Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
File:                     V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json)
Hash identifier:          SH1NpyoQGXO7bi0XDFJEeNDSfIgQgdimp0RvdOE8OR0=
Subject key identifier:   A7:A8:84:59:81:0C:6A:7A:F3:9A:42:EF:A9:27:00:63:8F:0A:3D:47
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Certificate issuer:       /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial:       279D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
Manifest number:          2795
Signing time:             Sat 14 Jun 2025 15:36:47 +0000
Manifest this update:     Sat 14 Jun 2025 15:36:46 +0000
Manifest next update:     Sat 21 Jun 2025 15:36:46 +0000
Files and hashes:         1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: lzj7b98d9Bz0gVtlBBPlSyjbFqVwyL50/jt+g/yn2XY=)
                          2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: 0PS4/rj5Rh5J9qWit0urM3xL4w3DPtmcsnvl2FziSAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
                          rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10141 (0x279d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
        Validity
            Not Before: Jun 14 15:36:46 2025 GMT
            Not After : Jun 21 15:36:46 2025 GMT
        Subject: CN=684d970e-b1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:22:b6:b5:46:b6:21:c5:d2:5d:60:2e:62:
                    37:ce:a8:d5:94:35:ba:7e:fa:85:1a:fe:f5:55:d8:
                    3d:a1:8c:16:fe:ff:f6:2d:be:74:af:e9:6c:79:5f:
                    4e:1f:bb:b2:4d:55:b8:8b:57:43:09:b7:c2:92:d7:
                    57:c1:51:24:8c:b8:56:0b:b4:07:dd:f5:ba:16:3c:
                    73:6c:b4:70:11:9c:a7:2a:a9:8b:97:a8:0f:96:2a:
                    08:a0:66:97:34:2f:0b:35:d0:a8:4e:5e:a9:c0:2c:
                    fa:64:d1:b7:20:fe:20:6e:b7:c4:aa:08:cb:50:7c:
                    f1:0a:b1:99:de:2f:e7:ab:73:70:f9:1c:63:c1:da:
                    09:05:bd:5e:25:4e:c7:b3:54:89:61:3f:7a:2c:ab:
                    32:68:4e:e7:b9:db:8d:13:f5:c5:04:09:2c:dc:5a:
                    2b:9a:44:6d:8e:43:be:db:94:af:4d:fd:81:ca:25:
                    95:c6:19:66:35:7f:d2:b4:bf:94:c3:a9:4e:72:19:
                    7d:03:18:a0:37:a0:83:86:74:64:27:3d:d4:3f:8c:
                    58:76:31:86:6b:69:bd:6b:ca:05:dc:d9:bd:79:a7:
                    1b:9d:93:2d:9d:e0:de:49:6e:47:eb:ee:bb:f4:d4:
                    2d:3c:a2:01:36:c4:69:66:70:ff:88:0d:61:b3:e2:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:84:59:81:0C:6A:7A:F3:9A:42:EF:A9:27:00:63:8F:0A:3D:47
            X509v3 Authority Key Identifier:
                keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:d8:93:9a:6e:55:e8:37:c9:d3:28:06:40:c4:6b:ae:c4:
         3c:db:71:68:41:31:52:f9:b6:c9:63:1d:0f:a1:fb:22:a6:fe:
         c1:01:39:a5:93:16:01:e2:1f:8e:32:39:e6:3c:c6:69:21:ae:
         03:b3:50:75:27:84:e0:1b:4a:33:16:c3:1b:33:dd:2c:de:b7:
         69:ea:a6:65:3d:dc:27:96:5b:6c:4e:cf:c3:79:c1:19:3e:d2:
         c1:f7:ff:fa:1b:52:8f:5b:ea:7e:cb:40:d4:cd:2b:79:1e:e7:
         5f:23:ad:72:71:b2:dd:db:9f:ff:8b:66:5d:d8:69:5d:49:e2:
         da:66:40:0a:2e:f2:3e:4f:9b:a6:ad:c2:06:89:99:28:6c:30:
         dd:a0:5e:b8:a2:13:1f:b8:e6:8c:64:a5:6c:54:14:6a:8f:6e:
         8d:64:00:b2:0b:9e:5a:15:51:81:5d:8d:08:55:6e:7f:82:84:
         c3:a2:00:e3:99:4f:c5:92:dd:dc:3a:94:d9:3a:9e:f2:73:7e:
         fe:85:5b:c2:09:78:09:10:16:ed:53:64:81:a1:96:6e:6e:8b:
         68:e8:9c:35:dd:a2:76:f9:fd:af:78:30:ed:eb:6e:1d:e3:34:
         56:72:dd:8c:7d:53:68:96:5c:ee:52:db:40:41:92:49:5c:fe:
         48:74:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:45:48 2025 by rpki-client