Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File:                     7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier:          suCnpFx4p2521Wxyo5Xi8d8mT3DX/DyAD5TdC22lotQ=
Subject key identifier:   9F:A1:C7:5D:B2:73:C4:C7:57:B7:F3:2E:CF:1C:93:35:60:4D:53:EF
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer:       /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial:       0A85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number:          0A70
Signing time:             Fri 08 Aug 2025 19:57:56 +0000
Manifest this update:     Fri 08 Aug 2025 19:57:56 +0000
Manifest next update:     Fri 15 Aug 2025 19:57:56 +0000
Files and hashes:         1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: OgdaMwGbLLr3KHc+eV3iLgKGWqUqt/dvA6iiDkjCq9w=)
                          2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=)
                          3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
                          rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
        Validity
            Not Before: Aug  8 19:57:56 2025 GMT
            Not After : Aug 15 19:57:56 2025 GMT
        Subject: CN=689656c4-0e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:89:0d:f8:7e:66:fe:70:76:64:6a:3b:60:
                    d1:4c:bf:74:5f:a1:9c:24:62:01:bd:35:4d:65:bb:
                    a8:95:cc:8a:75:fc:51:c3:2e:eb:50:26:92:13:2e:
                    32:c4:d0:ad:f3:83:53:a8:11:93:aa:a9:72:12:28:
                    ce:06:fb:ab:49:78:bf:62:2f:ba:fb:9c:5a:71:25:
                    ca:18:ee:46:e6:4a:f0:16:2b:1b:82:41:54:62:05:
                    e2:8f:12:82:6a:99:dd:53:9f:ee:0c:8c:5e:bd:56:
                    46:c2:63:03:bf:9a:0f:2a:6e:1b:11:ff:c7:49:07:
                    c7:e4:66:f3:39:00:e7:69:64:88:8a:05:82:88:22:
                    30:f1:d2:a7:db:e0:d9:57:ee:bc:4b:a0:ac:ae:66:
                    c6:d2:a8:06:fa:7e:0c:06:79:83:8f:67:d9:9e:9d:
                    ce:aa:77:93:a8:03:4f:81:32:85:93:2b:67:4a:cc:
                    7b:06:97:36:ac:4b:c6:b7:90:7b:fa:bb:bc:c7:35:
                    f0:d2:28:da:21:3b:f2:9c:64:03:74:a3:29:fe:f5:
                    9d:0b:35:87:a3:62:86:63:58:89:3f:c4:15:0e:fe:
                    7f:b5:e3:30:ed:71:2b:b6:8b:9b:09:24:3c:1d:de:
                    56:7c:f3:68:9c:68:7e:84:ed:f8:ed:b5:97:95:88:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A1:C7:5D:B2:73:C4:C7:57:B7:F3:2E:CF:1C:93:35:60:4D:53:EF
            X509v3 Authority Key Identifier:
                keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:55:11:1f:81:ff:50:ba:61:53:ea:ce:c6:57:ea:ff:0f:6b:
         25:dc:d8:89:89:5e:aa:b4:ff:78:87:9e:aa:72:e0:aa:98:83:
         5c:ef:fa:80:43:ab:92:16:5f:a2:92:4b:5a:63:6b:ee:41:50:
         82:c2:e3:ef:0b:71:c2:c6:30:ec:c4:71:3f:dd:b1:ee:1a:94:
         72:df:0a:74:d0:b0:80:72:e7:cf:8e:a0:64:3d:96:e2:d6:12:
         34:b8:74:ac:8c:2f:4b:33:89:90:9c:0e:4e:aa:02:df:67:4d:
         54:87:ed:41:4f:d1:6b:a0:96:e3:bf:ed:23:18:3c:2e:b8:2a:
         af:2e:c2:6e:4b:0d:2b:77:86:b9:5a:ab:db:96:96:2f:b2:b9:
         9d:5d:34:7e:85:54:bf:a3:d9:da:42:08:43:72:d0:ed:93:a0:
         8d:83:72:ee:02:5f:94:fc:1f:f6:ff:3e:be:3e:48:ad:6c:85:
         e8:d5:87:df:5b:34:89:c9:e2:4d:07:76:57:b9:d6:b3:d2:59:
         3e:9d:e3:65:56:ff:8d:ad:d8:4b:71:a3:2f:b3:64:83:aa:62:
         c9:16:39:4e:14:4e:4e:c7:e4:27:89:53:e7:59:81:06:9e:a3:
         2b:99:01:81:1b:d5:21:1c:7e:b9:31:9d:d7:74:2c:99:ce:f8:
         42:95:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:38 2025 by rpki-client