Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          EY41dEalZQeizCDQh9eBJ6jkfWzl3bM/04lG+Rf4Zdg=
Subject key identifier:   20:FC:1E:91:55:8E:D3:A3:A6:6D:37:D8:88:AC:EE:B8:24:ED:DA:04
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1CFC
Signing time:             Fri 30 May 2025 16:20:40 +0000
Manifest this update:     Fri 30 May 2025 16:20:39 +0000
Manifest next update:     Fri 06 Jun 2025 16:20:39 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: egFimfDEtbepwyMIlHxj2eieT7699cTVHR9t6cBF2dI=)
                          2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
                          4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 16:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7429 (0x1d05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: May 30 16:20:39 2025 GMT
            Not After : Jun  6 16:20:39 2025 GMT
        Subject: CN=6839dad8-e8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:f5:38:70:d9:ef:6f:db:af:ff:f1:45:d2:
                    64:35:bb:31:58:73:88:2d:b3:d0:db:4a:84:1d:6e:
                    4d:90:e8:56:88:7e:06:46:80:14:33:72:6a:20:09:
                    90:13:97:35:af:11:0a:ff:77:b8:e4:65:2d:fd:46:
                    24:2e:f4:9b:43:c5:dc:a6:22:da:3e:43:da:c1:5c:
                    6e:7c:88:35:a6:26:f7:e4:c8:18:e3:2c:fc:bb:d6:
                    c1:eb:f2:d2:46:64:e2:a7:14:be:96:ee:7c:06:b2:
                    76:8c:7f:b9:2c:9a:94:21:19:39:9f:40:f3:66:a7:
                    82:f1:38:f1:4f:05:79:a9:8d:a8:78:ce:af:a4:b5:
                    9d:58:64:fb:29:66:1c:21:88:78:19:06:0a:41:f9:
                    b7:8d:1f:19:c8:64:72:6d:8e:6a:97:7f:dd:bd:be:
                    f2:97:67:87:43:2e:8b:07:48:0d:96:68:14:e9:21:
                    5b:ce:9c:44:b9:3b:d8:52:ec:32:d6:1c:13:c8:6d:
                    6c:ea:11:44:ef:77:f9:b1:46:25:05:b0:ed:b5:04:
                    8c:c2:3b:19:47:7e:23:e3:47:11:63:03:04:cf:e7:
                    49:3c:ee:95:48:5d:39:84:21:56:b5:93:ab:44:50:
                    79:11:1b:c8:33:50:ad:bd:fd:e0:2a:94:06:7f:85:
                    92:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:1E:91:55:8E:D3:A3:A6:6D:37:D8:88:AC:EE:B8:24:ED:DA:04
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:fd:be:f9:1e:c7:9f:89:f3:cb:31:ca:f2:ba:6c:7e:cb:
         a6:b5:8c:11:f8:58:75:61:57:7d:32:ca:9b:5c:33:ac:e0:68:
         58:75:b6:0e:5f:2a:f5:7f:6d:fe:ca:75:ab:8e:54:ec:58:a2:
         82:cb:6c:ba:4f:e2:c8:0b:6e:75:48:64:71:2a:4c:cf:6e:66:
         73:4e:c7:fe:07:2f:e4:8e:2d:6f:8b:d1:5a:29:29:fa:b3:c8:
         bb:67:14:e1:0d:d1:b5:30:53:f9:be:d3:16:21:36:e2:15:1c:
         b4:1e:bd:bb:0d:e4:84:26:95:a2:b5:13:1b:4b:a6:7b:bd:f3:
         e0:c9:de:0d:7f:7b:19:f8:8e:49:5e:7a:bc:1f:ba:9e:dc:ea:
         16:9a:4a:e3:28:3d:3a:ef:7a:e3:d0:e9:54:ad:34:27:b0:45:
         6b:35:a6:44:0b:b7:d7:59:d4:dd:61:84:35:bc:ea:09:ec:02:
         6d:6d:ef:92:c5:79:7b:3d:ee:12:79:cf:79:e0:25:67:a1:41:
         35:bf:d0:24:19:cc:f1:8e:a4:03:a7:14:51:67:84:24:8b:81:
         db:da:78:63:3d:5b:8d:f9:9c:79:e8:50:db:c3:37:21:46:8f:
         f1:41:fe:dd:55:2a:56:4f:7b:68:05:33:90:7b:e1:c3:94:a2:
         72:6c:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:53:38 2025 by rpki-client