Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
File:                     S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json)
Hash identifier:          uSkK6fBFNHm8+y2hnsyv9CGo5RxcGvcufPr6V1vREX4=
Subject key identifier:   76:FB:8C:37:03:D3:EE:78:FB:0D:2B:A0:79:93:5E:35:7F:1F:08:82
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
Manifest number:          0125
Signing time:             Sun 15 Jun 2025 03:54:09 +0000
Manifest this update:     Sun 15 Jun 2025 03:54:08 +0000
Manifest next update:     Sun 22 Jun 2025 03:54:08 +0000
Files and hashes:         1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: q8CLEUTO9hnNp6zsOIbP/qzIRNwUQ1uESBncYSz+z/8=)
                          2: 950812A4C5FE11EFA76A3266C4F9AE02.roa (hash: GtV0FeTeVluX/XanCeN+2QewCWE0y4Wr5uEweqnsLBI=)
                          3: 2B752026906B11EE8F088143C4F9AE02.roa (hash: i5nUZW342vifNZFiCtQR4fCIygdGR2eDt7BNl5170G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077, serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: Jun 15 03:54:08 2025 GMT
            Not After : Jun 22 03:54:08 2025 GMT
        Subject: CN=684e43e0-d332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cc:1c:dc:0e:e7:f4:a7:33:81:e5:56:80:89:
                    9c:dd:49:9c:44:f3:bf:bf:4c:82:22:01:dd:c7:fa:
                    80:2b:ef:3f:75:92:83:30:bf:d5:18:8e:b8:e2:63:
                    67:e0:3a:5f:24:aa:00:62:50:60:1b:b8:66:bb:86:
                    53:d2:37:c2:56:4a:20:24:88:7d:1f:92:32:bc:98:
                    37:af:a9:e2:b3:86:35:89:93:a6:da:33:71:02:3e:
                    a9:a8:fb:9f:dc:54:8d:d4:1d:a9:ac:15:7f:32:e4:
                    36:32:cf:d8:3c:c5:75:66:44:f8:e0:98:03:9f:15:
                    13:7a:6d:37:6a:d2:38:fe:3a:11:75:cc:b9:7f:a8:
                    38:74:37:77:23:ec:d5:b3:67:cc:2b:90:53:d6:b3:
                    d3:d8:8e:11:cb:6b:2a:2f:4c:54:f6:1a:d5:39:21:
                    5e:37:5d:ba:e5:83:91:34:04:8a:25:fa:90:e7:60:
                    7f:f4:13:6a:3b:e5:81:41:91:92:65:20:ad:8e:3c:
                    4c:84:4b:99:5a:11:90:aa:74:1c:f3:4d:cb:6d:1a:
                    87:8e:86:42:96:4b:22:e1:2f:1a:34:71:e3:e0:95:
                    c2:85:0e:78:1a:9f:4f:4d:b6:ce:9c:31:a9:bf:83:
                    06:fe:13:95:a7:63:21:2a:d3:05:73:91:b8:1d:82:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:8C:37:03:D3:EE:78:FB:0D:2B:A0:79:93:5E:35:7F:1F:08:82
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:4f:63:6a:ad:ea:ff:88:ca:09:3c:54:c0:cc:8f:30:21:
         0d:36:70:bf:f5:f8:35:15:0d:05:74:f2:fe:8d:c9:ee:a2:47:
         1c:76:4e:40:33:ed:9c:77:90:27:8d:fa:3f:03:cc:b5:18:86:
         8d:70:b8:d6:4d:61:e5:e2:45:fe:f0:08:a5:b1:03:56:70:de:
         4e:a6:1e:78:72:65:98:44:9a:cc:c7:2b:79:db:91:02:b8:b8:
         8e:ab:36:27:4c:13:54:72:2e:c2:b9:17:a0:e1:a8:5c:15:4a:
         0e:ae:54:27:8f:89:d1:5d:b7:4c:35:f0:7a:2b:9b:20:ef:21:
         19:8e:d7:2d:3f:db:6e:fd:c9:85:7e:14:13:70:be:b6:3f:a9:
         fb:88:df:e7:d8:57:e9:7b:4d:1d:84:7d:51:dc:20:de:de:5c:
         3e:d7:c1:cd:55:91:af:85:e7:fb:aa:c3:98:32:6c:50:35:63:
         01:94:db:c2:ff:f9:a8:1e:53:b2:7c:f4:b7:60:f9:03:15:91:
         9a:98:9f:f2:c4:28:f3:0f:c5:45:f9:2a:40:5e:28:0c:7a:20:
         16:ea:ea:fe:7b:86:dc:1a:1e:1a:32:c2:1a:88:cb:fd:34:dd:
         1f:2d:f9:e7:f2:4b:8c:53:07:65:d9:32:ea:ba:c9:b4:c0:19:
         61:ef:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:35:56 2025 by rpki-client