Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File:                     N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier:          dV8qU0s8ML/6bKHfCCfjDozv5ci7M2GReohC6q8Mrxo=
Subject key identifier:   91:0A:83:0D:47:29:AC:91:05:E8:31:B0:26:F7:F6:7F:A7:69:CB:38
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer:       /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number:          01CB
Signing time:             Tue 05 Aug 2025 03:22:23 +0000
Manifest this update:     Tue 05 Aug 2025 03:22:23 +0000
Manifest next update:     Tue 12 Aug 2025 03:22:23 +0000
Files and hashes:         1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: UGnwZnOeh5TR3t6m3u6xC7L8xSS9LdjHJtIuZuQMO8Y=)
                          2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: wRJLakVb4OT38G6t+rRsnOSv4LpQV0AO0Scq5OD6JMU=)
                          3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: Tv8VFI61ht6g4zpgpyoiarorIdL71VBSjtb/bqzuKfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
                          rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
        Validity
            Not Before: Aug  5 03:22:23 2025 GMT
            Not After : Aug 12 03:22:23 2025 GMT
        Subject: CN=689178ef-fcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:43:f4:42:ea:4b:3a:be:e2:49:31:70:6c:
                    50:f6:4a:38:d7:45:5a:98:b2:9a:e4:36:9a:39:c3:
                    2a:71:10:cb:e2:c0:ec:cd:31:3d:a2:7c:28:70:d1:
                    a4:ef:81:c6:65:b1:86:bd:fe:24:62:01:e3:3c:3b:
                    d6:1c:b5:c4:4c:0d:77:53:55:0a:1b:82:71:ff:3a:
                    99:20:4e:b7:7a:0d:05:ca:5c:2e:95:1f:36:70:c9:
                    5d:a1:b2:59:d3:f0:d3:b4:da:4d:54:51:53:05:4e:
                    1b:d7:40:8d:ce:a4:c8:22:d1:ec:2d:c4:77:5b:01:
                    39:ae:94:4e:52:c8:4d:05:b7:84:f5:96:17:bd:cb:
                    1c:68:07:48:e1:89:9f:ec:1d:65:a1:8e:2f:92:85:
                    d0:b5:3a:60:99:d4:5d:10:08:39:37:4a:47:5e:a9:
                    df:43:ae:47:26:3a:24:7a:18:23:e5:f2:3e:03:6d:
                    85:70:9e:96:d3:cf:bf:37:3a:99:99:b7:e1:f7:ba:
                    2e:10:19:b0:4a:bc:8a:3a:ca:61:0d:ad:57:14:80:
                    08:a9:03:e3:24:8a:69:1f:37:d0:00:52:da:91:85:
                    a5:34:a3:2f:c4:e8:36:43:5e:ab:da:b3:92:fe:44:
                    0e:67:43:76:51:fb:5c:ca:aa:2b:69:14:6c:bd:d1:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:83:0D:47:29:AC:91:05:E8:31:B0:26:F7:F6:7F:A7:69:CB:38
            X509v3 Authority Key Identifier:
                keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c6:41:71:cc:b5:3f:62:da:d7:3f:45:2a:1b:69:e1:ae:bc:
         ca:21:fa:e7:b9:8a:a4:bc:00:86:08:67:0b:c1:d6:3f:40:a7:
         bd:3e:91:bd:48:b6:54:39:08:40:12:95:b8:f0:c4:9f:be:2b:
         7e:95:d7:f9:18:5d:ba:d4:82:c7:59:f0:df:f3:05:d3:18:99:
         3d:0c:93:df:c6:83:80:e0:9b:22:7e:1f:f6:52:db:e1:fa:5c:
         d3:2d:28:77:7f:5f:46:27:4b:d8:e1:47:94:b6:cf:f8:a4:b5:
         69:38:aa:cc:7c:d3:d2:59:d9:c6:68:93:a4:4f:df:fa:3d:65:
         da:0e:2e:22:70:0d:71:e9:64:43:fd:17:06:4c:1c:7b:5a:6f:
         99:c5:ba:d3:b8:5f:94:79:bb:06:72:1d:96:a7:92:53:a3:b5:
         78:ce:4f:a0:d6:a1:e2:d2:4f:b4:c1:94:2f:8d:8f:25:8e:b1:
         c6:d1:d4:