Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          lG7Jv+FLB3j5/iNHiOym0pwmtWrr4LxFkEH0PhhP8cM=
Subject key identifier:   EB:F0:73:F7:35:F9:89:4F:3E:34:EA:31:C9:EB:AA:E6:0A:C3:DF:44
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          0332
Signing time:             Mon 21 Jul 2025 01:23:12 +0000
Manifest this update:     Mon 21 Jul 2025 01:23:12 +0000
Manifest next update:     Mon 28 Jul 2025 01:23:12 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: TljqZLP8eEb3nVwl1+4Mz9YkaLzUFQtw7/x585t3q6U=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Jul 21 01:23:12 2025 GMT
            Not After : Jul 28 01:23:12 2025 GMT
        Subject: CN=687d9680-7e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:88:84:1a:3d:13:8e:e2:fb:af:22:11:49:
                    84:1d:90:9b:fa:2b:36:db:16:dd:3a:e1:7c:7e:13:
                    f9:eb:c0:2a:bd:2a:d2:a4:4b:8c:67:f2:8a:4c:df:
                    4d:db:1b:26:a9:0f:c6:71:7d:7b:71:36:1c:58:d1:
                    9b:1d:c5:e2:7a:a3:aa:eb:81:07:66:c7:a7:d9:a8:
                    ed:c7:c1:d4:64:78:c3:74:79:73:dc:b1:da:f3:96:
                    e1:9e:72:9c:16:93:a5:38:ff:18:a0:5c:59:ed:18:
                    d4:f2:49:c7:56:a3:6b:98:04:99:18:be:73:99:ec:
                    d4:f5:d2:63:9a:06:e1:9a:e7:39:d4:a2:94:0c:a7:
                    8d:48:14:cc:d1:9c:d1:d6:a3:cc:4c:f5:82:f3:77:
                    ad:fd:65:ef:ae:5d:72:64:d3:18:93:a4:c2:aa:d6:
                    81:23:f9:11:ea:1f:a6:c1:91:cc:10:45:c8:04:7c:
                    34:3e:d1:1e:f0:c1:25:7f:39:4b:74:ac:40:da:ec:
                    58:64:50:95:d4:41:94:81:ed:88:ec:fc:1e:71:d0:
                    67:05:21:11:59:b6:29:15:90:15:89:55:ff:51:46:
                    80:08:52:4e:eb:9e:3c:06:e9:97:88:fd:a9:ba:27:
                    c0:51:b8:2a:6e:7f:22:56:da:84:3b:f7:28:2d:2e:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:73:F7:35:F9:89:4F:3E:34:EA:31:C9:EB:AA:E6:0A:C3:DF:44
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:47:aa:a6:a5:4d:e7:b6:ef:ca:c6:34:6d:26:7a:ad:ea:25:
         5e:2b:ae:c5:c9:0a:5f:c4:dc:b0:6d:0b:48:be:bd:e4:32:76:
         b0:07:20:5c:95:4d:91:97:5f:6c:41:38:95:e8:d8:ce:34:4d:
         8c:ee:fd:aa:fa:ea:a7:2b:3d:5e:af:07:34:29:ae:77:9e:62:
         cb:95:17:dd:2f:01:b1:7a:f7:8d:53:af:60:00:1e:28:cb:71:
         cc:0a:58:98:83:16:70:a9:ea:6e:61:fc:64:1d:c8:73:35:d9:
         7d:83:9e:d4:d4:50:b0:f8:0a:28:f2:d7:a4:01:ea:f8:fc:d3:
         95:52:3d:dc:80:92:77:c8:b9:22:8f:02:22:b9:7d:cf:12:48:
         da:74:c5:1f:38:89:e7:cf:b0:9d:2e:6c:c6:55:3a:3f:5c:90:
         19:9d:2a:9a:a6:ea:9e:e6:1d:75:df:94:48:bf:b2:8f:56:c3:
         cf:3c:84:31:74:87:2d:51:d7:8a:df:77:09:5c:fb:5b:ce:4d:
         c0:86:da:ed:c3:f9:d5:f6:31:11:9d:64:b4:b2:f1:dd:de:4a:
         e6:f2:ea:79:23:ee:8b:57:d3:e6:85:13:a8:d7:ed:0a:b4:ec:
         f7:3f:b4:cc:d8:05:da:20:13:c6:90:fe:16:44:de:3c:4d:0b:
         68:17:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:45:54 2025 by rpki-client