Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          Kc/DxPPnVUALPXnlqP/1e5jBzEWSvT3xEHrN+unsZw4=
Subject key identifier:   B2:EB:92:27:8E:1E:48:E3:AB:19:0B:70:EA:D1:E7:06:E7:AE:E5:0F
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0BF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0BDA
Signing time:             Sat 14 Jun 2025 18:41:33 +0000
Manifest this update:     Sat 14 Jun 2025 18:41:33 +0000
Manifest next update:     Sat 21 Jun 2025 18:41:33 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: 4K8phzhgltOw8/Vt5jibhtztWUtFc4dwUuSHG7Z/LEI=)
                          2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=)
                          3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=)
                          4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: Jun 14 18:41:33 2025 GMT
            Not After : Jun 21 18:41:33 2025 GMT
        Subject: CN=684dc25d-2cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:ea:63:de:5b:a3:59:ad:18:77:e3:cc:63:
                    42:b5:b8:ba:54:18:82:87:fc:7f:9e:75:d5:2e:2b:
                    f1:b3:03:d3:e5:ce:99:69:74:ff:9d:db:95:60:8a:
                    54:0d:12:bc:65:be:43:81:e2:5f:e1:f3:a7:ee:dc:
                    fa:7a:73:fc:1c:5e:5b:c5:28:11:9e:72:bf:45:b5:
                    46:d2:86:c9:31:9b:67:ba:98:9e:e7:4b:b4:4a:ad:
                    b9:e8:77:14:0d:aa:0c:f4:97:ed:2d:cc:d5:80:1c:
                    3d:6d:f2:1d:2b:95:25:c1:aa:2c:3d:8e:fd:49:f3:
                    7d:c5:66:49:b5:06:6f:3c:1a:a5:16:de:11:e7:8e:
                    c8:9b:21:20:24:bf:e8:b9:4d:3b:83:57:05:01:f6:
                    83:79:b4:90:86:04:e6:aa:04:3e:01:f7:c8:f0:97:
                    aa:ab:53:4f:9b:ae:2b:54:c0:2e:a7:bc:cc:29:ed:
                    85:bc:f0:49:9b:32:19:38:05:f3:94:5f:43:17:f2:
                    ea:a9:fb:50:3c:00:5a:96:c6:8a:ef:3f:30:db:9a:
                    25:64:7d:d1:b7:4c:00:16:6d:42:e8:0c:81:a9:e7:
                    2b:c6:27:71:23:90:76:31:00:46:17:55:1c:a3:67:
                    8b:ef:bd:e5:43:fd:53:a2:c0:a9:e5:5b:ec:a4:e6:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EB:92:27:8E:1E:48:E3:AB:19:0B:70:EA:D1:E7:06:E7:AE:E5:0F
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:91:de:19:e1:e3:83:69:09:18:de:e4:8e:a3:51:24:4a:1a:
         00:83:fb:8b:67:5f:00:01:55:da:7d:32:20:46:d6:6f:16:50:
         e4:5f:1f:11:d1:be:7e:e0:49:62:77:ae:4d:b2:51:22:77:d4:
         17:6b:10:fd:7e:bb:61:d7:5b:2b:4c:9b:72:91:73:2d:24:04:
         72:4b:87:44:b0:db:b3:58:8f:0b:d1:22:a4:a3:2e:db:a1:85:
         cf:68:be:8a:57:89:90:eb:04:20:41:1c:4e:ff:b1:f4:fa:cf:
         e5:12:f6:d6:30:34:a3:db:90:25:3e:cb:75:bd:d9:20:6f:0b:
         76:8e:b1:b5:41:61:ca:52:37:70:f4:76:44:11:82:73:16:c8:
         50:f0:39:4c:5d:6c:a6:75:44:e1:a5:85:6f:bb:89:6c:02:e9:
         ba:ba:f9:ac:36:cf:91:6f:b4:6c:73:00:5c:71:62:9f:ac:9e:
         31:e3:0c:92:cf:3b:a0:cd:74:e0:f6:bb:7b:f4:2f:b2:55:ea:
         ef:1c:4e:c7:60:da:e5:80:46:7d:4e:23:2a:35:c6:fc:40:59:
         e8:26:ec:d2:22:bf:fd:b2:02:c8:27:95:58:f1:ad:b0:23:4d:
         a4:8f:c7:f7:ec:1d:07:64:c3:69:90:f2:c5:89:5a:1e:c6:86:
         6a:6e:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:32 2025 by rpki-client