Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
File:                     8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json)
Hash identifier:          i8XfHmQYaPUCc3ww8O5eS2x6DwaX2/YjwWEe3WyvCkI=
Subject key identifier:   22:02:D2:28:B4:DA:E1:3B:99:87:1F:C0:FA:E1:48:25:64:43:65:19
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Certificate issuer:       /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial:       06A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
Manifest number:          069E
Signing time:             Fri 06 Jun 2025 22:15:21 +0000
Manifest this update:     Fri 06 Jun 2025 22:15:20 +0000
Manifest next update:     Fri 13 Jun 2025 22:15:20 +0000
Files and hashes:         1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: EsE4H/qO98y+XsoinGt0CVvyF94r7qRmYjb3+uY5Dks=)
                          2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 22:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
        Validity
            Not Before: Jun  6 22:15:20 2025 GMT
            Not After : Jun 13 22:15:20 2025 GMT
        Subject: CN=68436879-53f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:54:43:8f:2d:59:6a:21:95:6d:fd:53:90:
                    c8:a5:3d:98:c5:0d:d4:94:3b:fb:74:23:8a:1f:05:
                    52:54:43:e3:33:e6:9c:cb:a5:b8:ad:21:41:d2:f1:
                    f3:89:44:11:ea:7c:47:27:ba:2d:03:63:27:9f:5f:
                    42:e1:c7:40:db:aa:ae:96:96:04:31:c9:6c:bf:9f:
                    80:3b:0c:96:e0:d0:4f:0c:b2:87:d3:64:b9:57:49:
                    53:8c:59:e5:01:03:d0:24:33:47:b6:21:1e:a7:04:
                    d5:83:67:ba:e6:3e:16:a0:27:97:a9:5a:c0:3a:71:
                    8c:16:77:2a:e0:9c:c2:76:87:96:d8:4c:7d:16:76:
                    b5:41:4d:74:41:b7:63:cb:65:a7:05:41:10:23:10:
                    69:ca:d7:a0:a2:2d:b5:9a:c9:25:f3:3e:4f:5b:93:
                    df:72:95:8c:3d:3a:d5:16:50:16:d2:9b:b3:ca:54:
                    ed:18:da:85:4c:ba:22:61:58:64:30:71:1e:f0:88:
                    a8:d0:2b:50:8e:6b:17:5b:a1:a8:df:fb:f1:dd:fe:
                    be:25:a0:05:6b:17:3f:f7:c4:ce:bb:f1:0d:ee:ec:
                    95:b8:7e:19:0f:2d:86:dc:64:0a:7e:8f:8a:d7:d8:
                    ab:08:cb:a9:25:32:59:89:6a:6c:07:22:c7:c7:fd:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:D2:28:B4:DA:E1:3B:99:87:1F:C0:FA:E1:48:25:64:43:65:19
            X509v3 Authority Key Identifier:
                keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5b:87:18:66:c8:16:5d:94:43:b6:46:0d:8b:98:84:58:c4:
         02:25:9c:b2:b3:2e:60:e4:c9:ef:15:76:c3:26:25:27:d2:bb:
         a3:55:2d:0a:84:16:1a:7f:91:d0:fb:82:96:d7:82:a3:ab:d2:
         3a:31:fc:ce:e2:16:bd:f7:0f:cb:53:a5:7b:4a:b0:dd:09:22:
         74:79:9f:de:51:98:f5:33:38:6d:c0:66:2d:52:09:b5:fd:da:
         7b:21:bb:dc:18:c7:99:74:8b:eb:21:19:96:c1:38:47:05:2d:
         a0:54:91:31:74:1e:b7:da:ea:13:95:1f:b3:42:15:0e:7d:65:
         07:f5:5d:03:55:2f:df:bf:2b:e3:bf:a0:2d:e6:2c:95:89:0d:
         b4:66:4f:8c:c8:8f:72:2a:64:0a:51:d5:e5:23:68:cb:da:d7:
         a1:32:18:89:c8:26:b5:88:fd:4c:f1:15:30:8d:68:c5:51:49:
         fc:0c:28:2d:65:42:07:3a:64:e3:0c:66:43:f7:bc:e1:2d:23:
         ee:5e:2b:21:6f:8f:79:d6:7f:2a:46:7a:b7:fd:f2:98:63:4b:
         28:26:35:b7:ff:ee:64:f6:8a:12:c2:c5:bf:77:65:a1:80:ba:
         cb:34:05:54:dc:ab:c8:b1:b0:0a:60:54:50:33:1d:bc:17:8c:
         77:e6:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:54:19 2025 by rpki-client