Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          fHlH292WCpClfOsX5Q3vOi2rQ3qKac1789vdaenwy6Q=
Subject key identifier:   6F:85:9F:4C:45:9C:BA:25:62:72:C7:36:23:A0:1D:37:C0:94:34:60
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          0203
Signing time:             Sat 09 Aug 2025 02:39:50 +0000
Manifest this update:     Sat 09 Aug 2025 02:39:49 +0000
Manifest next update:     Sat 16 Aug 2025 02:39:49 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: /OAWN+tlb8HyGpdfTwx3HLSuMSRujFPjnhWyH1rcVks=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 3spAcopzpeJWyW5mR0mGk38MM078PmmdgI27LOSYIH0=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: aYUm1aVtuDy+5vYCksuuiVbwXJaF0tNfwYSEMBfgydU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Aug  9 02:39:49 2025 GMT
            Not After : Aug 16 02:39:49 2025 GMT
        Subject: CN=6896b4f5-04db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:11:36:ed:89:96:56:44:45:4a:ad:cd:23:e4:
                    f0:3e:1a:54:0b:73:7a:01:f6:6f:76:a0:4f:d0:4f:
                    28:8a:44:b1:7c:cf:62:9c:6a:f3:23:ee:0a:ef:f7:
                    47:f0:2d:20:d6:cc:5d:a8:77:03:8c:c9:4a:1f:c5:
                    95:a7:11:ec:02:7d:85:0c:8b:fe:be:87:f9:15:9a:
                    5e:be:20:bd:a8:98:9b:94:34:ad:38:96:64:6a:29:
                    ba:6c:8e:89:66:38:35:bc:2d:fd:98:7e:a2:40:98:
                    61:70:5d:db:06:ec:11:67:6a:e4:a9:1d:d5:5f:b0:
                    44:85:27:dd:18:ca:ea:18:ce:c1:4c:b3:22:bb:1c:
                    65:96:75:02:9e:98:40:62:bf:c9:16:d8:65:bd:8f:
                    3b:d2:7e:48:79:42:20:ff:f1:0c:31:b2:13:f8:36:
                    a0:5d:b8:d7:5c:7c:da:ce:6d:6b:f4:cc:ff:8a:0c:
                    4b:b7:92:20:23:68:b4:da:fb:3c:b1:bf:d4:d3:a8:
                    c9:08:c3:92:ab:3e:18:a5:f2:33:2a:a5:29:09:6a:
                    fb:d0:83:fd:69:f2:aa:9d:1d:d9:82:87:59:52:2b:
                    37:61:3a:3a:24:bf:0e:39:7e:55:b2:2c:47:bc:69:
                    90:9b:c0:6a:62:76:a2:76:9e:31:f0:c2:49:2c:a8:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:85:9F:4C:45:9C:BA:25:62:72:C7:36:23:A0:1D:37:C0:94:34:60
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:90:fa:76:10:28:92:56:cb:a9:8a:64:33:01:04:2e:f5:dc:
         c7:48:84:d2:74:82:4f:4d:7d:04:0f:89:73:33:84:47:b6:84:
         d4:02:20:97:69:b8:a2:ce:ca:b2:ca:70:0b:2c:be:b2:06:9a:
         1e:58:40:a6:32:af:c1:8e:ac:d1:49:6e:84:53:58:7b:52:f8:
         ef:52:9f:21:b6:35:cc:3d:0d:58:23:57:6e:24:70:17:bd:72:
         c9:77:e8:3f:d5:40:c2:a4:22:c9:ec:4c:58:12:d4:5a:ef:73:
         b7:de:dc:74:aa:d2:ae:79:f4:95:96:fd:c8:3c:8f:6c:06:b8:
         b6:0a:c0:22:e2:f8:8e:2b:09:eb:55:1b:ac:e8:e5:ab:6b:d2:
         8c:46:06:ce:6a:3f:5e:b0:aa:3c:2f:fa:34:b8:91:02:eb:21:
         d0:19:b1:aa:01:09:39:af:88:d1:24:65:22:97:82:58:c7:45:
         5d:b4:0a:aa:ba:5c:05:00:5f:6b:a4:2e:7b:79:19:7a:b8:e0:
         8d:58:ee:74:86:58:a3:f3:2a:93:e6:06:76:48:81:2c:92:bf:
         1b:c0:48:1e:26:b3:9f:af:24:8b:89:d5:b0:6d:3e:ff:36:7b:
         f4:0e:f3:97:85:74:cd:80:b4:d9:9f:b1:02:d4:79:63:3d:be:
         87:32:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:19:07 2025 by rpki-client