Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
File:                     -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json)
Hash identifier:          7KYfj4YyY83mCBDbWa9iH//JvywOTDRXORLiVvXdkBg=
Subject key identifier:   9E:DC:2F:D3:2E:1A:C6:93:75:C2:58:F7:29:07:5C:CD:1D:41:73:4E
Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
Certificate issuer:       /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
Certificate serial:       0C7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
Manifest number:          0C77
Signing time:             Mon 04 Aug 2025 18:32:08 +0000
Manifest this update:     Mon 04 Aug 2025 18:32:07 +0000
Manifest next update:     Mon 11 Aug 2025 18:32:07 +0000
Files and hashes:         1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: p/tybki5ZS4B+Z6atwHRWKgv96S6XFiX1/xtJxCaRUY=)
                          2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 18:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3199 (0xc7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
        Validity
            Not Before: Aug  4 18:32:07 2025 GMT
            Not After : Aug 11 18:32:07 2025 GMT
        Subject: CN=6890fca8-cc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:52:0a:3f:9a:ec:2f:ba:f1:ef:17:23:e8:01:
                    88:8d:e5:4e:be:73:2d:00:4d:5c:b1:62:5c:61:55:
                    98:e3:49:95:f8:da:ab:69:6f:4e:2b:63:1f:e1:0a:
                    c1:c7:72:95:09:ef:2a:c4:60:63:35:b6:0a:4a:19:
                    bc:c1:38:c0:ae:91:64:6b:e1:35:77:b0:b6:a5:9a:
                    f9:31:81:66:d5:ef:c5:b7:85:39:c4:d1:5b:1e:d5:
                    7f:56:ce:ac:bb:fd:0f:55:3c:f9:41:23:a8:2d:76:
                    ab:8d:31:84:4d:0d:8e:08:15:d0:52:39:84:33:3e:
                    4c:e6:5f:d9:f8:2c:c0:fe:7b:a1:76:a1:ed:c1:e1:
                    7e:a1:ad:06:01:64:aa:b3:2d:0d:ef:50:5f:2b:da:
                    37:54:a4:c7:1d:a1:bf:a6:8b:7d:7b:45:4d:71:51:
                    33:c4:5e:52:20:46:26:99:8e:1b:56:73:94:de:d2:
                    ba:7d:7d:8a:c0:41:5b:30:93:73:47:f5:73:b8:d1:
                    88:95:48:74:05:1d:93:77:97:aa:e3:bb:31:79:a0:
                    02:b6:85:75:52:8b:fb:6a:80:17:4e:f8:e1:8c:06:
                    d2:78:4c:89:90:3c:95:1f:5d:5d:29:2c:79:42:e4:
                    99:70:0a:d5:83:c2:cb:a4:15:08:b6:83:ad:b6:64:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:2F:D3:2E:1A:C6:93:75:C2:58:F7:29:07:5C:CD:1D:41:73:4E
            X509v3 Authority Key Identifier:
                keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:1a:2d:61:28:2b:a0:7e:46:49:34:30:21:5a:32:bb:30:
         6d:98:11:5b:06:bc:9e:11:a7:16:2b:42:dc:09:59:41:ad:75:
         34:83:1b:f4:16:54:c8:b2:f7:40:a9:e2:25:8e:58:81:93:97:
         02:11:13:ba:33:32:5b:bf:21:d4:02:77:f5:05:5c:ae:2a:a2:
         50:a1:3b:22:d4:f3:94:6c:01:a1:2f:56:55:83:37:98:fd:3b:
         7a:5d:de:9f:cd:52:dd:57:a2:f1:d8:8b:15:57:bf:97:36:61:
         8c:c6:e3:0f:f9:f3:ce:f4:bd:be:e6:a4:ea:0a:45:57:1b:83:
         60:e7:d1:e5:19:4e:f3:0f:91:db:79:e0:c5:6d:17:bc:32:e2:
         cb:28:06:d4:17:df:14:6b:b1:ea:35:0d:9a:00:82:9a:da:4b:
         8b:12:50:bb:2b:96:7a:f9:a7:44:7e:5d:02:95:2c:bd:6b:b9:
         3e:82:4d:cf:62:a2:d1:0c:f7:c0:3c:9f:ac:cb:1d:6f:d0:e1:
         25:52:a2:fd:df:83:ca:d3:ea:5a:bc:e6:cc:0d:f4:22:bf:00:
         e3:d7:62:28:42:1f:9e:c8:0b:4d:3b:e5:ff:60:21:f2:79:94:
         8d:de:fd:fa:f9:57:70:ce:f4:01:47:ee:f1:6c:b1:d0:6e:9b:
         bd:f9:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:01 2025 by rpki-client