Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
File:                     eFGQATcElYfBJg7e1Re30ooYjrM.mft (raw, json)
Hash identifier:          suMBfy97N4d/dNp+ejIoRC+YIbgpBM5Po87HBUuU/Zk=
Subject key identifier:   05:15:88:FA:EB:1E:05:8B:84:2E:18:D5:E8:BE:47:F7:18:8A:47:80
Authority key identifier: 78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3
Certificate issuer:       /CN=A9130D7B/serialNumber=7851900137049587C1260EDED517B7D28A188EB3
Certificate serial:       05AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
Manifest number:          05AA
Signing time:             Fri 30 May 2025 23:21:45 +0000
Manifest this update:     Fri 30 May 2025 23:21:44 +0000
Manifest next update:     Fri 06 Jun 2025 23:21:44 +0000
Files and hashes:         1: eFGQATcElYfBJg7e1Re30ooYjrM.crl (hash: mpfHfinl/X+IKBQwwkolUglC0fyS7eYFsRLTaAjLv/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl
                          rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130D7B, serialNumber=7851900137049587C1260EDED517B7D28A188EB3
        Validity
            Not Before: May 30 23:21:44 2025 GMT
            Not After : Jun  6 23:21:44 2025 GMT
        Subject: CN=683a3d89-2d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:78:66:f6:9b:ab:62:2a:48:1f:e5:52:5f:
                    4e:6a:67:95:62:79:b3:6e:89:45:f6:fc:dc:32:37:
                    2c:cf:13:3d:ab:46:67:55:d7:e1:0a:b7:39:92:9e:
                    52:67:53:17:8c:e9:bf:d3:4e:a8:ee:20:35:5e:81:
                    1d:0e:23:61:02:e7:b0:f6:d6:55:6c:9d:17:f2:28:
                    27:15:60:a0:7c:33:ec:f6:bb:48:4a:6b:a2:a8:e5:
                    4f:ac:9d:e7:f0:e5:5e:16:3f:67:a5:79:37:a9:1f:
                    b7:98:6d:19:99:a1:5b:30:c3:50:cb:eb:4b:0c:c3:
                    01:36:7e:f9:85:da:5e:d7:f4:ad:81:bf:ea:99:db:
                    fc:85:db:b6:3f:83:ed:6c:26:99:66:b3:68:01:37:
                    86:a2:d6:35:11:6e:21:5d:7c:6a:ce:69:d7:6f:59:
                    72:13:d5:16:50:e8:57:56:fd:6c:77:00:95:29:ba:
                    a7:5b:75:ab:44:43:90:40:0a:0e:c8:11:b3:c6:b7:
                    74:1c:1e:a8:34:73:6e:53:91:a1:03:78:30:cc:8c:
                    93:ce:e8:07:a1:c3:ab:20:e3:46:4b:6a:a9:a2:0e:
                    86:7b:30:2f:5f:02:d7:40:47:94:f2:6b:21:ea:32:
                    9f:bb:9d:78:09:fc:24:6e:06:f7:ff:87:c1:25:0e:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:88:FA:EB:1E:05:8B:84:2E:18:D5:E8:BE:47:F7:18:8A:47:80
            X509v3 Authority Key Identifier:
                keyid:78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:80:60:1a:f1:8f:59:df:19:49:b9:3b:53:6e:bb:96:2e:
         17:82:3a:f4:17:3f:04:1c:89:4f:1f:26:60:89:3d:5c:04:51:
         73:c3:31:68:60:8f:dc:4d:99:9d:1b:6e:b7:09:e4:bb:9d:14:
         1f:ca:20:d9:14:22:ef:9f:cc:9d:d2:57:8e:ed:cd:f9:f3:67:
         eb:06:35:01:26:8c:a5:99:eb:63:d3:20:69:4f:85:ec:d1:3a:
         53:ca:ec:e0:31:c1:a5:45:ef:58:89:5b:b4:62:98:5c:16:90:
         ae:9e:b8:2b:d8:c4:48:1e:17:ff:e0:f2:2e:26:0b:b7:05:7a:
         7c:a1:da:2a:d7:cf:4c:21:bd:41:00:66:83:24:89:78:b7:d4:
         74:d3:54:c2:10:25:69:bb:e3:78:42:70:e0:c8:a8:56:d9:7b:
         a0:f0:ee:98:67:da:9d:d5:ee:1f:0c:96:a4:73:72:f0:32:b3:
         a8:33:ec:be:c0:cb:d1:61:19:ef:c8:9c:86:d6:ff:af:33:e6:
         d9:b1:d7:f7:5c:8d:d0:47:9b:c9:14:5f:09:79:63:3d:fd:64:
         d4:72:39:66:f4:18:d1:ec:96:60:db:2a:44:c3:33:c7:7d:8b:
         ba:12:99:fa:2a:f2:0f:df:c0:92:ba:16:cf:09:5c:44:77:7c:
         7e:bc:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:23:33 2025 by rpki-client