Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
File:                     e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json)
Hash identifier:          bNdsGALObA4/vQS7sbkejLLUQjSg57mcn6vGC6sdhC0=
Subject key identifier:   09:25:38:A4:AE:51:12:1D:F3:F6:2E:30:F2:3C:38:76:96:B6:0B:12
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
Manifest number:          0BC4
Signing time:             Fri 30 May 2025 19:16:36 +0000
Manifest this update:     Fri 30 May 2025 19:16:35 +0000
Manifest next update:     Fri 06 Jun 2025 19:16:35 +0000
Files and hashes:         1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: yT2T31JFYcFIgrJK3z++EJRa5T8rHku7S4KIy9q0ZYk=)
                          2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: 25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: May 30 19:16:35 2025 GMT
            Not After : Jun  6 19:16:35 2025 GMT
        Subject: CN=683a0414-89cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:d0:98:f9:af:2c:95:84:8f:5d:d6:0d:50:
                    a5:41:84:22:1d:f7:81:71:87:4f:58:5a:6e:94:be:
                    02:f9:d9:a6:50:7d:d1:c2:92:63:4d:c9:51:0f:29:
                    c1:c5:06:7f:62:6e:e4:78:d2:81:77:de:d1:03:b1:
                    77:5a:73:d8:72:68:1b:52:75:b5:a1:10:37:d7:bd:
                    87:78:64:fb:1c:62:2d:9d:ce:0e:fa:8e:2a:27:b1:
                    a1:5c:b9:20:60:d8:85:4c:2a:91:54:77:c7:d0:e3:
                    0c:fd:3c:47:12:68:13:d4:c0:07:d4:ef:53:8d:45:
                    a4:f8:14:9d:dc:5d:e5:eb:d0:99:29:a5:85:79:bd:
                    c7:56:6f:9c:c1:af:e8:a5:41:1e:2d:a8:46:75:a1:
                    3a:08:0c:e9:4e:a7:94:db:df:6b:18:07:f6:40:64:
                    5e:af:e6:38:91:e8:3f:d9:01:2e:ef:55:82:f4:5a:
                    55:5c:10:fd:5c:3f:f1:2d:14:31:a5:09:58:03:55:
                    15:0a:b6:35:be:2b:a5:3a:04:75:14:f3:62:b6:65:
                    58:96:75:65:67:c9:c8:a3:76:75:2b:c4:3b:6a:28:
                    ce:91:68:7f:2c:75:28:5c:ba:b3:a6:80:e6:78:86:
                    09:e2:25:01:41:e1:ee:a1:3f:87:e8:8f:a2:d0:a0:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:38:A4:AE:51:12:1D:F3:F6:2E:30:F2:3C:38:76:96:B6:0B:12
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:0d:25:e1:15:3a:b8:d8:28:ae:a5:cb:f2:90:71:07:f1:
         52:77:30:fc:6b:69:6e:c0:6c:82:61:e8:50:39:8d:51:47:5d:
         60:7d:1e:42:66:84:a1:be:4c:c1:a6:3d:0f:50:b7:1b:7b:3d:
         52:26:29:e7:1f:cf:86:ad:98:3d:0d:78:0b:55:5b:c7:27:84:
         90:24:f0:99:74:fb:cc:62:86:d4:0d:cf:a6:44:4a:88:74:80:
         e0:14:7f:e0:ea:03:c9:41:34:39:7b:88:56:ba:d9:cd:41:33:
         4a:c1:f1:da:33:9d:53:9e:53:ad:d4:a9:cf:ad:82:98:16:f2:
         33:7a:4d:b6:4d:d3:6c:2d:e5:e5:00:48:49:ce:d9:38:5f:35:
         c6:8f:82:21:dd:a0:0b:22:f0:36:1c:bc:3d:bd:40:70:fc:a9:
         87:80:79:f9:a9:45:94:7e:e8:f1:71:72:7d:51:62:5e:de:23:
         6f:9e:b3:6a:f4:7d:20:aa:db:50:0b:8a:a1:34:90:68:67:fe:
         5e:b7:54:98:e1:19:3c:38:55:45:67:a6:3a:43:21:70:42:de:
         ad:e7:4e:94:c4:aa:fe:0a:36:cf:93:37:2e:54:59:4f:12:1b:
         9f:ab:f9:7d:f6:a7:c7:bd:8a:f4:5e:04:22:3c:e5:17:2e:41:
         8f:28:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:17:26 2025 by rpki-client