Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          OVCYp8MgeakAcJmFp2ForBZ9DmMmbkAlbM0FlsCGpe0=
Subject key identifier:   DA:78:FD:8F:16:60:93:B0:48:3F:D1:48:85:C9:6C:08:81:1D:B3:1E
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1077
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          106C
Signing time:             Sun 08 Jun 2025 17:16:53 +0000
Manifest this update:     Sun 08 Jun 2025 17:16:52 +0000
Manifest next update:     Sun 15 Jun 2025 17:16:52 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: ZrutrMf0DuANRw1UL56jQhRARmP1bjz7cZlAUCIr8gg=)
                          2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 17:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4215 (0x1077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Jun  8 17:16:52 2025 GMT
            Not After : Jun 15 17:16:52 2025 GMT
        Subject: CN=6845c584-4dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:34:34:c8:36:59:16:9f:15:ed:5d:e1:9e:99:
                    51:07:e5:90:9c:6e:71:df:c7:c8:21:53:44:ae:f4:
                    b5:dd:be:5c:e6:90:df:15:97:ed:13:a3:08:59:d9:
                    47:2c:08:7d:5a:f6:c5:1a:d2:be:e7:e8:01:65:f1:
                    49:c6:9b:c0:26:27:01:11:ce:92:2e:dd:a9:81:89:
                    c7:7f:f1:11:a6:e5:59:05:0d:8c:81:5c:b8:37:a8:
                    33:7a:8b:46:d7:2f:c7:fb:8a:ab:6b:a1:89:db:81:
                    f5:bb:a8:ed:35:bc:fd:40:c4:f1:f6:c2:95:3f:bb:
                    46:80:15:1b:1c:96:ac:85:05:79:02:8c:47:2b:9d:
                    f3:6e:4a:06:61:81:92:04:ed:9c:0e:e8:af:0e:51:
                    d6:17:26:a5:ae:19:44:54:a2:ac:49:09:c1:e3:2f:
                    82:ff:29:ee:54:76:b1:64:91:be:95:82:0d:e6:38:
                    68:ba:ef:32:bc:86:2e:7c:58:08:98:06:ec:2e:95:
                    24:62:1d:f2:5c:54:64:a4:ca:91:68:45:bf:d2:22:
                    bb:4a:03:bc:3b:ee:c9:b5:6f:34:95:56:78:86:79:
                    67:c3:28:b8:2e:1e:f5:f7:36:91:c7:92:f6:f5:6d:
                    30:9d:b4:52:ca:42:9f:0c:95:60:12:a5:bf:84:3d:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:FD:8F:16:60:93:B0:48:3F:D1:48:85:C9:6C:08:81:1D:B3:1E
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:22:e3:30:71:bf:a8:a5:04:45:f8:37:c8:4b:2f:4d:d6:db:
         f5:9c:2b:f1:54:c7:75:15:e6:fb:93:87:6e:0c:4e:d7:54:29:
         ff:2d:12:54:c6:00:d2:85:77:7a:55:10:53:94:35:a8:f9:73:
         01:a1:08:11:d9:52:b4:73:07:17:0c:ff:37:2c:a3:e5:2a:4d:
         4d:8f:a7:bc:44:37:88:f7:b0:5f:46:0a:fa:a5:fc:9d:00:c8:
         5a:ee:1b:2f:98:05:f8:93:71:f5:d5:2d:9f:72:fc:b2:7a:c2:
         22:91:47:47:fb:65:98:9f:0a:0b:95:32:de:58:2a:9b:a5:42:
         ed:37:25:2e:cf:fe:af:a8:8b:8f:38:de:a5:98:1d:03:a6:6f:
         50:fa:dd:db:1d:33:1b:a7:07:3c:4c:6d:64:ac:0d:d3:62:fa:
         38:45:f1:70:c5:95:9c:12:bb:d6:f7:98:31:14:fe:f3:10:d7:
         53:95:a0:8a:bd:c6:d2:c7:c2:d0:b5:6c:43:b6:95:ad:1a:44:
         c7:b1:14:08:c9:ee:1a:d7:08:2d:2c:0e:86:f0:8a:d0:80:e5:
         a9:50:61:34:c7:59:29:05:b7:a9:4d:16:59:98:fb:de:e2:fe:
         4c:58:ee:3b:a8:58:f4:b3:8f:3d:7c:08:39:db:5a:01:70:ad:
         36:52:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:35 2025 by rpki-client