Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File:                     CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier:          37qIf3MHs7Zwd6RqCy133vl8+EQXhiqG+W8V4kvNA3E=
Subject key identifier:   AB:7C:6B:30:D5:C1:CE:AF:51:16:D9:BD:30:09:15:85:14:05:AD:C7
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer:       /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number:          0201
Signing time:             Mon 11 Aug 2025 02:25:08 +0000
Manifest this update:     Mon 11 Aug 2025 02:25:07 +0000
Manifest next update:     Mon 18 Aug 2025 02:25:07 +0000
Files and hashes:         1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: VNTmquIC/fbbl6s07Wa47YXUJm44IhegyxEDsHXVZ08=)
                          2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=)
                          3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
                          rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 02:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
        Validity
            Not Before: Aug 11 02:25:07 2025 GMT
            Not After : Aug 18 02:25:07 2025 GMT
        Subject: CN=68995483-de93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:19:58:06:25:3c:8e:f4:1d:8b:6c:f1:47:
                    c7:cd:49:e4:82:6b:66:0e:f4:eb:88:96:05:21:dd:
                    b8:a4:6b:f0:fe:b7:c0:d5:5b:7c:bb:4e:d9:c6:1a:
                    54:c5:05:70:10:0b:26:05:11:c9:18:b9:77:fa:dd:
                    ba:71:b1:95:5a:84:ca:b0:0a:e2:4f:94:74:23:97:
                    fa:af:db:1d:47:96:16:00:ac:f0:57:16:20:a0:68:
                    25:b6:77:02:a5:eb:ad:7e:41:0c:fe:33:e8:2b:87:
                    76:69:42:14:e9:07:7e:17:07:44:5d:fa:64:0d:af:
                    6b:ba:84:1d:e6:2e:7a:93:a0:1d:ec:c1:33:d2:70:
                    34:47:78:b9:7b:d0:12:02:b3:72:c0:34:ac:2f:0e:
                    47:19:cc:be:a0:8b:f0:cc:9f:a9:f7:dc:6d:39:bd:
                    8d:0d:0a:36:4e:19:1a:d0:46:bf:d6:43:e8:7b:64:
                    7d:78:18:66:f8:ad:c5:a2:94:fc:19:5e:ce:37:5f:
                    50:e2:25:8d:f5:36:58:24:05:ce:2a:04:6e:72:16:
                    03:63:ec:fa:3a:30:9e:65:28:f8:8d:d8:3d:4c:72:
                    2c:d9:9c:69:c9:d8:7c:08:b3:3c:fb:f6:f9:28:86:
                    b2:b6:bc:b7:98:a7:0e:16:46:9e:cf:00:34:5b:bb:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:6B:30:D5:C1:CE:AF:51:16:D9:BD:30:09:15:85:14:05:AD:C7
            X509v3 Authority Key Identifier:
                keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:ee:62:79:9a:8f:32:67:df:49:3f:12:b2:f0:d1:22:1a:
         47:a5:78:2f:15:3e:63:f0:87:8d:af:8d:97:92:ee:21:5b:02:
         4c:dd:06:51:fe:d7:87:35:32:ac:db:2a:92:e6:ae:21:2e:5a:
         5d:73:0d:b6:0b:a9:ec:68:46:4b:22:bb:ca:5a:a8:7e:3c:3c:
         69:6c:66:40:0c:37:3c:53:5d:cd:db:a9:c2:9b:39:f4:1c:5a:
         bd:cc:73:07:07:b0:c3:43:b9:59:0d:c4:28:08:00:aa:dd:6f:
         e8:dc:30:cb:f3:d8:3c:08:82:4b:f8:56:7d:24:c4:d1:40:07:
         43:25:bc:c3:05:3f:d0:12:d4:82:87:19:06:83:b9:69:ec:8c:
         0b:46:45:2a:f6:75:09:97:14:72:26:80:c4:99:92:23:ed:04:
         46:51:76:87:4f:b9:80:98:f5:1d:12:20:f5:7a:fd:12:ee:fc:
         3f:a3:81:f0:e6:df:e0:28:53:83:02:3e:43:bb:76:35:b5:83:
         30:e3:68:f9:e9:d1:b3:cb:60:4c:05:d5:d1:13:93:ce:b3:67:
         32:82:d5:67:3f:42:f0:e7:da:4e:25:17:35:59:23:5c:71:9e:
         ec:18:d3:ad:cb:99:24:4c:0d:8d:26:65:78:df:e4:de:ba:07:
         b9:ce:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:33:20 2025 by rpki-client