Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File:                     I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier:          GM265jfJ1bPro664/Sb5UUp3Ll3HRATj8uc+vfiKs4E=
Subject key identifier:   A2:DC:FB:37:EE:BB:FB:C1:0F:D4:32:1B:6C:A7:2B:C3:8A:D9:FD:CB
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number:          06C6
Signing time:             Fri 08 Aug 2025 22:29:08 +0000
Manifest this update:     Fri 08 Aug 2025 22:29:07 +0000
Manifest next update:     Fri 15 Aug 2025 22:29:07 +0000
Files and hashes:         1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: 58axcMIBMTGKCnn7POlPnZlaMLGVYRTkfm3VMrxFg6M=)
                          2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: Aug  8 22:29:07 2025 GMT
            Not After : Aug 15 22:29:07 2025 GMT
        Subject: CN=68967a34-5fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:69:31:aa:f2:6b:82:67:22:78:33:ee:d2:
                    0d:a3:7a:a0:b5:74:bb:ba:3a:b7:fa:b1:08:23:8f:
                    3b:6b:19:ac:30:ab:98:39:48:87:2c:99:63:1f:af:
                    f3:af:e7:a4:a1:8c:1e:04:2a:4d:b4:c4:a3:6e:ef:
                    d1:dd:00:b9:42:44:50:da:b9:06:fe:5f:15:12:bd:
                    fb:43:a7:c2:d5:0f:3d:2c:ea:61:06:14:db:ed:60:
                    39:4e:a2:48:38:ab:bc:29:37:37:0a:3a:d7:63:4d:
                    38:67:b3:0a:37:bf:06:dd:ca:ec:ec:76:51:0b:a2:
                    9d:26:25:51:2a:cf:60:8d:50:13:ca:ff:30:f3:aa:
                    7c:09:78:42:2e:79:e2:10:93:de:8f:69:18:88:05:
                    b1:d5:42:9a:0f:17:f7:49:f4:af:ce:d0:e1:02:a7:
                    10:07:d1:32:2f:07:55:ba:fd:72:8c:1d:f8:b1:34:
                    f4:06:14:18:78:79:0f:da:e9:9d:8d:00:02:9a:9e:
                    78:73:a5:b7:06:c2:18:83:28:42:9c:c2:0a:5e:b6:
                    0a:41:15:10:c0:ff:28:48:2a:93:36:50:98:0d:cb:
                    22:cf:91:ec:bd:5e:26:fe:a4:fc:52:8c:56:51:1d:
                    0f:01:48:05:59:54:13:32:1d:f7:ed:3e:a0:90:70:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DC:FB:37:EE:BB:FB:C1:0F:D4:32:1B:6C:A7:2B:C3:8A:D9:FD:CB
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:72:13:22:01:77:29:e6:7e:cc:3d:2d:43:66:2a:b1:ee:
         fb:7e:d6:be:dc:78:25:d4:17:12:cc:4b:c1:d7:31:95:83:48:
         7f:15:27:34:a0:fc:52:39:d3:a6:e6:c9:70:7c:ad:10:ce:30:
         ca:b1:a1:87:2c:18:8f:0f:46:59:cd:1a:df:ec:3a:57:fe:fb:
         c2:0f:85:db:10:57:12:09:d8:2c:34:a4:9e:64:6d:97:03:78:
         84:54:01:ea:55:c3:e5:37:3f:c7:c5:62:a9:de:55:65:40:47:
         51:29:f3:d5:6c:97:a6:72:d1:e7:fe:48:f1:fc:5d:85:72:0e:
         26:f4:02:7a:e8:be:c2:d9:b6:85:9e:05:59:0e:07:2a:df:51:
         a6:d1:4a:ab:81:09:6d:ea:d9:b2:aa:95:b8:b3:2f:e8:e7:2c:
         7c:00:11:3d:47:45:8f:06:ef:aa:1d:07:88:56:64:64:61:79:
         3a:5a:d9:40:48:a8:7e:56:56:41:51:32:34:3f:1e:b1:e6:f3:
         8c:9d:6e:8d:b3:d5:e0:06:c0:98:5a:7e:3e:e0:b4:d7:6a:4d:
         86:9f:e8:a0:65:43:b5:25:f4:99:b3:b8:e1:79:0f:e9:66:12:
         76:95:df:02:97:c1:ff:f5:2a:a3:f7:da:af:5e:ac:f4:66:ac:
         8a:f6:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:25 2025 by rpki-client