Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
File:                     eDYu-f45SW72Wzb4O2aYr5MI36s.mft (raw, json)
Hash identifier:          kkaskMIdKqM4R8E82LFr0by6J9T/xPY7C7v0UWhl3C4=
Subject key identifier:   6E:51:B1:9B:97:61:7A:75:DA:73:48:88:C5:A1:C6:C2:73:B0:75:E7
Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
Certificate issuer:       /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
Manifest number:          13
Signing time:             Wed 05 Feb 2025 06:26:33 +0000
Manifest this update:     Wed 05 Feb 2025 06:26:33 +0000
Manifest next update:     Wed 12 Feb 2025 06:26:33 +0000
Files and hashes:         1: eDYu-f45SW72Wzb4O2aYr5MI36s.crl (hash: 0/5NNQBZVx1Al3DSDoZ9QK6QYT0UXm505TERYJq/6qk=)
                          2: 44B43AAECC1011EFA5596A50C4F9AE02.roa (hash: uRW4bqoOWcKD9JjoYymAbjdIYpBJL8ZXTg4SH6smXUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7A4
        Validity
            Not Before: Feb  5 06:26:33 2025 GMT
            Not After : Feb 12 06:26:33 2025 GMT
        Subject: CN=67a30499-57df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:56:49:97:32:9f:54:fb:65:10:25:ed:e8:
                    a4:9d:b0:66:5d:6a:e5:36:42:70:b3:83:f3:88:5b:
                    d9:3d:d3:15:66:f9:cb:6c:dd:7c:6d:02:1c:a6:90:
                    33:44:cc:30:6f:9e:49:ce:0b:39:07:e8:29:5b:70:
                    9e:ae:cb:ae:0a:a0:a3:61:d3:f7:53:24:39:ba:47:
                    2e:80:78:a6:94:f6:29:59:6c:bd:1d:63:c8:c9:47:
                    35:4f:f1:95:be:3e:7f:e2:83:e6:a1:6b:37:76:ef:
                    47:62:b1:24:74:55:8b:10:a4:72:13:11:cd:5b:00:
                    62:cd:d1:82:f1:18:62:17:ef:48:fc:c0:98:12:0e:
                    8d:6d:2c:a2:d5:14:61:7c:bd:91:3f:59:58:d4:2d:
                    be:10:da:c4:97:8f:4b:f8:1b:81:aa:91:f7:26:34:
                    9f:87:3b:53:45:0f:77:70:6d:cf:56:e3:da:94:f0:
                    f5:9b:0f:2e:91:3e:b4:23:33:1c:49:0d:3f:0e:d2:
                    c7:4a:8a:81:70:7d:7d:6c:31:2c:5d:b9:5c:8c:d4:
                    17:f5:96:e0:80:2a:41:5d:76:c8:e6:be:00:24:ff:
                    7a:ca:cb:4c:13:5b:de:90:18:32:81:d4:dc:a4:e4:
                    9e:c8:f7:33:b0:ed:18:27:e4:d3:01:eb:86:a7:98:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:51:B1:9B:97:61:7A:75:DA:73:48:88:C5:A1:C6:C2:73:B0:75:E7
            X509v3 Authority Key Identifier:
                keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:24:a1:52:77:8e:57:ee:83:0a:a5:e8:fd:3a:58:df:07:
         40:27:14:e6:12:c9:dc:21:e8:dc:39:1d:00:6d:42:f9:a3:25:
         b7:b5:70:17:83:27:07:3d:a7:93:02:9d:37:84:4f:9a:44:f7:
         a2:29:52:7d:05:d7:7e:d4:50:c4:3f:cf:b1:17:a5:ad:f0:26:
         e2:a3:03:dd:c6:bd:11:6d:66:43:dd:66:f0:c3:ae:57:0c:00:
         f5:80:28:18:3f:78:41:13:34:ee:83:d0:52:b0:54:de:e7:62:
         4a:a4:60:2d:d4:3e:92:b7:6b:83:18:3b:fa:2b:81:2d:28:e5:
         24:ed:84:77:50:11:a6:a0:70:e1:37:a3:30:b6:15:61:f6:5a:
         90:75:01:7a:cf:39:f5:e5:74:a2:9b:de:f9:71:97:34:42:fd:
         67:83:81:a0:4f:b7:51:56:de:ec:09:a2:d9:ad:e7:c1:48:93:
         04:4f:b3:c0:65:38:f2:5b:a9:02:01:1b:aa:77:aa:ae:a3:e4:
         9c:aa:5f:13:fb:9f:5c:bd:9c:20:9d:c2:9d:2b:d7:3d:e4:b0:
         37:2b:e3:0c:a8:f8:a9:7a:2a:7d:da:e6:74:88:7d:18:73:d4:
         7a:f5:61:ac:c1:23:ea:90:08:1c:c0:3c:3f:19:40:90:cf:67:
         54:b1:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 04:11:51 2025 by rpki-client