Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File:                     7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier:          0r3C0b2npBXRrWotPSaE0Wh5D4MxujOnOn92hB7rU5c=
Subject key identifier:   C8:ED:FD:B0:33:FC:74:3B:46:63:50:D2:89:1E:15:57:89:82:F1:88
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer:       /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number:          01CB
Signing time:             Mon 11 Aug 2025 03:07:55 +0000
Manifest this update:     Mon 11 Aug 2025 03:07:55 +0000
Manifest next update:     Mon 18 Aug 2025 03:07:55 +0000
Files and hashes:         1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: G72sxeXEm8KD7/rNAmFe8SzIPXz1ioR/spSH8sp4ey4=)
                          2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
        Validity
            Not Before: Aug 11 03:07:55 2025 GMT
            Not After : Aug 18 03:07:55 2025 GMT
        Subject: CN=68995e8b-05b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:4a:3c:46:31:dd:8e:92:46:9f:65:e4:95:
                    db:ac:48:97:3f:3f:cd:a8:25:2c:96:13:9b:63:1d:
                    43:c8:3a:ad:71:c3:d1:96:a6:a7:69:0b:1c:c8:81:
                    d6:15:db:05:e5:15:90:97:aa:7b:8d:fc:45:a8:36:
                    06:7b:01:d4:e5:2b:3d:f7:66:48:70:87:c5:4b:69:
                    12:bb:61:b7:c7:a1:f2:9c:37:68:df:02:2e:61:77:
                    48:97:06:9c:7f:aa:3a:42:62:34:d8:4e:b6:76:dd:
                    63:f0:e3:80:02:9e:83:d0:ae:1f:3a:eb:7b:9a:10:
                    f5:ef:14:52:5f:a5:a4:9c:78:c7:f7:8d:cf:9a:8f:
                    e8:f7:47:7e:3b:27:9d:57:e5:f1:7d:36:76:58:90:
                    b3:26:86:2b:99:8c:5f:0a:07:6c:08:c6:e0:74:c5:
                    5b:51:19:78:51:1b:50:d1:ed:fa:a8:d9:8a:0d:4f:
                    38:7c:01:05:bf:0c:1a:0f:75:92:81:70:82:a0:7a:
                    19:c2:c1:18:52:35:43:c3:1e:1a:c7:ee:58:55:3f:
                    8a:28:00:c9:56:53:ff:a0:cf:d7:c5:d4:d2:c2:68:
                    0d:25:00:4e:05:93:35:2c:8c:a2:d1:0e:be:e3:21:
                    d7:46:a9:56:f1:01:0b:b6:26:68:63:85:83:ce:0d:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:ED:FD:B0:33:FC:74:3B:46:63:50:D2:89:1E:15:57:89:82:F1:88
            X509v3 Authority Key Identifier:
                keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:94:3e:de:09:3b:7d:91:c1:29:f8:46:ac:fd:35:75:de:
         66:7c:8a:4e:a4:6b:8c:69:36:64:b8:d5:10:b1:b6:41:46:2f:
         15:ed:63:67:2c:ea:40:2f:22:31:7e:f2:bb:a2:3a:d1:96:e7:
         1e:2f:89:90:ab:b5:ec:74:a9:e8:ad:2c:35:e1:12:20:d1:4c:
         84:a1:a4:7b:13:48:50:29:54:52:7d:26:d1:04:db:90:ad:ad:
         00:45:b0:4a:f9:f3:08:fd:cb:6c:45:44:b0:49:17:7f:50:63:
         4e:b8:21:0b:e8:02:52:48:02:bd:4f:51:51:91:e7:e8:88:5f:
         e2:8f:05:b3:58:84:3a:bf:76:91:94:08:ed:57:46:a8:b7:d0:
         c0:82:6c:54:70:fd:2b:40:00:ee:f2:77:22:43:35:f0:66:a8:
         35:64:e8:b0:8f:b4:59:02:f1:d0:09:15:b6:4c:ae:2b:bc:c1:
         72:0e:44:93:40:31:d5:14:77:b8:a9:4d:c8:d4:9d:c3:b6:58:
         0e:dc:26:8f:53:ab:1f:48:4f:a2:d9:f7:18:7f:38:a3:a8:bd:
         0f:40:22:cc:fb:21:02:eb:13:b9:2b:7a:d1:34:16:57:fa:52:
         72:20:ec:e7:6b:7a:85:53:a4:05:fb:ec:14:6e:2a:ea:0b:bc:
         53:7c:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:03:01 2025 by rpki-client