Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
File:                     7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json)
Hash identifier:          y7CRK51xa9vtIYzWkEalrbxRgElo4x8sTDlpPMKELPc=
Subject key identifier:   B0:3B:92:32:A6:F6:22:E7:AB:49:AC:2D:59:E6:AC:97:EA:EF:7F:2E
Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
Certificate issuer:       /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
Manifest number:          DE
Signing time:             Sat 09 Aug 2025 05:53:47 +0000
Manifest this update:     Sat 09 Aug 2025 05:53:46 +0000
Manifest next update:     Sat 16 Aug 2025 05:53:46 +0000
Files and hashes:         1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: helcwm7p2IYPjdA83bWo0O0T19bwNCvDQ5yOnwvcCjU=)
                          2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl
                          rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
        Validity
            Not Before: Aug  9 05:53:46 2025 GMT
            Not After : Aug 16 05:53:46 2025 GMT
        Subject: CN=6896e26a-e5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:f4:4d:94:b3:94:d1:60:89:7d:db:32:9c:
                    1a:4e:ff:cd:17:fb:3f:30:6e:db:9e:66:4d:34:cf:
                    78:1c:e7:34:8c:56:0b:3f:f0:8a:3a:70:cd:7e:7d:
                    21:64:23:a5:d8:a2:dc:94:c6:d5:e2:2e:14:11:28:
                    b7:70:9e:44:de:29:8f:37:f9:34:25:aa:b5:0c:cc:
                    f5:ab:12:b0:b9:c3:ff:c8:9a:b8:23:ac:05:d5:6c:
                    4f:cf:7e:7e:f3:cb:4d:52:35:ef:64:de:68:3a:e5:
                    03:03:53:c6:b6:8b:1c:24:eb:9a:a2:8c:ed:93:80:
                    74:7c:55:93:9c:66:dd:c0:b1:36:a7:bd:46:12:93:
                    8f:c6:c3:6e:fb:f3:4a:99:ce:82:4c:3c:5f:b5:bf:
                    33:0d:dc:56:a5:7a:9e:02:8c:3f:18:02:2b:3d:06:
                    a0:cf:8a:2d:66:76:37:45:06:f4:3f:2d:81:2b:b4:
                    6d:32:40:c5:48:ce:01:97:4e:e8:2b:85:7d:54:22:
                    4f:3e:00:8a:36:3b:93:4c:a5:43:d2:f3:45:3e:4d:
                    fd:e6:3e:19:c4:1f:b4:8a:39:76:54:48:df:1f:9f:
                    7a:bb:69:3c:cc:b9:65:6b:29:2b:99:db:de:ad:de:
                    80:05:c5:6e:a8:5f:f4:f3:9e:93:4a:c5:f7:15:fe:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:92:32:A6:F6:22:E7:AB:49:AC:2D:59:E6:AC:97:EA:EF:7F:2E
            X509v3 Authority Key Identifier:
                keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:06:2f:c2:85:1f:8d:03:89:34:a4:bc:e7:8d:5e:f0:09:
         fb:5d:cb:40:8b:2d:17:d3:5d:b2:f4:c5:27:e8:f2:d0:a3:01:
         b8:6b:33:4c:7e:e5:36:cd:53:bb:c7:87:96:d7:e8:12:12:21:
         43:18:35:28:cf:47:eb:b2:6b:d1:64:24:22:c4:90:c2:91:24:
         17:0d:be:e0:1e:1e:13:5d:86:b4:9e:08:c0:4b:54:f5:3d:8b:
         77:2b:1e:3c:7b:b3:fe:24:1f:a5:9a:43:03:46:59:18:95:5b:
         98:77:f7:f1:57:ff:bd:cd:12:99:58:32:38:88:14:6c:96:ad:
         2f:0f:e8:28:25:8f:ea:89:a3:5a:5b:03:86:32:61:d1:4a:10:
         29:3d:cb:a0:c1:04:5c:bd:88:d5:35:10:7a:f7:46:23:cb:be:
         27:a8:e0:47:1e:48:e7:72:80:a9:9a:ca:6f:4f:6e:0a:86:62:
         31:b3:e4:fc:39:31:0f:af:22:91:d7:46:6c:79:d8:4d:dd:88:
         35:76:5b:29:92:39:a8:22:61:09:be:36:69:df:d0:42:b9:71:
         be:8c:42:a1:c9:e8:db:e9:e4:69:fa:b5:e2:00:55:65:a1:08:
         d7:73:87:27:4d:67:bb:30:1f:41:92:af:58:af:8b:39:43:9a:
         33:db:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:01 2025 by rpki-client