Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File:                     E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier:          rxMQ3KErooASChUspFJxpGbgQqBak+PiHtR5XIQkh+s=
Subject key identifier:   B6:82:B9:48:68:76:C3:12:E3:DE:8F:83:D8:92:E3:20:D3:2F:55:04
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       047F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number:          0477
Signing time:             Wed 11 Jun 2025 00:00:35 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:34 +0000
Manifest next update:     Wed 18 Jun 2025 00:00:34 +0000
Files and hashes:         1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: dy5ZIte03MxPbZx+5yHJB7KYcN1+XxsZVHvPidl2h80=)
                          2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=)
                          3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Jun 11 00:00:34 2025 GMT
            Not After : Jun 18 00:00:34 2025 GMT
        Subject: CN=6848c723-46e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:e1:d8:19:d8:25:98:90:82:13:c8:4d:d7:
                    c6:36:a4:46:44:d7:0e:18:8b:c5:cd:ea:82:94:7c:
                    26:6d:04:0a:8d:13:24:e0:44:b5:27:61:72:aa:da:
                    6e:33:2e:a6:70:35:ed:b2:ea:2d:9b:02:64:33:88:
                    43:f5:da:d1:cd:4f:31:52:3f:83:62:8a:93:db:e3:
                    3b:60:0d:bb:2d:a8:23:2a:27:0b:36:f6:7f:f6:c3:
                    ca:6b:e6:a6:6b:0d:4b:c9:32:a5:41:39:db:3c:f1:
                    89:96:1a:66:d9:15:86:48:30:23:37:78:b7:9a:8e:
                    4d:26:88:9b:d1:de:f7:21:84:c4:34:57:85:de:8e:
                    95:f0:b5:2f:62:27:c2:69:46:bb:e4:6a:e1:ad:8e:
                    b7:e2:7a:3e:cc:24:1f:23:8b:bc:66:4c:2c:44:9f:
                    44:6c:b3:bb:81:5d:01:ab:21:27:4c:cc:b4:14:ea:
                    7e:07:7d:19:c3:82:22:be:15:0e:29:a1:82:3b:d5:
                    72:ee:ad:20:26:a5:ad:8a:74:c8:1c:f1:bf:d6:59:
                    e7:36:a0:0d:22:58:7b:8a:6e:27:5b:82:f0:37:f1:
                    7e:74:e1:dd:7f:f2:00:5b:ac:d5:43:dd:30:8c:dc:
                    b2:17:d0:e8:2f:30:70:0a:84:6f:d6:f9:ba:67:0f:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:82:B9:48:68:76:C3:12:E3:DE:8F:83:D8:92:E3:20:D3:2F:55:04
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:1b:67:22:3b:26:62:bc:ee:2d:3e:75:9d:bc:58:e0:3f:
         65:a1:1d:9e:e1:96:9d:0e:81:7c:e4:46:91:8a:5b:73:20:8d:
         bb:c8:dd:28:77:e1:de:63:0b:06:8b:f6:56:15:12:86:4e:10:
         d3:a9:16:bb:49:00:49:f1:c3:a7:9e:1e:98:bc:cd:6b:f8:fe:
         7e:e8:f4:c8:53:d1:eb:d4:49:99:72:53:7e:b5:0c:b0:21:8c:
         7b:7e:e9:a7:51:aa:19:6d:66:08:c6:d3:ec:3b:d5:c5:65:25:
         13:f5:9e:86:61:0a:32:84:a2:f3:93:df:3a:e3:ab:b4:17:eb:
         29:fb:34:61:39:10:dd:3e:94:f5:45:14:eb:21:b1:89:7b:fe:
         20:e0:36:f1:77:c1:60:2f:c1:dd:63:25:d4:a8:bb:39:dc:6e:
         b4:0f:77:3b:49:5a:16:9f:36:50:eb:6c:f8:de:2c:b5:1a:d3:
         dd:78:a0:d3:59:78:4f:4c:86:b2:44:5b:ed:6b:22:12:b7:bf:
         03:3e:ce:1c:7a:48:48:b4:ec:74:52:8c:a8:82:e7:4f:8a:95:
         3c:46:1d:fa:5d:6c:7a:17:64:eb:02:8a:c4:cf:2c:29:1a:6e:
         7f:6a:1a:3f:8a:5a:73:85:ed:d9:0d:4e:40:25:12:16:08:a5:
         8a:e0:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:05:11 2025 by rpki-client