Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File:                     7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier:          tdrEW3n2eo8Elptam4gn1aGO3dWPZYsZbSKNYdsyi48=
Subject key identifier:   E5:AF:B8:DB:3D:9E:23:5D:EA:3A:5D:74:AC:1C:AD:93:E6:9B:30:73
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number:          02D3
Signing time:             Mon 11 Aug 2025 01:39:56 +0000
Manifest this update:     Mon 11 Aug 2025 01:39:55 +0000
Manifest next update:     Mon 18 Aug 2025 01:39:55 +0000
Files and hashes:         1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: 1a/sqWUZcTS7D/PWpm7nQwztZk6TIS7Y6c4a8ngRlow=)
                          2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=)
                          3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=)
                          4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=)
                          5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=)
                          6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Aug 11 01:39:55 2025 GMT
            Not After : Aug 18 01:39:55 2025 GMT
        Subject: CN=689949ec-d239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:7e:b9:c1:f6:ab:9a:a3:94:99:a4:a7:41:
                    74:6b:19:d6:79:a1:cb:3d:5d:b7:49:2b:9f:b0:55:
                    08:3d:cd:dc:ad:2f:1b:8b:0c:99:e5:8a:88:78:26:
                    32:37:fe:31:5b:ca:ed:7b:4a:7b:52:fa:d7:80:5d:
                    74:82:98:2c:27:dd:65:b8:38:14:6b:ce:0d:58:fa:
                    b9:4c:00:90:18:7b:48:1a:5a:ea:29:8a:e2:8f:62:
                    ba:4a:2b:22:dd:21:70:f2:46:e1:68:e1:6c:07:63:
                    80:ac:ba:66:0c:67:77:d4:5f:70:5a:4e:60:99:e8:
                    c0:75:ed:bf:b5:10:68:5b:c4:13:58:f6:a4:6b:43:
                    69:eb:a6:c3:65:c4:34:6e:6e:d0:7e:79:e0:d1:08:
                    89:01:c9:21:67:ae:c2:03:aa:7d:7e:2a:fb:43:d6:
                    ec:40:95:78:38:fb:42:e2:f2:bf:8c:03:50:4f:3d:
                    a3:55:49:b1:c7:26:e4:d9:1d:c9:b1:fd:2f:ba:01:
                    4a:bd:1e:f5:69:98:59:61:dd:5b:6b:53:15:3a:00:
                    5d:50:a8:7d:a7:40:63:5c:c2:dd:73:14:b9:1b:fb:
                    27:bb:af:91:a0:1d:d4:e6:86:6f:82:8c:6c:47:5d:
                    44:d1:eb:79:0e:7c:e9:42:0d:53:51:c4:1b:2d:d4:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AF:B8:DB:3D:9E:23:5D:EA:3A:5D:74:AC:1C:AD:93:E6:9B:30:73
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:26:d8:d1:34:10:e1:72:2e:55:e1:c3:1e:02:38:b4:0b:15:
         3d:e1:9d:62:24:92:18:45:60:a1:9d:ae:d3:96:9e:a5:f3:e7:
         fe:33:bd:f6:f7:62:58:b1:4e:d8:03:c1:24:14:40:27:87:90:
         58:ea:5c:07:ed:48:7b:ae:51:4e:8d:dc:16:21:e4:ef:c4:08:
         bd:ed:26:f4:03:be:75:f8:13:26:1f:93:ea:53:5d:bb:23:b0:
         5a:8a:37:27:62:6b:e9:53:8c:14:08:83:4c:3a:e3:00:e2:ba:
         e1:38:37:f0:78:6a:d1:e4:19:b6:13:00:a9:e6:30:0b:a6:e2:
         a1:28:89:7b:ec:39:5c:51:28:4d:4b:da:e0:d8:58:58:9f:26:
         c3:d2:2d:4b:9e:8e:1f:e8:de:f4:94:26:41:f2:2d:03:71:d3:
         55:e6:2e:8b:ea:44:74:29:08:92:6e:bf:b7:6b:e6:19:2a:b1:
         07:7e:e3:1d:f4:6b:8d:21:bc:01:d2:12:68:a0:ba:a2:09:26:
         68:5c:48:26:cd:fb:6a:3e:ef:2e:30:32:b1:67:21:ab:71:3b:
         b0:d3:9f:2d:98:99:63:b3:80:3b:9b:1e:4d:88:24:22:71:a2:
         1c:30:ed:d1:c5:0b:ec:04:76:24:e2:21:ea:21:b2:55:3d:df:
         ce:61:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:03:04 2025 by rpki-client