Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          Bb7jkN2ndoqWwTr7AzD3OWwCgIbCJ/QfHzNRs+OekrE=
Subject key identifier:   20:3C:69:C3:4F:AB:41:DA:27:28:67:BD:43:3B:A6:15:30:F2:00:82
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          012C
Signing time:             Sat 09 Aug 2025 04:59:20 +0000
Manifest this update:     Sat 09 Aug 2025 04:59:20 +0000
Manifest next update:     Sat 16 Aug 2025 04:59:20 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: nZIStnI1pnVsDKzzoEo0+4SqnNT9G6cOMhkPNSUQgO0=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Aug  9 04:59:20 2025 GMT
            Not After : Aug 16 04:59:20 2025 GMT
        Subject: CN=6896d5a8-ec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:36:59:bc:11:6c:53:d9:55:b5:b4:d6:00:
                    9d:5b:44:5f:e8:c2:d6:18:9d:89:ad:d7:62:ee:f7:
                    69:13:86:6f:4c:09:9e:91:a3:9d:de:66:9b:d4:39:
                    45:86:77:f8:b8:36:54:0b:77:b7:3c:5e:61:49:dd:
                    26:9d:4f:fb:e5:a1:2c:65:70:37:25:bf:9b:2b:ee:
                    96:ab:11:22:82:76:bb:68:70:b9:f2:0e:db:f4:16:
                    02:dd:f7:e0:69:2d:51:00:26:fa:d1:39:9c:8e:6f:
                    5a:59:19:6a:d8:2b:6d:c1:cb:6d:e9:f2:c8:57:cb:
                    51:1c:ae:62:7c:7f:6e:5b:76:a2:16:81:29:09:39:
                    f2:be:98:a6:9e:c1:6e:07:2b:0c:c5:21:f7:3c:c2:
                    40:03:cc:64:e7:ce:c8:2b:11:ba:7e:0e:6d:44:ff:
                    4b:0e:0e:15:fc:1c:1d:99:c8:8a:93:1c:45:ad:54:
                    c2:9f:0d:73:96:42:f2:ea:f5:b2:4a:99:d0:f2:67:
                    49:44:31:2b:74:32:71:c2:9e:2a:8b:72:86:74:bc:
                    85:de:af:42:72:47:e7:66:35:9f:c7:83:d7:52:3b:
                    0b:ab:5c:a3:bf:ac:3d:c8:40:e3:06:63:5b:51:3c:
                    02:27:ab:a5:13:12:3e:b3:3b:4b:7b:5a:0c:c7:03:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3C:69:C3:4F:AB:41:DA:27:28:67:BD:43:3B:A6:15:30:F2:00:82
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:42:81:79:8b:f3:49:32:c9:09:b3:c4:d9:77:3d:03:a1:
         e8:93:c0:33:06:ce:0e:9c:a4:f7:43:9b:8b:b8:bb:db:ee:42:
         13:1b:f1:2d:2a:18:f2:d5:42:96:96:e6:4a:ea:b1:d8:0d:1a:
         50:50:48:86:13:51:fe:bd:5a:0a:5a:ee:2f:4c:ca:80:29:74:
         dc:c4:e3:43:1e:61:68:c6:f0:87:52:36:1f:81:f8:67:14:98:
         cb:19:1b:39:85:88:c5:22:4a:9c:89:02:ff:24:17:db:ed:25:
         43:f0:97:5c:fd:6c:c5:df:7d:cf:6d:59:15:c1:2a:36:81:c8:
         92:d5:47:a0:61:5d:2b:ed:9c:2f:46:56:78:89:41:13:dc:5c:
         a0:b2:f9:5d:8c:59:4a:61:40:b9:83:f2:91:d9:d9:4b:37:bd:
         44:2e:f9:cf:6a:71:91:c5:d0:b2:9b:3f:56:a9:94:34:07:e3:
         ae:77:35:b9:70:89:66:cc:9b:76:28:54:2a:be:76:9a:39:9d:
         a8:fd:53:ec:70:91:8c:f0:f5:96:a3:03:a7:f8:f8:f2:d8:03:
         b9:f3:83:41:69:32:62:14:31:b9:2f:61:25:18:93:3c:3c:b0:
         1a:eb:fa:64:1e:b7:a4:dc:3b:52:cc:dd:3c:57:b1:9e:7e:7a:
         7a:6d:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:26:35 2025 by rpki-client