Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File:                     B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier:          tLQJvQ1xLtwEzVQOOE2rU7sKzwmj/JKYD0Kbe08Ps1E=
Subject key identifier:   52:B9:64:BB:6E:AB:7E:CD:1A:DA:9A:7A:A6:59:5A:32:A0:9E:60:33
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer:       /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial:       0605
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number:          05F9
Signing time:             Fri 08 Aug 2025 23:20:17 +0000
Manifest this update:     Fri 08 Aug 2025 23:20:17 +0000
Manifest next update:     Fri 15 Aug 2025 23:20:17 +0000
Files and hashes:         1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: ANHPFtNasG+x97w7EkyovDVvhO6/NcEA0pdud5tYb8s=)
                          2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=)
                          3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
                          rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
        Validity
            Not Before: Aug  8 23:20:17 2025 GMT
            Not After : Aug 15 23:20:17 2025 GMT
        Subject: CN=68968631-5aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:fb:9a:89:c2:86:8d:49:2d:7b:7d:08:b0:
                    51:2d:0a:0f:9c:00:12:c8:e3:f9:1b:48:0b:59:22:
                    df:bb:0a:51:b1:9b:97:d5:fe:65:3b:19:96:eb:c2:
                    78:58:0f:43:e8:d3:ee:6c:33:2f:2d:97:34:44:dd:
                    90:1a:06:67:ee:9c:69:ec:16:84:89:c5:3a:5a:f3:
                    f5:eb:ef:85:8f:ba:64:5e:23:b1:e5:d8:48:fd:56:
                    28:0f:4b:e2:f8:48:49:74:36:59:06:fe:94:df:06:
                    f8:c3:70:d2:c1:7d:a2:98:26:b9:e6:77:e1:b5:a5:
                    35:d8:a0:90:9f:6b:a7:f9:d9:a7:82:ea:a4:de:72:
                    01:35:63:5e:27:5e:12:08:cc:e1:4e:43:0b:7c:36:
                    21:3e:6b:91:64:fc:7b:bf:be:ae:91:3d:a4:52:2c:
                    c5:c5:5a:cd:d1:1f:82:b7:30:11:54:e2:f3:d0:09:
                    d2:94:a2:6d:75:c8:91:bf:06:25:8d:a0:76:6e:85:
                    7d:cc:fa:0a:e0:f9:fb:5b:d4:a3:d3:bb:1c:bf:40:
                    91:6e:b7:76:1a:91:88:78:74:d4:39:cc:21:9c:40:
                    f2:bd:9e:2c:4a:ec:20:e4:14:6b:07:58:70:9d:2b:
                    93:e0:21:04:49:09:2f:4b:db:f0:1b:25:84:92:c5:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B9:64:BB:6E:AB:7E:CD:1A:DA:9A:7A:A6:59:5A:32:A0:9E:60:33
            X509v3 Authority Key Identifier:
                keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:c6:30:a8:6f:57:42:b8:c0:a0:75:9f:55:3d:70:93:f0:
         8f:70:70:24:db:ca:a6:9e:cf:df:60:d9:64:35:11:b7:e7:dc:
         ee:31:2e:59:68:ec:2a:b4:d3:9e:79:fe:0e:f4:87:3e:64:a4:
         50:a5:3e:1c:3a:d8:70:46:ca:bc:9f:13:96:af:d1:ed:d6:c5:
         da:ab:28:be:ad:c8:18:10:05:ed:68:49:4e:51:e1:52:86:44:
         19:5c:4f:3d:ce:dd:14:13:9f:d0:9a:50:51:27:91:dc:0f:8a:
         46:df:bc:ca:37:e4:71:f8:b1:e1:f3:a2:09:ea:6b:b2:56:07:
         23:80:2e:e6:5c:e7:24:70:5e:23:b0:77:8e:3e:12:69:2f:63:
         b9:8a:eb:8d:be:34:4d:63:08:6e:a6:05:e6:c3:43:20:97:b0:
         b0:99:8d:ea:49:7c:cf:6a:f9:29:86:13:1c:94:a1:fb:3d:50:
         74:e7:1d:3e:40:7b:e3:a1:c4:bf:4c:7a:14:7a:44:1b:b9:a0:
         f5:fd:30:ed:18:ff:bf:65:70:51:b9:3c:f1:20:89:97:32:97:
         71:5e:f1:d4:2b:31:fd:7e:d8:f4:61:1b:4a:64:10:bf:49:35:
         66:0a:f4:6a:4d:e5:ef:83:e6:7d:39:e3:08:4d:9d:d7:39:a8:
         4f:44:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:57 2025 by rpki-client