Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File:                     rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier:          tRgJJdx/TPMj1MsCaA6a63mLvEkJfON+lE4qGmQDYkM=
Subject key identifier:   28:78:31:D4:7A:52:DD:CA:2D:39:63:D5:67:51:27:1D:22:F7:E5:3A
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number:          01EB
Signing time:             Sat 31 May 2025 02:24:44 +0000
Manifest this update:     Sat 31 May 2025 02:24:44 +0000
Manifest next update:     Sat 07 Jun 2025 02:24:44 +0000
Files and hashes:         1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: j0rQ/vLCqBIZvIhjeDC5AMmGD3d4UMmGeLjXQ1yVSn8=)
                          2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=)
                          3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=)
                          4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: May 31 02:24:44 2025 GMT
            Not After : Jun  7 02:24:44 2025 GMT
        Subject: CN=683a686c-f107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:b2:93:d0:85:1f:f1:43:c7:9e:1b:4a:bd:
                    ef:1a:e0:26:9b:10:5c:28:c1:f2:9b:42:c1:05:ab:
                    fe:31:20:9c:51:f8:8d:c0:98:87:bf:97:e6:f5:87:
                    89:0a:7a:c7:c3:b9:ff:df:0f:04:08:25:6f:eb:82:
                    0f:74:51:01:ee:1c:fb:4f:64:29:9d:70:57:0d:e8:
                    79:13:4f:9c:a8:8b:3b:8c:f3:45:d9:fc:81:4b:af:
                    da:62:e2:b2:08:aa:a1:b0:e3:29:0e:b4:97:15:a3:
                    74:a3:d2:9e:17:29:1b:36:f1:1c:d7:5b:58:0d:75:
                    73:ea:e8:a4:35:7d:31:46:93:6f:6d:a8:41:cd:cc:
                    7a:2d:62:05:85:57:88:8c:f8:be:8c:ef:12:9e:fd:
                    b6:36:01:d2:7e:f5:1d:8e:67:8c:db:f5:73:98:63:
                    73:e3:13:c1:1b:01:9d:56:66:83:39:71:a0:df:d2:
                    60:d3:84:4c:26:69:07:ca:4b:b8:5a:47:d4:bf:58:
                    8c:9a:62:93:8e:a5:c4:1f:af:87:85:7c:9e:52:03:
                    ba:54:ba:a8:1a:be:f9:0a:53:dc:9c:8b:f4:15:23:
                    dd:74:e5:0b:74:79:fc:5e:b4:4f:fd:e1:b4:72:ad:
                    2e:63:e3:c3:a4:a8:89:ad:f2:cf:93:d2:3e:a8:ac:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:31:D4:7A:52:DD:CA:2D:39:63:D5:67:51:27:1D:22:F7:E5:3A
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3e:3b:97:b5:2f:27:7e:93:08:f8:77:a4:aa:d2:48:21:56:
         49:90:1a:4f:9b:ef:7c:82:b3:17:54:5d:02:67:ec:d2:a4:9e:
         e8:39:27:18:e0:8b:e3:28:1e:b2:09:e4:de:02:b9:ee:a7:77:
         80:41:93:96:64:8a:61:a1:fd:cd:9d:a9:b8:20:0a:b2:98:77:
         a9:a4:2b:fb:23:6e:df:c5:db:14:e3:53:2a:12:85:6c:ca:ee:
         2d:7c:54:32:19:ec:72:ac:5a:26:74:a1:90:26:f7:c0:5f:ed:
         a2:97:20:35:64:d2:97:83:30:c3:26:47:9d:3a:43:be:68:f3:
         c8:b1:cf:05:36:70:b2:f5:2d:71:00:7f:c0:95:f0:fb:66:5d:
         41:3a:e7:8e:59:42:b9:99:5f:f5:d0:f6:36:bb:3f:c4:6f:ef:
         ba:a3:65:0b:29:a0:94:4d:99:02:60:60:33:a8:5d:ca:96:17:
         2f:fe:1f:ee:0e:ba:a8:04:63:f9:c0:0b:7a:46:4e:73:c6:f0:
         a4:85:6a:99:bb:46:2f:c7:33:e9:58:25:ff:b8:a4:10:f7:85:
         88:47:7f:7a:fc:9e:7f:5e:33:9a:b0:a5:27:72:3a:e0:5c:42:
         62:85:93:7f:e1:9e:0d:37:0c:8c:14:6d:13:ff:70:e0:3b:6a:
         a9:5a:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:26:17 2025 by rpki-client