Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File:                     7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier:          CdzU/mxevCQIixyVK/yh6i91op3SserTfPsiWW4UgXQ=
Subject key identifier:   F7:B0:C8:EF:55:71:76:88:58:36:95:FF:97:9E:30:A4:81:62:58:87
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer:       /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number:          015D
Signing time:             Sat 09 Aug 2025 04:23:42 +0000
Manifest this update:     Sat 09 Aug 2025 04:23:41 +0000
Manifest next update:     Sat 16 Aug 2025 04:23:41 +0000
Files and hashes:         1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: wolZCmyG94JWySMoW1JizbPeatEGH3aNz+ss5bAGwpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
        Validity
            Not Before: Aug  9 04:23:41 2025 GMT
            Not After : Aug 16 04:23:41 2025 GMT
        Subject: CN=6896cd4d-6f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:70:13:2d:d9:4e:da:8b:b0:ce:70:7e:31:49:
                    31:73:22:5e:17:a0:da:92:be:b1:a3:03:51:44:c4:
                    e8:f5:d2:fe:c6:c7:1e:bf:cf:3b:eb:a5:6e:9e:8c:
                    72:d3:f0:8a:f2:7a:25:47:37:cc:20:0e:a0:2b:23:
                    67:3a:dd:7d:d9:e9:5a:6e:da:b7:39:ad:8a:81:93:
                    36:ac:94:98:12:d9:88:54:d3:b4:f2:42:a1:dc:2a:
                    ff:83:a7:27:95:c8:62:31:0c:66:60:df:1e:38:25:
                    bd:83:9e:7c:40:99:27:0e:70:67:5e:3b:8e:a6:58:
                    e4:92:c6:50:90:76:62:a1:89:a9:72:b1:c4:5f:26:
                    59:9e:5f:19:a7:e1:ed:ff:09:22:31:61:34:ab:4b:
                    15:be:7e:24:57:52:8e:ee:58:a8:1d:00:51:74:8d:
                    ba:03:f8:4b:e2:fc:65:5b:70:78:1b:2e:ba:7d:a1:
                    75:85:8b:e2:9d:af:3c:7a:88:9f:18:98:9b:81:e4:
                    97:15:fa:1e:bb:cf:bb:02:c7:8a:33:f4:df:4e:03:
                    9f:cc:e7:a5:d1:c5:a5:39:1e:5a:91:01:53:15:85:
                    46:79:17:9e:e5:f2:44:6e:fa:56:d2:3c:e4:40:af:
                    c6:fe:ea:e0:01:c9:da:bc:3a:af:a4:28:d2:2f:c1:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:C8:EF:55:71:76:88:58:36:95:FF:97:9E:30:A4:81:62:58:87
            X509v3 Authority Key Identifier:
                keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:85:25:50:d6:d2:3f:10:6e:62:89:d4:7a:29:06:40:c7:44:
         28:a3:36:2e:14:16:d3:05:e3:b0:63:d2:8e:ab:fd:7c:cc:89:
         f1:4e:95:47:78:41:21:68:3c:61:27:a3:06:6e:ed:23:71:4a:
         cc:8a:3d:0c:2a:2b:36:51:71:c3:50:92:1b:5a:5b:51:4e:4b:
         81:f4:62:44:2f:03:b4:19:a9:51:9f:30:31:20:72:a1:00:3a:
         d7:c8:d5:53:33:42:00:ee:2d:ef:52:4b:93:e4:db:66:d4:b1:
         6b:b5:b2:f9:1f:74:15:8f:47:16:26:92:97:ad:a7:22:40:54:
         a3:68:77:06:f7:ce:e8:04:cb:e0:6b:1c:31:03:8a:ed:c0:47:
         1c:5d:dd:2b:81:2f:95:67:18:44:62:db:73:4a:2c:db:b8:1c:
         a6:42:3e:70:80:f5:f5:78:c2:0f:03:bb:36:9f:91:48:13:17:
         af:96:7d:b0:0a:c4:59:fe:68:b1:9c:f6:3b:0d:6f:c2:b8:45:
         3c:56:16:22:dd:c0:2d:79:1d:af:a9:7d:1b:49:48:86:d7:f5:
         b2:8a:dd:1e:df:00:97:ec:d2:09:10:f1:11:cc:d7:a6:a9:af:
         96:6f:f6:5e:66:b7:37:df:82:be:2b:3a:3b:a3:10:ec:a3:14:
         68:24:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:14 2025 by rpki-client