Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json)
Hash identifier:          /dR9bE0mhKn408QZ2UjACPbnJgKTF7G6oWizpPYATL0=
Subject key identifier:   C2:15:82:DA:80:A2:51:74:CE:01:C3:A4:E2:C6:F9:02:FA:E9:FA:AD
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       234D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
Manifest number:          2338
Signing time:             Sat 31 May 2025 15:48:22 +0000
Manifest this update:     Sat 31 May 2025 15:48:22 +0000
Manifest next update:     Sat 07 Jun 2025 15:48:22 +0000
Files and hashes:         1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: 5aq32RimXYx9TSllJnbw+tZXbxdR4/G9nkZetbqSR/Y=)
                          2: 384962A2709511EFB3C2992DC4F9AE02.roa (hash: 2qRtl+2vbaSdK6Wey0VbloBnqojKQ9B99jR5Bas2V80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9037 (0x234d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: May 31 15:48:22 2025 GMT
            Not After : Jun  7 15:48:22 2025 GMT
        Subject: CN=683b24c6-35ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:7a:a9:c1:37:bc:a9:f8:e1:bf:fa:78:48:
                    ae:4a:ef:fa:c7:d9:2b:e2:61:7e:12:08:65:05:82:
                    82:ed:3e:a7:e2:45:ae:1a:d0:14:05:7d:6e:cd:45:
                    71:dd:5c:15:11:6e:2c:a6:84:f2:38:d9:80:09:02:
                    fd:5b:f2:43:dd:d1:7b:fc:4d:81:ef:bf:c3:39:87:
                    53:4e:ae:74:f9:fb:ea:e4:b0:16:f1:33:f4:53:f3:
                    79:f7:28:5b:ed:af:b9:72:38:c7:1a:17:03:b4:bc:
                    ac:d4:b3:0e:d8:9f:41:a3:c4:eb:93:82:89:38:8e:
                    5a:03:87:cc:62:f3:2f:5d:10:91:1e:65:60:97:f0:
                    90:21:b7:d0:26:ff:9e:bc:a2:78:8d:48:e1:ff:ec:
                    50:3c:2f:e4:0e:cc:f7:81:3b:87:b3:fd:06:36:c2:
                    85:9f:b9:e7:9b:4c:7c:3d:07:8c:53:36:9b:92:6c:
                    20:8a:90:3f:18:c3:dc:e8:70:59:15:12:6d:b3:36:
                    ea:c4:cf:d7:02:37:30:3f:fa:de:02:8c:df:08:85:
                    4e:fb:95:c1:82:8e:d9:f0:11:b0:ce:00:e0:ae:b9:
                    14:25:8b:7a:20:e2:11:3f:66:36:ab:00:cc:fd:6e:
                    29:aa:60:df:8a:e6:f5:12:f6:73:70:84:87:d5:71:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:82:DA:80:A2:51:74:CE:01:C3:A4:E2:C6:F9:02:FA:E9:FA:AD
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:45:b8:66:8d:1b:e5:b2:41:45:f8:f8:e3:df:59:d0:18:ae:
         6c:5d:00:03:95:77:04:5f:b0:05:e8:42:4c:d4:77:3f:57:a9:
         f3:82:d0:3f:00:ad:5a:89:6f:ca:79:a3:24:96:d5:c4:14:21:
         0c:ce:7e:14:38:ee:a3:54:42:4a:02:26:c7:ea:68:39:ee:56:
         8a:14:55:2c:55:da:02:93:93:0f:9f:78:fb:27:64:fd:3a:7d:
         9a:42:be:6d:4a:c4:b1:d6:a6:d4:7a:d6:7f:4c:13:5f:52:ff:
         b1:a7:85:66:19:ed:04:87:71:81:b1:63:ec:c2:44:40:47:ed:
         01:73:48:08:25:9e:b3:df:73:fd:e8:07:83:c6:26:0e:78:8e:
         57:79:30:80:de:a9:3a:a4:dc:25:fd:25:5f:a6:14:25:b7:7c:
         36:a3:f1:61:b3:e8:17:cd:ca:d2:1c:fc:ea:89:a9:be:68:44:
         c2:e6:f9:70:f6:ed:82:93:13:da:46:a1:82:6b:1f:27:ea:b4:
         07:6e:e8:c8:d6:35:4e:a2:7d:9b:3c:64:38:2e:58:6d:01:41:
         ca:99:9b:b6:d2:5f:64:d6:f1:62:e7:16:ae:42:03:ad:64:47:
         31:38:f5:6a:c3:fc:b9:34:d6:35:f5:f0:fb:3a:9a:26:61:82:
         0f:07:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:18:53 2025 by rpki-client