Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          pnvoOLOsuuEpoXpX6Fb0WynGAxjvcfpogPDQcQ4eqpY=
Subject key identifier:   99:0E:00:7C:3A:0D:5C:18:0C:AF:CE:54:8A:F4:41:60:21:F6:18:0C
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0C0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0BF6
Signing time:             Fri 08 Aug 2025 19:01:49 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:49 +0000
Manifest next update:     Fri 15 Aug 2025 19:01:48 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: 5FeaN+6TV2GZqBKLb5FhLz5f5Szrl4LcH3dw/TvJC3w=)
                          2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=)
                          3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=)
                          4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: Aug  8 19:01:49 2025 GMT
            Not After : Aug 15 19:01:48 2025 GMT
        Subject: CN=6896499d-0a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:c7:2a:b4:44:e1:bc:83:b3:98:4b:13:01:
                    c3:4d:d6:14:c8:20:1b:83:a0:67:6a:ee:f5:7f:5f:
                    7d:c5:ae:59:82:47:20:68:a8:87:88:8d:26:0b:1f:
                    1c:3b:96:bb:3a:21:ff:32:9c:ce:34:37:19:1f:62:
                    47:e2:a2:26:41:99:99:29:99:e6:1a:cf:23:b2:3c:
                    9e:f3:ec:47:e4:88:cd:cd:90:ff:ac:64:ce:66:03:
                    46:b1:87:b6:5f:b6:c0:84:43:42:30:44:f2:ed:e4:
                    00:3e:2c:3d:fc:52:33:c1:c4:c9:c0:e8:1a:c1:13:
                    59:02:03:7f:bc:f9:7a:95:68:dd:dc:8d:ed:a5:08:
                    17:e4:70:bf:ed:f1:6e:50:41:c5:3d:c2:75:33:af:
                    db:44:46:7d:25:31:b1:74:2a:71:e8:e2:7c:b2:d5:
                    9a:28:a7:9d:3e:b7:de:f0:b4:5a:de:2b:78:b6:05:
                    0c:9d:06:ff:ee:71:02:23:3f:4c:69:da:18:71:55:
                    94:bf:67:0e:93:51:46:03:3a:c5:35:a1:6a:31:bb:
                    bb:22:04:2a:4a:98:54:3c:e6:13:5d:fd:07:c8:99:
                    fe:71:bd:0f:9b:43:6d:43:5e:9c:15:c6:2d:87:9a:
                    10:6d:df:b0:50:90:7a:39:33:82:5f:a2:1a:4c:14:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0E:00:7C:3A:0D:5C:18:0C:AF:CE:54:8A:F4:41:60:21:F6:18:0C
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:37:54:12:9b:e2:5d:16:5b:06:4d:be:c1:1f:18:9f:fd:f7:
         25:e7:93:4b:e0:54:72:a9:55:76:e2:9c:78:87:c4:ed:40:62:
         6f:0a:41:58:7e:25:09:63:29:ad:f9:73:39:4d:41:fe:8e:de:
         18:da:3a:b5:00:f6:54:ff:95:f1:b3:1f:61:c5:71:f2:c2:7b:
         31:32:03:8a:83:bd:59:59:02:57:cd:70:cf:c8:39:52:c9:55:
         18:fd:b7:64:d4:af:da:e2:e1:12:d4:c1:2c:76:fb:29:5d:3d:
         d2:85:cd:15:e4:c1:93:c3:33:55:4a:68:b8:05:76:9a:e3:f6:
         54:3d:3e:88:0c:e1:73:69:05:29:36:9d:8b:25:ab:b6:b9:b8:
         06:34:ab:67:33:87:a0:0d:bf:6b:27:98:84:2e:da:2b:4d:84:
         9c:74:26:a0:a3:0e:f9:e9:92:aa:6c:dd:8f:8e:5a:77:fe:6c:
         8c:f3:71:b2:5c:7b:38:26:10:5d:59:6f:b4:e1:76:64:85:7d:
         bb:df:95:90:11:4f:d8:44:6d:ca:0a:22:e9:c4:90:2d:e4:59:
         89:3b:27:d4:73:3e:7e:ae:0c:5f:57:48:d3:60:23:96:68:61:
         14:9f:53:d1:b9:bf:3d:34:de:61:e7:16:ff:d7:e1:96:6e:32:
         56:f2:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:08 2025 by rpki-client