Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
File:                     eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json)
Hash identifier:          GtzWTYZujKtBHgSQoWFQvgNFpKWaPUHBKsvtcddyFAs=
Subject key identifier:   C6:5E:E8:D0:ED:BD:06:B1:98:84:FE:BD:9B:3E:0A:40:99:86:5E:15
Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4
Certificate issuer:       /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
Certificate serial:       2604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
Manifest number:          2CFE
Signing time:             Fri 30 May 2025 15:52:17 +0000
Manifest this update:     Fri 30 May 2025 15:52:17 +0000
Manifest next update:     Fri 06 Jun 2025 15:52:17 +0000
Files and hashes:         1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: JeFjwhnt95/wEVDcooxKvUA/E1DEqGjJTi9+Ku2HPb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl
                          rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 15:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9732 (0x2604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163824, serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
        Validity
            Not Before: May 30 15:52:17 2025 GMT
            Not After : Jun  6 15:52:17 2025 GMT
        Subject: CN=6839d431-0ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:d6:9d:0e:b0:10:5b:c3:19:37:7e:a4:21:
                    a9:69:c4:38:cb:fd:c1:d7:63:46:d1:3b:6e:ba:6a:
                    2f:b1:8a:c7:a7:45:f7:ed:40:6a:36:21:94:5e:8b:
                    e3:dd:4d:1a:2a:24:1f:f6:d2:45:7f:3a:33:3e:2e:
                    9f:84:6f:b6:b4:0f:8e:dd:53:f1:90:89:db:60:db:
                    c6:39:cf:ef:85:3b:04:eb:fc:25:6e:f6:e3:fa:84:
                    6d:c7:f0:5c:fd:23:db:1f:e9:42:31:4b:72:09:c2:
                    ef:ee:3d:ef:63:3c:70:17:06:59:af:18:42:8d:d4:
                    5e:8d:75:66:ec:5d:22:37:9e:49:a2:45:28:80:4b:
                    0b:77:01:52:0a:5a:71:4d:2c:ef:12:5e:03:b3:71:
                    2a:ca:70:91:7a:36:07:34:0b:c0:61:d3:ce:e4:51:
                    55:bb:92:4a:a2:f5:67:8a:26:88:4d:aa:ef:06:5c:
                    fd:be:ee:02:d3:72:ce:8c:82:17:f0:0e:5e:9c:53:
                    26:6c:ea:dd:7a:7e:c0:41:f7:7c:6d:d4:b9:8b:c7:
                    af:c9:c1:ea:92:81:96:2d:86:48:48:aa:35:64:f2:
                    49:04:f0:a1:16:d9:22:87:5b:46:d4:b7:81:5f:46:
                    3d:75:25:34:89:8f:8e:07:2d:14:c8:6d:e4:b9:e3:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:E8:D0:ED:BD:06:B1:98:84:FE:BD:9B:3E:0A:40:99:86:5E:15
            X509v3 Authority Key Identifier:
                keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:84:4b:8c:c3:14:74:0b:64:cf:f8:ec:ee:ea:24:e4:c0:4d:
         0b:39:d7:10:81:c7:b2:e1:b1:34:36:5b:40:7f:f7:8f:63:ab:
         1c:60:60:f2:27:82:23:98:fc:a1:33:8c:a3:01:47:fd:00:f7:
         5b:fe:45:2a:b3:33:26:83:3f:36:a4:fe:55:22:73:73:55:51:
         bc:0d:78:b0:6b:38:a5:dc:63:b7:ca:cc:34:3c:58:fc:0b:30:
         7c:9a:cf:58:6f:c5:da:9b:ad:7d:2d:57:2c:c5:da:a0:41:dd:
         fd:29:47:b8:74:d4:84:11:41:c8:ae:73:2f:1c:35:36:9d:92:
         d9:78:6d:c9:a4:f2:86:44:f3:18:ab:72:53:75:21:55:c0:17:
         f5:72:b8:9f:f1:c1:59:16:13:02:54:7e:6e:97:57:59:d8:0a:
         99:3e:41:76:5c:cd:9f:8a:22:06:c1:6f:5f:86:66:be:24:13:
         c2:74:39:cc:99:97:fd:88:1d:c9:14:2f:34:07:df:b7:82:78:
         60:ac:a0:89:54:5c:bb:41:c6:7e:81:55:7a:6d:af:c5:76:d3:
         1e:aa:7c:3c:27:f6:9b:47:7a:e8:62:a8:43:b0:b5:67:c0:ac:
         50:cb:a3:57:8f:03:de:98:6a:09:33:c4:7a:2f:62:7d:63:00:
         f5:48:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:02:18 2025 by rpki-client