Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
File:                     99M_RV7avj1Mtj-5LkygdhGcNKY.mft (raw, json)
Hash identifier:          wa25jovvdUuyzAycMRLk6IAOInIuM9tI5FnD/7vDb/Q=
Subject key identifier:   A7:10:57:B7:C3:67:F2:6B:15:72:4C:9C:2A:98:51:37:A1:4D:58:E3
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       1518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
Manifest number:          14F1
Signing time:             Sun 10 Aug 2025 16:49:23 +0000
Manifest this update:     Sun 10 Aug 2025 16:49:22 +0000
Manifest next update:     Sun 17 Aug 2025 16:49:22 +0000
Files and hashes:         1: 99M_RV7avj1Mtj-5LkygdhGcNKY.crl (hash: mmG9arM+xC2naz/+FaTp1kW8AC0HPpXCd/6CRVW/cKQ=)
                          2: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (hash: uS/KrDEFC7iqKMiS9Y2U7HdiB60w0wJhc2LLnQsQVWs=)
                          3: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (hash: R6pljQF1v0TIi/bTrrOuqqi1FBdqbzDk+zTv0UZCDuI=)
                          4: 74D88B52FF6511EB95D39078C4F9AE02.roa (hash: /hWvI/RGNzRFNiiVo7H5wl0U608wQrrqfT3hjh2kWqo=)
                          5: A2DA1898656911E889701022C4F9AE02.roa (hash: QYbquK62XWSTn4PRkMXoR4nfMTLLaW92RH4A36uEYDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5400 (0x1518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Aug 10 16:49:22 2025 GMT
            Not After : Aug 17 16:49:22 2025 GMT
        Subject: CN=6898cd93-9889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:e1:24:50:03:5c:58:50:82:7b:64:e4:62:
                    28:53:94:38:fb:52:3c:37:ac:b1:3c:38:e0:cd:4f:
                    54:da:db:3d:43:19:2a:cc:da:6b:fa:7c:62:b6:c5:
                    d2:60:dd:c3:d4:ce:68:73:d0:c4:09:79:c4:a6:8f:
                    de:97:28:5e:54:6c:b9:aa:c3:a0:67:98:71:63:47:
                    6a:c4:cf:71:d1:41:8f:e7:be:49:07:5e:af:b9:3a:
                    9f:48:be:cd:53:12:a7:f2:2c:cd:ed:9a:3d:89:33:
                    d8:82:b6:08:4d:be:1d:fa:fa:79:40:08:8e:08:df:
                    4c:7d:85:f8:07:ea:36:82:06:a0:bc:17:21:b4:18:
                    56:67:e4:89:b0:62:b6:f9:d7:0c:65:42:22:b6:23:
                    a5:4b:52:a5:02:bf:aa:c3:e4:75:45:9c:1f:69:34:
                    ee:69:02:b1:29:1a:68:8f:81:dd:66:f1:94:81:5c:
                    4d:5f:a8:0a:a6:9c:39:18:29:90:a1:7d:82:ac:7c:
                    cd:70:15:80:8c:61:f3:49:8b:73:a1:7c:36:dc:27:
                    cc:46:89:df:f0:91:4d:36:0a:66:fc:e0:cd:fe:0f:
                    fe:f8:d2:c0:17:21:4c:a0:ee:e7:6a:a0:ed:1f:6c:
                    49:3c:cb:d1:fc:32:9f:20:2b:9d:2a:1b:d5:72:c7:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:57:B7:C3:67:F2:6B:15:72:4C:9C:2A:98:51:37:A1:4D:58:E3
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3b:e1:ce:de:8f:fe:81:8c:d2:af:b3:8b:da:6f:aa:3f:51:
         37:f3:cc:78:99:f0:f3:9c:8e:a3:8c:cd:73:e6:26:5c:12:69:
         7a:d6:b9:95:8f:1c:05:c2:f8:0e:97:a2:cf:29:33:40:d4:11:
         b1:96:ec:55:03:ed:44:34:2a:3f:40:52:d7:8a:37:ce:49:cb:
         c6:ab:64:85:a6:24:1a:74:51:62:e1:67:e9:d8:4e:13:71:7f:
         d0:e7:25:78:ab:76:66:48:09:b5:6d:81:29:a6:c7:2e:c1:e8:
         4f:80:ac:61:24:05:f3:42:0f:84:69:f2:8d:c1:b2:da:6b:61:
         f4:68:05:44:f0:cc:2e:1e:34:bc:9f:9a:c7:39:89:d5:46:7e:
         ed:61:5b:5c:af:66:66:8b:94:68:fc:b6:a8:dc:62:1a:86:a3:
         b7:79:bc:8e:bd:cd:94:78:6c:7c:c0:14:9f:9b:94:36:1f:e2:
         d5:cf:17:61:2d:c6:f8:57:a2:92:20:3e:f2:dd:73:d3:3e:f1:
         e4:69:74:08:16:b2:be:af:d2:20:f9:a6:71:92:62:e1:0f:ad:
         c2:44:ad:86:cd:b5:06:e7:23:d8:f7:0b:38:5a:0e:84:53:2f:
         2b:26:37:d2:f8:1f:c1:55:94:a3:ae:aa:fd:cb:95:a6:af:f3:
         bd:f8:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:55 2025 by rpki-client