Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File:                     e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier:          5JLLOhoNEARm2hvJKJrZFdv51rCrzyPohh8i1h5fnrA=
Subject key identifier:   33:ED:CB:AF:11:27:38:24:0E:DC:04:3F:ED:DA:B3:4C:D7:00:C3:44
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number:          60
Signing time:             Thu 05 Jun 2025 06:31:51 +0000
Manifest this update:     Thu 05 Jun 2025 06:31:51 +0000
Manifest next update:     Thu 12 Jun 2025 06:31:51 +0000
Files and hashes:         1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: S3xupsKYrXnUFGRXfnV6wGk/7wRXXeGSpW5Nr5F+q4M=)
                          2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
                          rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 06:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Jun  5 06:31:51 2025 GMT
            Not After : Jun 12 06:31:51 2025 GMT
        Subject: CN=684139d7-b037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:15:eb:3f:51:85:dc:37:87:55:46:04:8f:
                    eb:4c:8c:36:ee:e1:eb:58:50:3d:8d:fa:80:0b:f2:
                    4a:97:00:47:4a:36:45:5c:64:d9:23:87:6c:db:72:
                    fa:fe:96:e7:90:13:d4:09:11:22:2a:17:97:b0:40:
                    0a:90:42:49:dd:f6:d0:71:a9:52:7a:9b:8f:e9:30:
                    11:e7:c4:e0:26:55:f5:ec:49:28:0f:15:27:53:dd:
                    ed:2d:0d:ca:d0:9e:1a:be:54:27:05:e8:b2:99:39:
                    58:e4:69:b8:92:5a:ec:43:ec:35:6e:87:30:e7:cb:
                    cd:ff:fa:2a:a3:b4:4d:69:8a:6a:75:c4:3d:2f:0c:
                    e8:01:3c:70:1b:f2:34:8f:83:73:ef:f1:13:4d:d5:
                    44:12:b2:61:62:a0:11:04:6e:1d:04:05:c2:c8:25:
                    13:2f:8a:a6:08:56:35:8a:c1:97:e4:c0:1c:36:b9:
                    bd:fc:ce:3d:ac:d1:b9:d6:61:c4:cb:e5:9b:44:5f:
                    81:06:0b:cf:f6:77:d2:5e:15:55:20:db:3c:f1:e0:
                    83:ba:8c:bf:8c:3e:15:5f:6b:82:09:b7:fa:1a:28:
                    d7:3e:02:5f:1a:21:d1:39:5f:f9:76:f8:df:75:3c:
                    52:f1:5f:ae:32:0f:d9:ea:6a:84:57:e9:5e:7e:21:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:CB:AF:11:27:38:24:0E:DC:04:3F:ED:DA:B3:4C:D7:00:C3:44
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:42:4f:79:d5:8c:ca:d4:41:dd:d4:2c:3d:4e:d9:b3:83:82:
         a3:a3:bf:44:af:4a:49:e1:a5:40:1e:d1:52:84:94:7d:c0:ea:
         af:f6:3a:4f:09:3e:f1:de:83:ad:a6:1c:57:a9:b8:e2:d0:3b:
         5d:08:6e:2a:ea:d8:97:27:7c:71:e3:72:83:e2:b4:23:c3:26:
         ca:8a:ac:ed:24:66:1b:19:d0:43:f6:71:48:6d:06:b9:8c:ae:
         1b:de:3a:66:fe:f1:8c:74:9e:b7:26:32:eb:d8:15:8c:75:08:
         09:5b:6a:a0:12:d4:59:ff:36:b2:7b:30:d9:dc:28:41:6b:bd:
         50:e2:cd:0e:8a:8e:cd:ca:4c:74:1a:37:bb:c4:50:00:be:9b:
         df:5d:00:99:40:30:95:e0:12:93:28:5d:ce:9c:b0:3e:3d:13:
         ea:06:f8:40:7e:38:f9:00:55:ba:6d:1d:ec:30:f1:fc:a0:45:
         ba:9f:91:20:b7:c8:25:6d:46:7f:38:44:59:ae:e5:8f:06:25:
         08:7b:ac:eb:c1:bb:d0:3f:98:5c:bd:9e:cd:18:57:a1:c5:79:
         27:b5:3b:8b:29:e7:da:7d:13:8f:e1:ad:e6:07:5c:b8:8b:09:
         80:42:40:67:04:79:7a:7b:17:b8:47:b8:9c:75:94:e9:4f:56:
         3c:73:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:17 2025 by rpki-client