Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
File:                     plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json)
Hash identifier:          GhapOFiguNSsb1p8twbnflKX5PUeNTBjD34NTpCSfV8=
Subject key identifier:   0E:C4:C0:7E:FE:99:5B:D9:11:30:C5:FD:CA:6F:17:C9:9C:50:E8:D1
Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58
Certificate issuer:       /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
Certificate serial:       1064
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
Manifest number:          105B
Signing time:             Tue 10 Jun 2025 17:21:57 +0000
Manifest this update:     Tue 10 Jun 2025 17:21:57 +0000
Manifest next update:     Tue 17 Jun 2025 17:21:57 +0000
Files and hashes:         1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: EFQdE1/8xmTWJEYxqGXuk291T/yy3Xk9FuDp3KUpSps=)
                          2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 17:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4196 (0x1064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
        Validity
            Not Before: Jun 10 17:21:57 2025 GMT
            Not After : Jun 17 17:21:57 2025 GMT
        Subject: CN=684869b5-7b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:57:d4:85:9b:e1:fd:98:b0:aa:e2:15:54:
                    b2:ff:ed:ce:2f:cf:f1:2b:d6:48:84:d0:4c:6d:82:
                    63:74:38:93:1d:6a:ae:2a:2a:2c:2d:4c:fc:2c:92:
                    39:81:89:f7:1b:f8:90:96:7b:73:53:fc:7b:51:65:
                    b1:49:49:6d:0c:e1:33:98:49:35:cc:df:a5:65:bf:
                    49:a5:5f:70:74:8c:42:79:40:f0:b6:7d:49:24:fc:
                    09:0b:6b:c3:af:57:5e:12:ec:04:4b:55:5e:df:9c:
                    e1:11:fe:8b:ac:2b:56:5e:bd:46:72:2c:9d:bf:96:
                    40:e7:6e:f3:40:6c:cd:68:95:bc:2c:f0:1f:4d:6e:
                    f5:39:78:1d:74:a6:3e:fd:85:3f:ce:99:5f:44:f9:
                    b2:35:12:8e:7f:87:2d:ba:ed:fe:d8:60:27:5b:a2:
                    e2:a7:3a:d9:31:ed:79:3a:76:77:17:10:b4:5d:85:
                    7c:49:72:73:a6:90:78:18:0a:00:07:d9:2d:62:0f:
                    0b:93:14:28:ff:9c:52:3a:f6:20:92:84:03:ef:d6:
                    6e:9e:e1:26:8c:54:04:eb:d1:3a:dc:f1:fa:4c:49:
                    46:ae:4d:fa:43:7b:61:5a:23:ec:bf:58:37:ab:d9:
                    83:e7:ea:a2:05:e8:48:20:f0:3e:4b:06:a9:07:f6:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:C0:7E:FE:99:5B:D9:11:30:C5:FD:CA:6F:17:C9:9C:50:E8:D1
            X509v3 Authority Key Identifier:
                keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d5:54:03:ec:86:f8:0c:d2:59:6d:e8:da:6a:ab:36:80:f3:
         3a:a2:75:58:eb:1a:05:87:a5:b4:40:99:cf:87:6b:08:41:c3:
         67:46:69:83:f5:f0:5d:ff:ed:ba:6e:00:31:25:d9:c4:32:e7:
         48:14:d5:a3:46:12:c4:fe:8c:8a:d7:b3:f3:93:e4:fc:24:84:
         73:e6:1a:05:75:05:1f:a3:55:35:65:0d:79:ac:ca:a1:51:8b:
         a7:e6:c5:3c:0f:b7:b9:47:7b:cc:fe:69:f4:a6:d2:40:55:d5:
         8d:b6:3c:de:0f:bc:91:bd:dd:cc:42:75:ea:ce:24:b8:19:21:
         a2:d3:67:d9:77:32:c7:06:1a:03:b8:a7:e9:5c:23:16:56:08:
         a0:e8:ac:82:7a:eb:c9:c8:85:99:ed:eb:74:b7:fb:e5:54:04:
         8c:f5:5c:81:f5:d0:cb:8f:17:ef:85:03:fd:e1:5e:56:64:c5:
         55:fc:53:c9:5b:15:6a:da:c6:60:f8:33:52:86:3c:ec:ab:44:
         ae:05:eb:c6:cc:86:02:45:ee:ac:81:e3:02:18:ab:5f:f9:97:
         3f:0f:e6:cf:86:43:65:15:12:7c:82:b9:e5:7a:e2:d1:cc:99:
         73:95:a3:72:79:36:53:30:04:98:12:c2:ac:50:fc:ba:43:7e:
         ff:79:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:43:25 2025 by rpki-client