Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File:                     7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier:          LEjJe3wuOcQy0OZx6iYhvghsznDxHCHOrNRSI9WHfIY=
Subject key identifier:   2A:64:12:87:58:88:82:8D:8B:38:90:EE:B5:FB:D5:20:7B:C3:21:E1
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0737
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number:          0632
Signing time:             Fri 08 Aug 2025 23:48:48 +0000
Manifest this update:     Fri 08 Aug 2025 23:48:48 +0000
Manifest next update:     Fri 15 Aug 2025 23:48:48 +0000
Files and hashes:         1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: gNEXMIv+Ux0ilLyYYRbRWWvK9dfd22X2vmVsdski9A4=)
                          2: 217830E8779A11EE903E3E53C4F9AE02.roa (hash: Oo2zi/EhRzrqSn7zolKGlTcLvnJSb95h9fMiilyRJ1I=)
                          3: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: jDK3rjU2bRZFaIfu3sKLZ4tFwr6Zd5H8aDrQGRa1n+Y=)
                          4: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: hwXZ4x1ri2Ou6C07i1b+lYsBLNvtNkvAv3I1gcMsZsU=)
                          5: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: wMMRS1JViaq+eV+0w4JQp61QJ0KALAvEktrddj79/AQ=)
                          6: 87CF4198A65111EEABE0B079C4F9AE02.roa (hash: pitRHAqLkQmUogZxDE8E1GxQICLDXV7ucXUG2kEKInU=)
                          7: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: uxYOnF3d63rIS8oNPOqAfailLlmmUvubJ8OVRGowk6c=)
                          8: E20B36B8D7BA11EEA17F0E83C4F9AE02.roa (hash: 79JSkXVIKOjqvvxYPCuapgw/VjcRIymGOOFJLOS70p0=)
                          9: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: 67lb01k3Vi4epFgUoL++9A+Du7KcTPfzsnSPIkwlWlo=)
                          10: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: aKKPcWxsFmhcohW02ByxbG4rMKcU/VNpAP9UspkmgCc=)
                          11: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: KV9EsH/6ydbVoA8GLbzM6wTi6I3o6HJnv8d8mygGAR0=)
                          12: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: VfvmI0FjW1ey2lLJifvpSJkDuW60zS8WURvHj/vHV0g=)
                          13: 53B4B36E8ABE11EFBEE72D47C4F9AE02.roa (hash: j4P/TBFUyH1GQ0N90QjEIKyVLpvjMN6GTGk+HkdYS4o=)
                          14: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: vRf1NZykh+ineSOtW66kwwiiGz6ZiMQZ7UaMTI/4uZQ=)
                          15: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: Q55QocLIlctTLBOj+usdwg0kwa2pJ3fgOJxquQPk9+Q=)
                          16: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (hash: A6ldS07Hm7AQ/at7ePXVzcAj0Kggqlh1Mm4K0u1Dm8U=)
                          17: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: eYjiRhM0OSOXgSZFBjXv9B3HoCIslAFyNtlJUrBFZyY=)
                          18: 718A62C23EFE11F08F98A223C4F9AE02.roa (hash: n2OzNVpWPiLYK2iyQRyfILw6Z5R5xKksDwwqlzCZ3O0=)
                          19: 9EE451A08ABE11EFA0AEF447C4F9AE02.roa (hash: d2+7r39Eg9rjdbItDMc03X9V+mH89DguSdjx3CwlpWg=)
