Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File:                     g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier:          nKO/JxhjladzF8v1Vprp0d1F/yqyCsmEJ+M8RjpdL9s=
Subject key identifier:   38:85:CC:96:21:B1:2F:0E:83:68:F7:D3:74:36:D0:7D:71:31:CE:11
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer:       /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial:       0ECD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number:          0EBE
Signing time:             Fri 08 Aug 2025 17:52:24 +0000
Manifest this update:     Fri 08 Aug 2025 17:52:24 +0000
Manifest next update:     Fri 15 Aug 2025 17:52:24 +0000
Files and hashes:         1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: sa9RxMZaJNw+JHH1uxZycN85O6ZY+t+YlZXbbOYwEk0=)
                          2: E1769D329EF711EABE23195AC4F9AE02.roa (hash: bnxide7jSDy0H4+26/GRiKEkbVdX6Jj48LQNDvhocz8=)
                          3: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: 7smT06syTnNc536UG7njwXY5Lk24IKolME1BG7DDt6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3789 (0xecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
        Validity
            Not Before: Aug  8 17:52:24 2025 GMT
            Not After : Aug 15 17:52:24 2025 GMT
        Subject: CN=68963958-7103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:cb:9f:a8:9a:a2:bf:71:53:1f:7b:83:87:
                    96:ff:28:88:e0:3a:cc:4f:32:46:db:a6:52:f0:dc:
                    ec:5d:73:89:ec:77:df:8f:f7:eb:fe:ec:91:d5:d3:
                    12:17:16:45:b3:88:4c:14:5c:82:12:bf:3c:61:21:
                    ee:20:b5:8f:5d:b3:71:44:bd:27:d6:68:ed:b1:ee:
                    cd:b0:08:5b:de:1f:ee:02:f6:32:dc:e9:62:8e:0f:
                    a5:68:93:61:06:e8:1e:d8:72:c2:13:87:40:13:37:
                    53:15:23:52:ec:f7:e1:99:68:3a:9c:18:fe:ff:4e:
                    3c:34:49:c3:05:91:7d:a7:ba:04:7a:b9:01:59:be:
                    d5:32:44:94:8c:24:35:33:5b:b0:2f:53:40:53:2c:
                    88:68:46:39:4c:e4:8e:e4:80:f8:d2:b2:0e:ee:0f:
                    d6:07:9f:aa:91:4d:67:85:10:26:8f:5b:8a:41:89:
                    4f:fd:f9:60:c1:11:3a:50:05:0d:1c:f3:2b:7c:0f:
                    ea:4e:2a:4a:11:30:89:82:02:37:25:38:db:72:b3:
                    f6:dc:57:cd:cf:bf:49:16:14:1f:dc:46:cf:29:43:
                    4c:93:27:07:63:7f:e5:e9:c0:43:59:42:26:e5:e1:
                    c7:79:17:0c:76:cb:72:07:e3:cc:4d:1b:71:5c:ec:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:85:CC:96:21:B1:2F:0E:83:68:F7:D3:74:36:D0:7D:71:31:CE:11
            X509v3 Authority Key Identifier:
                keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a5:88:cf:8c:89:3a:d1:6c:7e:ff:79:f6:78:54:a4:f4:2f:
         42:b4:22:15:de:12:bd:5b:76:fb:de:01:dd:06:44:c7:cc:e1:
         b7:92:99:20:1b:cf:00:99:5f:bd:5d:5b:38:da:3e:f1:bf:49:
         43:13:52:78:30:78:d0:13:59:e4:bd:3e:9b:af:9f:fe:2b:07:
         ac:64:d3:d4:96:21:fe:93:fc:6f:59:43:ee:84:e1:e3:6d:36:
         33:d1:20:0a:df:be:5a:19:9d:2b:cf:c8:15:59:13:4a:9b:71:
         1d:56:a2:8b:ed:ab:83:fb:57:05:f5:e6:8c:36:88:1d:7d:5f:
         e8:d2:30:14:30:85:4d:59:3b:ab:89:97:e8:24:42:15:e1:2d:
         06:25:6f:13:31:0a:3a:98:b3:e5:7f:88:31:35:f5:2f:d3:4b:
         d9:90:97:b8:09:fc:c3:d3:29:ec:4e:3f:e3:ab:2b:51:d8:34:
         6f:6b:bd:1a:26:73:53:2f:cf:cd:4c:f0:80:df:f4:e1:ab:41:
         a3:f9:38:27:db:49:e2:ed:fb:12:66:94:2d:2d:38:c8:48:2b:
         97:b9:9f:97:61:51:66:2b:85:dd:02:01:18:c7:6f:6d:d2:47:
         bc:20:2c:32:79:df:33:36:55:cc:a9:79:96:90:06:77:4e:b9:
         40:e4:5a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:38 2025 by rpki-client