Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
File:                     76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json)
Hash identifier:          dXW3ozEMbKetmztmg3UaZDFYCcKeBexU3XXfiOWsOPs=
Subject key identifier:   58:12:3D:66:8C:A4:1E:17:84:B3:8E:D3:65:D6:38:4B:FF:ED:66:00
Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45
Certificate issuer:       /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
Certificate serial:       0768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
Manifest number:          075D
Signing time:             Fri 08 Aug 2025 22:03:08 +0000
Manifest this update:     Fri 08 Aug 2025 22:03:07 +0000
Manifest next update:     Fri 15 Aug 2025 22:03:07 +0000
Files and hashes:         1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: eywJjimHUiDLgghdanishSFPWsSwO2PozW0Q8qPuUo8=)
                          2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: BtJQntraWj3X9XmZWJOEGn+Y1wojJqx0bXvw8A5EV+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
        Validity
            Not Before: Aug  8 22:03:07 2025 GMT
            Not After : Aug 15 22:03:07 2025 GMT
        Subject: CN=6896741b-7b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:80:27:fb:41:42:e6:d5:ea:49:9c:4e:c9:
                    d9:5d:6c:21:3a:94:36:08:39:99:90:41:80:d2:69:
                    e2:0c:f5:df:b5:4e:18:b3:e7:a4:a1:b5:df:e6:74:
                    bf:be:73:68:e7:9d:33:f4:0c:1a:7e:8b:b0:fa:0a:
                    69:11:1a:a9:0f:ec:1b:84:31:c3:e3:b2:01:f1:3c:
                    08:e6:6f:e2:9e:67:91:c9:bb:14:cd:04:63:d1:57:
                    cc:39:70:ed:67:a7:e9:db:83:c3:8b:63:16:8d:84:
                    dc:86:df:e3:0a:c2:47:19:07:06:2e:1a:ef:64:92:
                    50:8a:e3:10:97:0f:fe:ce:18:f1:ca:6d:2b:a0:a5:
                    56:97:9d:21:0a:1d:49:77:50:a4:8a:6c:7b:6b:35:
                    d1:12:d3:2d:77:8e:df:78:e6:e9:d1:c0:1a:e2:62:
                    5c:b3:96:90:3c:06:52:1f:52:1d:e6:42:66:98:ff:
                    7b:e5:cf:ed:11:41:47:61:37:e5:75:f3:eb:f8:9f:
                    21:0c:b5:7c:11:32:46:d9:63:d7:a4:22:33:56:11:
                    ef:c2:a5:cd:16:c9:f4:9e:4b:41:8a:f6:b2:18:1d:
                    9e:22:50:ff:31:2e:5f:71:1b:e1:b0:a3:d1:ca:0d:
                    8e:ad:e2:a0:42:ca:c1:86:57:41:5a:aa:20:d1:71:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:12:3D:66:8C:A4:1E:17:84:B3:8E:D3:65:D6:38:4B:FF:ED:66:00
            X509v3 Authority Key Identifier:
                keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2e:21:7a:a6:0f:ff:84:74:c4:3b:c4:20:be:23:81:6e:79:
         8c:a2:7d:24:43:97:5a:34:7d:8f:71:7b:b4:5b:64:5f:9d:c9:
         02:22:db:50:65:2b:30:8f:fe:ab:0f:4a:bb:bc:98:b5:4e:7d:
         19:5d:9b:44:8e:5e:5d:0c:c2:45:c1:1b:34:a4:85:77:a1:2d:
         39:92:79:68:9a:89:8e:c4:5a:fe:67:98:0a:65:ed:19:be:36:
         bf:a8:78:22:7d:bd:fa:22:90:8b:18:81:97:1d:4c:a7:32:d7:
         b0:c7:bd:bf:22:36:58:56:56:05:b6:31:91:e2:9b:25:db:1a:
         61:19:05:33:20:67:ee:e7:04:f5:a6:8d:c5:b9:26:a1:f3:bf:
         60:58:dd:93:f3:8e:94:29:bf:7b:be:6f:41:18:90:c5:87:a3:
         48:24:5d:1d:a2:76:7f:c6:9a:2b:48:4a:e1:5f:43:68:cf:c9:
         bd:5e:f8:43:03:5c:39:66:33:c2:6b:78:fb:40:40:42:4c:fc:
         a2:71:dd:e1:8b:4d:d6:57:e0:2c:59:f0:e4:1c:2c:9e:17:3c:
         c2:9c:7a:77:db:f4:bf:e1:89:ab:ae:a8:0d:56:53:96:4f:e0:
         96:39:82:56:29:0e:2e:62:df:4d:78:68:05:91:f7:c5:7f:91:
         c0:58:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:27 2025 by rpki-client