Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
File:                     7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json)
Hash identifier:          kr7RfBmQmjXgUbMJtSY7/3IaDvWmWA1XGmfLbsRX05M=
Subject key identifier:   E5:4C:CB:9E:D1:E0:8E:27:C6:3F:40:58:2B:2A:9D:B3:65:E8:D3:40
Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Certificate issuer:       /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
Manifest number:          011B
Signing time:             Tue 05 Aug 2025 05:23:58 +0000
Manifest this update:     Tue 05 Aug 2025 05:23:57 +0000
Manifest next update:     Tue 12 Aug 2025 05:23:57 +0000
Files and hashes:         1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: H4HtWjsE1mlAdHpNGtRI+wSjj9WqOu6ahYSwvhimErw=)
                          2: F89ECDC443A511F09D656024C4F9AE02.roa (hash: WmYOIdHhJmp20fF6Ocugd6eKuqM04EWvfaYLSQzq950=)
                          3: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=)
                          4: 4257053043A611F0820E8527C4F9AE02.roa (hash: XbT+3cuif/paCabTkMdc9T61fms2dwiji/AHhYWy82A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl
                          rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 05:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
        Validity
            Not Before: Aug  5 05:23:57 2025 GMT
            Not After : Aug 12 05:23:57 2025 GMT
        Subject: CN=6891956e-0760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:48:ba:89:3a:90:83:7b:a7:ba:cd:4c:2b:
                    6a:28:83:99:3b:ad:91:84:f6:0f:cd:bf:6f:c2:71:
                    ce:94:eb:38:5d:56:c3:9e:7b:f1:73:87:ef:15:e8:
                    59:ff:9f:fe:ba:ca:a4:be:12:03:cc:a0:43:ba:f5:
                    7e:47:bf:5b:24:4c:84:b6:da:8b:07:59:a4:e9:19:
                    f3:cc:fd:66:cb:94:73:fc:c5:2c:f2:a7:1b:45:18:
                    9e:13:54:fe:e1:b4:92:39:f1:22:b4:02:ed:bc:e5:
                    85:c3:26:a3:0c:06:85:1e:be:5f:53:81:4c:1f:82:
                    2d:db:4a:d3:f5:92:fc:77:67:a8:2d:07:a5:c4:60:
                    39:05:ef:66:fc:34:3a:33:74:cf:0e:c0:b3:28:a0:
                    65:cd:80:c3:6d:4c:98:9b:37:34:16:3d:69:49:76:
                    93:ba:53:6a:37:2b:c6:e6:e6:4e:7d:eb:82:fd:f5:
                    79:5f:11:28:2f:80:7b:d0:f0:56:ba:cf:e4:13:d7:
                    90:d2:65:92:dd:49:8a:2a:8b:89:02:9b:6b:f7:7c:
                    5e:21:b6:35:52:6c:45:a5:99:2f:5b:6d:82:a9:40:
                    27:0c:cc:5a:ac:2c:54:e5:45:03:b2:34:19:81:f1:
                    f7:63:47:8e:d4:32:ce:f1:a7:22:7f:37:e8:49:fd:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:CB:9E:D1:E0:8E:27:C6:3F:40:58:2B:2A:9D:B3:65:E8:D3:40
            X509v3 Authority Key Identifier:
                keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:0d:67:68:88:bc:6f:b4:51:b7:d1:9b:e4:fb:2c:20:17:
         fa:56:b0:a4:27:9e:dc:b0:67:cc:8c:1a:91:db:ac:0a:ab:34:
         f5:cc:c0:cd:e3:f1:17:53:f0:bb:96:fd:bf:f7:34:e1:e1:0c:
         c5:8d:54:40:49:6f:11:e6:03:63:2a:f4:c0:4a:03:06:20:c5:
         dc:61:dd:a7:6a:4f:be:b9:79:67:eb:05:31:54:89:92:ad:ff:
         e1:98:65:c3:01:19:66:88:bd:02:f2:53:dc:60:c7:2c:55:cb:
         d7:e5:c3:a2:24:7a:a6:90:49:95:00:77:7b:73:7c:18:2e:5f:
         36:34:3b:93:92:2e:8e:12:0e:3e:e9:aa:31:7b:9d:e4:51:c6:
         6e:a4:13:b3:3b:1d:0a:f7:11:9d:df:e5:c6:42:a5:5f:bd:1d:
         bd:12:b4:ed:4d:02:f8:e2:7c:07:a0:0b:ff:e2:3a:8a:86:aa:
         2a:ba:08:3a:4b:29:73:91:bb:35:e1:62:e4:01:43:5e:3c:2b:
         0f:8e:2a:c3:be:14:e8:54:cd:22:77:dd:c9:5a:bf:ce:ab:5f:
         96:a2:83:a4:2e:91:5f:e7:d7:3c:a4:f6:cb:48:b1:79:6b:d2:
         4e:ce:b1:42:c8:e1:be:b9:63:1d:ef:14:fc:d0:97:a1:bb:03:
         d0:d3:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:44 2025 by rpki-client