Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          1/ugqMM1EMBVyUa7jshwalQ51HY0jhnJM1XBk/TgBmE=
Subject key identifier:   50:CC:67:73:BE:C1:7A:E6:58:F9:51:B9:2D:2D:39:6D:80:16:77:FD
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          07FB
Signing time:             Fri 08 Aug 2025 21:21:01 +0000
Manifest this update:     Fri 08 Aug 2025 21:21:01 +0000
Manifest next update:     Fri 15 Aug 2025 21:21:01 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: Vwm1VNhnD+DjP5GSpg5FHGi+LSVMX8eq08C99yIpcEM=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Aug  8 21:21:01 2025 GMT
            Not After : Aug 15 21:21:01 2025 GMT
        Subject: CN=68966a3d-1794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:71:71:4a:9f:5e:af:5c:e3:41:cc:e6:24:
                    24:54:ae:7e:f2:90:a2:5e:2a:3d:42:c2:cd:00:e1:
                    0c:e9:58:69:2d:d2:2e:ad:3d:76:5b:d5:6e:52:95:
                    09:c8:a6:46:cd:6b:1c:4f:1e:96:d4:26:9d:1c:5a:
                    4c:a0:f3:60:d2:d5:64:3f:16:d2:8a:28:4c:39:49:
                    07:fc:f3:39:20:7c:0b:1f:8c:24:ab:c9:6a:14:f9:
                    27:96:04:61:b5:5f:a3:a3:eb:fc:e9:0e:22:14:d0:
                    01:51:c5:ae:5d:43:16:17:41:7c:e9:d5:d9:34:66:
                    54:27:f2:4a:0f:c8:54:89:70:74:0d:6a:72:96:e2:
                    ad:cb:fc:76:17:45:6b:1c:6f:ed:6f:af:92:5f:43:
                    77:1f:39:2e:d2:bf:7f:af:08:91:51:12:c7:4d:d0:
                    f0:73:04:b2:3f:c0:99:c4:82:f8:ce:d9:03:7b:bf:
                    3f:78:16:f5:06:09:be:9f:ed:0d:c5:39:ce:b2:1f:
                    ce:ed:d2:aa:0d:60:55:ad:01:6a:85:7c:25:62:f5:
                    0f:5c:ad:72:8d:1b:ec:aa:b5:97:b5:d1:82:5b:5a:
                    9c:56:9b:18:6e:17:35:16:44:91:40:07:eb:1f:ac:
                    4a:06:7e:a6:01:e8:c5:bc:0d:2c:2b:7d:0b:ef:8e:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:67:73:BE:C1:7A:E6:58:F9:51:B9:2D:2D:39:6D:80:16:77:FD
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:79:3e:de:db:db:61:9c:05:46:d9:29:dd:75:9a:25:28:1f:
         8c:a1:34:68:9c:0f:16:b0:0c:64:be:d8:f8:c7:6b:8b:9e:b5:
         40:8b:60:c5:d8:d9:5e:78:b2:d8:43:dc:60:eb:01:5a:1c:2b:
         2a:fd:22:4b:f7:23:d2:46:6c:36:45:5e:1d:45:99:13:9b:f9:
         66:f9:3a:d5:84:19:14:8c:1f:1e:b0:4b:4a:a0:6b:6c:92:05:
         4e:30:54:b0:95:c8:2f:fd:41:93:74:6c:d3:b8:a9:bd:f6:7d:
         44:38:80:e1:f3:80:6d:76:1b:fd:a3:6c:1d:da:55:65:4d:09:
         38:08:78:9c:59:c8:22:5a:8a:0f:2c:ef:5b:b0:d1:88:8e:b5:
         71:b4:e8:e9:c8:6a:7e:d2:28:65:f7:18:0a:12:1a:02:8d:96:
         a9:6f:53:ff:ab:1b:32:c7:e7:d8:ce:ad:4b:2e:a5:d7:0a:ac:
         dd:b2:18:2f:49:41:c5:56:d6:66:15:11:10:57:2e:23:60:2a:
         af:7c:a3:75:d8:9d:4b:9c:44:ee:5f:70:d2:f1:00:f9:01:8a:
         49:43:fa:9d:c8:73:b9:bc:38:4e:d2:65:c7:07:cc:fb:34:df:
         48:1a:57:46:bf:d6:74:fe:43:bd:fd:63:89:9f:47:79:8b:a8:
         0b:5b:fa:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2
RkE2MzRDODEwHhcNMjUwODA4MjEyMTAxWhcNMjUwODE1MjEyMTAxWjAYMRYwFAYD
VQQDEw02ODk2NmEzZC0xNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TZxcUqfXq9c40HM5iQkVK5+8pCiXio9QsLNAOEM6VhpLdIurT12W9VuUpUJ
yKZGzWscTx6W1CadHFpMoPNg0tVkPxbSiihMOUkH/PM5IHwLH4wkq8lqFPknlgRh
tV+jo+v86Q4iFNABUcWuXUMWF0F86dXZNGZUJ/JKD8hUiXB0DWpyluKty/x2F0Vr
HG/tb6+SX0N3Hzku0r9/rwiRURLHTdDwcwSyP8CZxIL4ztkDe78/eBb1Bgm+n+0N
xTnOsh/O7dKqDWBVrQFqhXwlYvUPXK1yjRvsqrWXtdGCW1qcVpsYbhc1FkSRQAfr
H6xKBn6mAejFvA0sK30L744GpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDMZ3O+
wXrmWPlRuS0tOW2AFnf9MB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy
QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz
SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCleT7e29thnAVG2SnddZolKB+MoTRonA8WsAxkvtj4x2uLnrVAi2DF
2NleeLLYQ9xg6wFaHCsq/SJL9yPSRmw2RV4dRZkTm/lm+TrVhBkUjB8esEtKoGts
kgVOMFSwlcgv/UGTdGzTuKm99n1EOIDh84Btdhv9o2wd2lVlTQk4CHicWcgiWooP
LO9bsNGIjrVxtOjpyGp+0ihl9xgKEhoCjZapb1P/qxsyx+fYzq1LLqXXCqzdshgv
SUHFVtZmFREQVy4jYCqvfKN12J1LnETuX3DS8QD5AYpJQ/qdyHO5vDhO0mXHB8z7
NN9IGldGv9Z0/kO9/WOJn0d5i6gLW/oG
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:13 2025 by rpki-client