Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
File:                     c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json)
Hash identifier:          qjgoKCqqmcMWzvssoH/qLt08J0DK9qa3LcZOhQKypgY=
Subject key identifier:   3E:E9:96:0C:1D:FC:D2:D6:0E:CB:AD:7E:41:4B:53:18:98:E0:7E:16
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       03C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
Manifest number:          039E
Signing time:             Sat 09 Aug 2025 01:25:53 +0000
Manifest this update:     Sat 09 Aug 2025 01:25:52 +0000
Manifest next update:     Sat 16 Aug 2025 01:25:52 +0000
Files and hashes:         1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: 7tfte2lKu8fSJQy1f4kVEMHTKDJigw6BVeGtmLlqAAQ=)
                          2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=)
                          3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=)
                          4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=)
                          5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=)
                          6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=)
                          7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: Aug  9 01:25:52 2025 GMT
            Not After : Aug 16 01:25:52 2025 GMT
        Subject: CN=6896a3a1-3ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:bd:cb:75:05:3e:5e:fb:b1:d8:c0:15:46:
                    ed:cc:81:61:88:f9:a1:e0:7c:4f:6f:82:5f:54:09:
                    bc:fb:8f:a5:a1:fc:6e:73:01:1e:21:45:c8:1f:9a:
                    6e:96:f7:ed:3b:ed:7b:2b:a9:8f:c8:01:17:f4:2c:
                    52:09:31:3d:67:1b:b1:bc:ba:d9:bd:53:1e:f0:90:
                    db:57:03:0c:e2:16:a9:fc:76:22:20:05:be:9a:82:
                    68:d2:75:9e:22:1f:6c:a3:7e:98:79:0e:a2:19:c4:
                    f1:69:89:0b:e9:94:d6:b3:64:31:c9:02:c4:0a:d8:
                    e9:5c:a5:55:28:ef:46:38:b0:41:58:e8:04:81:45:
                    50:2a:ad:93:38:7c:62:70:b0:78:99:1a:7c:23:48:
                    c1:98:72:f8:95:3c:fe:8a:34:c8:7d:4f:b4:50:14:
                    34:68:cc:f1:b8:58:9c:6a:a7:51:78:88:5a:9b:47:
                    d3:b1:8f:65:f5:c5:29:55:a4:d3:5a:21:c4:7c:3f:
                    c5:15:a3:5a:56:3d:55:a6:e5:09:6e:c1:d1:e9:a1:
                    8c:22:7a:b8:0f:46:8a:e3:da:46:10:7d:7a:46:31:
                    3c:59:14:2f:00:a9:36:0a:ef:2d:45:44:cf:19:9a:
                    00:05:c1:0f:9d:49:69:16:55:6e:1f:34:f8:30:66:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E9:96:0C:1D:FC:D2:D6:0E:CB:AD:7E:41:4B:53:18:98:E0:7E:16
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:41:44:7d:5a:16:1f:e5:93:89:40:57:ff:6c:46:fb:73:db:
         4b:bb:b4:be:3f:63:9d:3e:a7:9f:7f:0f:e3:5c:5a:c2:f0:35:
         cf:d6:55:7e:9d:3d:c0:4c:74:73:9e:37:53:4e:6d:be:4c:80:
         0c:19:75:1f:e8:29:d3:88:77:16:58:7a:3f:9f:30:8c:39:80:
         e6:41:8d:69:17:8f:6f:aa:11:91:82:9f:a5:9f:89:87:c1:d1:
         41:04:cb:d9:06:91:c1:ea:3b:20:4f:4f:f5:42:0d:75:9a:21:
         31:9d:f3:f8:75:6f:8f:ee:de:34:15:d8:a2:2c:81:1f:17:83:
         cf:f5:e0:31:70:be:dc:ef:98:8d:de:b9:dc:35:04:f8:eb:87:
         75:27:6d:c2:90:6f:b8:10:f5:5b:66:24:23:5a:3c:2e:26:81:
         e9:a8:b2:8b:7e:6a:6b:08:54:30:f0:c4:55:88:2c:d0:a0:c7:
         19:07:e1:4d:0c:84:f5:28:5d:d3:c5:31:17:37:a0:3c:95:db:
         cc:92:47:fa:78:33:a8:28:84:24:49:bf:b6:bb:7c:4c:b5:00:
         42:3a:58:e9:3a:ed:f2:31:80:5b:98:57:19:53:61:ff:43:bb:
         e3:64:ba:07:0b:dd:79:c1:cc:d0:11:af:da:14:c9:f9:19:e1:
         54:1e:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:38 2025 by rpki-client