                          20: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: aAT/94R8V8a6H3ASbqGyXee0COP067Ce/xVNeahwCBY=)
                          21: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: ur7qihZtIhvtBQTlWZmGrFYPbQjlVO+hgQ6kWnGMVbE=)
                          22: 9FA2A3588ABE11EFA0AEF447C4F9AE02.roa (hash: zuHY12P7XQtiC4QFmx7mr2cUPD02esdm9dT5uRSuL5E=)
                          23: 20FF74DEC9D211EE8AEDE469C4F9AE02.roa (hash: IifixTA6Otc2fatf528z+FJwgFi234GZraMzsgqS6Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Aug  8 23:48:48 2025 GMT
            Not After : Aug 15 23:48:48 2025 GMT
        Subject: CN=68968ce0-c421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:b3:ae:23:60:bc:2b:d3:89:a7:1d:c6:e5:
                    ff:91:ee:42:58:a2:0b:1f:b4:ec:db:71:14:56:65:
                    07:8a:2e:c0:af:07:6c:18:2e:69:60:46:53:f8:66:
                    44:51:cc:0f:6b:3a:bc:6e:30:b8:57:6f:04:79:da:
                    90:05:75:6a:ec:5a:f4:6d:66:a3:21:57:a3:e1:ec:
                    06:ab:ee:97:9e:35:79:83:f4:22:d2:7f:ed:26:a1:
                    2b:dc:00:38:17:9f:f0:bb:14:c7:42:2b:f6:83:3f:
                    88:4f:84:3f:4e:dd:43:26:37:80:f7:aa:a1:e1:26:
                    f5:85:16:fa:61:30:bc:3f:10:16:23:c8:ee:f5:74:
                    4c:0e:ce:05:bd:97:1d:5b:51:d0:57:d8:f6:5b:f5:
                    e0:27:26:cb:55:a0:ce:cd:b2:94:5d:03:f2:22:89:
                    36:92:d4:79:94:64:b1:c2:f7:4b:62:c4:31:3e:2f:
                    30:19:fa:91:a6:a8:95:32:6b:38:6e:f5:b7:1d:7c:
                    bc:5b:7f:a8:ce:10:d9:48:92:d4:dd:32:70:aa:f1:
                    f0:29:c4:21:33:58:90:4c:86:d3:d5:dd:80:36:5c:
                    05:1c:74:5c:59:bc:a7:ad:76:58:94:f0:3b:39:57:
                    db:16:c9:84:b3:d9:2b:ac:c5:df:92:31:89:38:9b:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:12:87:58:88:82:8D:8B:38:90:EE:B5:FB:D5:20:7B:C3:21:E1
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:5e:ee:ac:af:11:ec:11:36:74:72:20:4a:75:02:a9:5a:
         ac:89:32:4c:4f:e2:a9:78:a7:fe:1a:ba:c3:2c:31:ee:4f:f0:
         94:4b:9a:c1:1e:12:02:70:fe:9a:57:43:91:b9:a1:e0:65:c9:
         57:14:c7:52:1d:d9:ef:67:b1:b0:7d:83:20:c4:98:10:57:82:
         ca:d3:8e:ad:6b:8a:c0:77:de:1d:7d:19:df:12:2e:ef:97:52:
         e4:31:df:f2:16:af:a0:7d:92:1c:a4:98:b3:cc:f3:92:80:89:
         63:d8:52:dd:e9:c5:32:d5:8d:59:3c:85:bf:30:63:e6:d9:54:
         42:f4:63:49:b1:89:27:5c:bd:1c:a8:5a:1c:0b:33:03:6a:fa:
         77:e5:41:16:e6:39:d4:82:e0:6b:c5:0e:5b:b7:e8:1a:47:32:
         53:69:7c:df:38:37:14:66:81:a0:97:e3:23:ac:50:f6:ea:99:
         7d:c8:57:4e:b1:5d:64:6c:e9:96:f1:2b:56:74:79:f9:df:9e:
         32:f7:a1:49:cd:8b:4d:37:53:88:3b:d5:3e:21:f7:18:8a:0d:
         94:7a:bb:18:d3:ef:77:01:9f:45:9b:69:b5:d2:b5:34:cc:0b:
         a6:63:79:a2:04:09:3b:07:a7:80:02:9a:17:70:44:8f:5c:b2:
         2e:62:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:12 2025 by rpki-client