ZTRzOFpkUkJUeTJUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH45AlormFnCdlb3NemH7DAGCUWlAHvsVmyJMzOfuGdakttgJOURV2Jo
YqgiHAKn5auIdYoTcHSAEKFE3jOPcQ/YuZXooqNi77tWrQSAGUsm/FurbsN5NvOG
HEX0oaL9DLZ36uQ/rBkmfw7xDB3g7c90mdDBoYMOw2MrKnOzMdoZpdkSedxi3F+h
97v1ABtiYfDFVF1fkWPXAEB3zl4rA9xvXNLFyM0uSit00qXTjDjw0n3Mbx2NEWRA
aSrZLUZumQm0t976dSq9Crkear00IAD6aCLWi8S/wWVYhOt8pxKlXSR0OLb79GT3
DAGjI3012L5F0GkVo4ez6dgAAOno8X4=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:43:27 2025 by rpki-client