Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File:                     Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier:          Gp1pB0JXs+c755cLPMVsW8X8imgV9rxQllxbKBtfSOI=
Subject key identifier:   BD:39:04:8B:C0:CF:CB:EB:D0:57:7D:1B:E7:E7:F1:79:21:D5:31:41
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       0761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number:          0759
Signing time:             Wed 06 Aug 2025 22:01:01 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:00 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:00 +0000
Files and hashes:         1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: pPXliO16Cxd5YkP1MFBjwjHNK5oaaMwBbDV0M6KplSU=)
                          2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: bx4OdIF/hMTyewKQzRXbYDvV0LVN5invBqXfdlpkEUg=)
                          3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DlksN9MScupAjFsSOvELPpNk78Lxd9jwsZlpaixwA5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Aug  6 22:01:00 2025 GMT
            Not After : Aug 13 22:01:00 2025 GMT
        Subject: CN=6893d09d-69db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:8d:63:8a:29:7d:c3:6d:87:c5:05:85:22:
                    54:24:e1:95:2b:41:2b:80:ba:10:27:0c:d0:d4:9d:
                    5d:e2:68:2f:20:e0:c4:31:ed:4c:bf:aa:4f:36:31:
                    6a:46:1c:c0:25:53:b7:f4:32:4c:47:9b:ff:45:62:
                    89:7c:e4:47:6d:c7:5e:68:dd:35:b8:c8:21:0f:38:
                    07:47:b1:0e:f6:99:77:d4:d6:f5:4d:b0:a7:b3:9e:
                    5a:0b:89:8c:7f:6c:b9:ae:61:fd:05:4c:ed:0b:4b:
                    ff:6d:24:6b:a2:21:e4:18:2b:84:47:b5:30:1c:0e:
                    6f:8f:12:2f:5d:af:74:94:e7:d3:5b:71:e3:cb:a5:
                    56:64:a2:01:63:50:73:48:ed:f4:1c:a1:09:56:96:
                    0b:cf:82:ca:a2:d1:83:6e:5d:3c:57:f6:27:77:26:
                    93:bf:0c:6e:1b:77:61:87:30:7c:ed:bb:8d:a1:fe:
                    63:95:23:a1:17:b4:21:65:4b:6d:b4:00:ae:9b:53:
                    fc:21:4c:8a:8e:45:d4:82:41:13:44:be:05:65:11:
                    a4:fd:9b:e1:7c:90:d3:da:f4:d1:6f:d5:c8:d8:f0:
                    70:83:72:2d:ac:a8:7b:7b:80:8d:2b:56:d8:d9:b9:
                    d1:c2:eb:b1:cc:5c:4d:e3:26:c5:8e:81:27:57:7e:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:39:04:8B:C0:CF:CB:EB:D0:57:7D:1B:E7:E7:F1:79:21:D5:31:41
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:6e:46:f6:7e:a6:ad:67:15:e9:0a:a4:15:ad:e5:bf:fb:
         50:05:ab:d6:6a:1f:34:58:16:6b:51:c9:4f:77:87:18:ec:d6:
         1c:39:fa:61:b4:db:5d:04:03:f9:bd:95:55:90:10:22:c7:c9:
         96:48:c7:a2:38:70:e5:3c:9c:74:22:92:c6:41:44:96:bf:c5:
         dc:c1:85:42:fd:1d:a3:82:54:ea:e9:56:26:ca:bf:a7:1c:25:
         b3:08:2f:c3:00:89:8e:48:6e:22:64:28:71:be:91:e0:80:fe:
         12:93:2c:73:4c:98:c2:7e:12:13:32:bf:ae:57:e0:34:8a:7b:
         2a:a2:1a:52:51:89:7e:3f:45:57:7e:ed:35:25:7b:46:76:2d:
         35:67:cf:5b:67:dd:d4:88:bf:49:40:c4:df:b9:42:29:6c:e7:
         36:16:c9:c9:ce:3c:20:e8:00:8f:94:62:68:d0:78:65:b2:10:
         f1:7d:7e:ea:a1:ac:52:82:75:3f:9c:ab:d6:cd:52:5c:90:ed:
         fd:e5:ff:12:f3:e7:ae:da:2a:45:3d:0f:ed:62:a2:3a:7d:e8:
         1f:3f:8f:aa:bc:f8:f2:af:e4:c6:42:1b:11:66:42:e7:af:7c:
         9c:f3:2d:0e:50:4d:b1:0b:2c:f5:be:66:ab:c8:c9:83:53:c9:
         26:83:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:14 2025 by rpki-client