Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          7m2imoZKyMZ12E+eXoVN4tr6nBuJALQh8LpJOhCAGKk=
Subject key identifier:   A8:71:90:18:78:1C:36:E7:59:09:1D:98:67:D2:C9:83:FB:78:1F:CC
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          EB
Signing time:             Sat 31 May 2025 04:58:43 +0000
Manifest this update:     Sat 31 May 2025 04:58:43 +0000
Manifest next update:     Sat 07 Jun 2025 04:58:43 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: SEh4yZCAK/Dy2snGne6ays1SbwHVE/vMmN2Mz5ITonU=)
                          2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
                          3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: May 31 04:58:43 2025 GMT
            Not After : Jun  7 04:58:43 2025 GMT
        Subject: CN=683a8c83-c5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:14:ff:dc:9d:ab:d2:d4:e5:b9:a4:94:d1:
                    17:c2:8c:5c:e7:a1:f2:c1:97:13:e8:a1:1c:a9:6a:
                    60:45:cd:e1:69:06:c7:58:89:e2:7c:32:0f:cd:51:
                    59:39:8a:9f:41:83:5d:04:3b:9c:de:25:96:e5:64:
                    3f:b9:52:b0:ce:63:96:99:b4:34:ee:99:ee:2e:92:
                    e0:3b:be:55:68:da:14:95:ae:8a:c7:68:ff:b9:84:
                    16:7e:62:48:48:f3:35:d4:58:1a:d4:71:88:0e:0c:
                    6f:90:3f:67:80:5e:72:2c:3a:3d:15:3d:a4:3a:7f:
                    7a:ae:67:19:63:cc:0e:74:dd:9f:8c:6a:7a:96:f9:
                    23:88:64:69:30:1e:c1:ca:90:fe:21:f6:73:cf:25:
                    49:e5:bb:dd:84:d4:da:fc:5f:96:16:fc:f0:fc:25:
                    26:bf:20:67:68:54:d6:0a:e4:57:5c:1c:11:26:3d:
                    e7:48:be:e4:2e:e6:82:bf:b1:a1:c1:7e:1b:14:d2:
                    33:4f:d1:a9:4b:ca:8b:76:78:dd:82:2e:eb:d5:c8:
                    64:06:f3:8e:22:8b:52:53:5f:9f:b1:a0:b4:1b:73:
                    4d:87:f0:33:2e:72:3b:f6:a1:e9:67:37:43:85:b3:
                    c4:a2:fa:bd:5d:f7:96:18:2b:f2:11:d6:ed:de:fd:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:90:18:78:1C:36:E7:59:09:1D:98:67:D2:C9:83:FB:78:1F:CC
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d1:ba:6a:fa:80:31:fa:82:dd:e8:d2:7b:60:c1:6a:d3:7d:
         85:32:46:71:66:ae:0e:1f:7b:a7:c7:52:8d:f8:a1:cb:f5:f8:
         8e:cc:9e:6a:ba:d4:e5:1f:e7:70:6b:62:e2:23:13:85:77:68:
         1c:29:fe:7c:34:a1:5b:30:f0:e8:b3:8d:7a:a1:87:30:fc:f9:
         74:5e:7e:38:07:47:84:92:b7:4e:e8:61:eb:a9:86:f2:a0:18:
         dc:6f:93:68:8d:98:3d:cc:fa:44:22:97:23:08:a7:a6:ea:60:
         9b:00:61:65:45:1b:02:1e:27:3e:5a:79:17:22:27:a1:e8:54:
         a5:6c:04:a7:60:c6:99:92:18:c2:d3:7c:3a:a1:20:9f:9c:ad:
         c0:73:e7:0f:17:82:fa:20:e8:69:d1:9d:ea:3a:a1:7d:cd:e4:
         56:e6:1d:b7:f7:47:06:dc:6c:a3:ce:b0:f1:78:af:55:7c:ca:
         2c:b7:dd:38:44:52:44:0a:bd:94:bb:8a:2a:16:5a:b8:16:dd:
         ef:18:63:ef:98:c5:8a:63:16:cc:6d:58:ee:0d:34:4d:be:42:
         27:84:36:e0:bd:8b:bb:8d:b5:0f:10:07:95:01:f0:dd:14:1a:
         c9:00:13:97:d6:35:38:c2:87:37:ea:68:94:0f:d5:10:ef:04:
         2d:24:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:38:54 2025 by rpki-client