Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          N2eWA+YUE/dUcBQABXHv4adokvmg9uZnDURscxCZU4I=
Subject key identifier:   4B:6C:1F:FF:64:0E:A7:6F:EC:2D:89:6F:1E:D5:96:2A:1E:9E:64:5E
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          07E0
Signing time:             Mon 16 Jun 2025 20:49:29 +0000
Manifest this update:     Mon 16 Jun 2025 20:49:28 +0000
Manifest next update:     Mon 23 Jun 2025 20:49:28 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: RC+vGkf5drfDrvw6wGVuD2f7sGrgN2JGCysy2iF28EE=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 20:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Jun 16 20:49:28 2025 GMT
            Not After : Jun 23 20:49:28 2025 GMT
        Subject: CN=68508358-349a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:32:14:64:3e:d6:57:32:d8:73:96:86:1b:05:
                    57:38:c9:d7:27:f9:0f:74:5b:8b:fa:ff:e6:b6:43:
                    88:21:e6:36:52:cb:6d:13:6f:71:5c:ae:f5:af:fc:
                    87:8e:5e:f5:0a:64:ff:8b:b6:0c:84:b4:0b:38:47:
                    c8:00:ae:8a:b5:86:ed:e8:ee:3d:58:14:f1:7e:b0:
                    f3:89:b0:8c:bd:7c:b6:12:ee:c6:d8:4c:bd:89:85:
                    df:51:ff:17:8d:ee:be:c4:32:c8:2e:2f:2f:a5:28:
                    8c:a2:6f:23:60:dd:3a:b3:15:d1:79:93:f3:41:a7:
                    cf:b1:60:1b:56:c4:d3:8a:cc:92:07:bd:43:97:94:
                    53:de:12:99:5b:61:29:84:cf:a8:75:0b:d4:92:26:
                    b0:44:e5:be:d4:29:db:d8:87:ac:b2:93:b2:f2:a3:
                    79:5e:d7:d3:bd:85:41:a0:a9:c3:cc:a8:24:26:f8:
                    0d:e7:47:43:ad:a1:7b:a6:d8:23:54:0a:7b:79:01:
                    1e:98:14:4b:91:42:c6:4c:78:31:ba:bc:73:44:dd:
                    e4:12:9b:4c:5d:8e:22:f9:a9:38:cd:47:9e:a1:73:
                    a4:5a:52:18:83:a4:30:ca:13:65:5d:b4:a2:8f:cc:
                    8b:04:55:16:ce:95:80:1e:69:de:c1:bb:ed:89:95:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:1F:FF:64:0E:A7:6F:EC:2D:89:6F:1E:D5:96:2A:1E:9E:64:5E
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:d3:77:09:4f:c9:76:a1:f3:8c:66:47:50:94:68:84:6f:
         86:5b:f0:cb:ad:f8:d3:56:72:b1:cb:1b:17:f4:88:11:12:4d:
         52:8b:00:9f:e6:b9:1b:1f:1c:bb:a9:55:da:ab:77:72:e7:69:
         6b:d2:1d:7a:d5:b5:c3:fa:63:17:e6:c6:d9:16:15:f8:33:4c:
         f8:1e:70:75:13:e9:62:3f:4d:e7:39:9b:e7:77:23:d1:14:e8:
         dd:92:74:c6:aa:3e:dd:70:be:d8:41:55:13:4e:a6:c6:8e:14:
         e6:17:34:81:a6:f9:92:8a:22:d8:bf:0d:06:01:d3:ee:26:e9:
         c8:92:80:69:f2:f8:c2:0d:5f:fe:fb:fa:44:b4:56:b2:60:8b:
         f2:c9:fc:ee:fe:3f:0a:6f:e9:e8:e5:36:32:0a:29:7a:67:3c:
         bb:45:70:8c:b5:19:ec:66:c1:05:b9:d8:3e:40:17:90:0c:10:
         55:85:e0:f7:1d:68:9f:d0:71:af:6a:cd:f8:66:7e:04:af:62:
         01:9e:35:25:41:fb:1c:9b:77:c9:3e:9a:95:0d:40:88:cb:db:
         af:73:88:55:cd:ec:7c:d7:50:6f:10:bd:45:4e:a4:47:eb:35:
         47:cf:d9:fa:1d:20:9c:3f:08:36:48:53:07:d6:6f:c4:be:18:
         7f:fd:36:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2
RkE2MzRDODEwHhcNMjUwNjE2MjA0OTI4WhcNMjUwNjIzMjA0OTI4WjAYMRYwFAYD
VQQDEw02ODUwODM1OC0zNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3TIUZD7WVzLYc5aGGwVXOMnXJ/kPdFuL+v/mtkOIIeY2UsttE29xXK71r/yH
jl71CmT/i7YMhLQLOEfIAK6KtYbt6O49WBTxfrDzibCMvXy2Eu7G2Ey9iYXfUf8X
je6+xDLILi8vpSiMom8jYN06sxXReZPzQafPsWAbVsTTisySB71Dl5RT3hKZW2Ep
hM+odQvUkiawROW+1Cnb2IesspOy8qN5XtfTvYVBoKnDzKgkJvgN50dDraF7ptgj
VAp7eQEemBRLkULGTHgxurxzRN3kEptMXY4i+ak4zUeeoXOkWlIYg6QwyhNlXbSi
j8yLBFUWzpWAHmnewbvtiZViaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtsH/9k
Dqdv7C2Jbx7VlioenmReMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy
QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz
SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOK9N3CU/JdqHzjGZHUJRohG+GW/DLrfjTVnKxyxsX9IgREk1SiwCf
5rkbHxy7qVXaq3dy52lr0h161bXD+mMX5sbZFhX4M0z4HnB1E+liP03nOZvndyPR
FOjdknTGqj7dcL7YQVUTTqbGjhTmFzSBpvmSiiLYvw0GAdPuJunIkoBp8vjCDV/+
+/pEtFayYIvyyfzu/j8Kb+no5TYyCil6Zzy7RXCMtRnsZsEFudg+QBeQDBBVheD3
HWif0HGvas34Zn4Er2IBnjUlQfscm3fJPpqVDUCIy9uvc4hVzex811BvEL1FTqRH
6zVHz9n6HSCcPwg2SFMH1m/Evhh//TaH
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:38:53 2025 by rpki-client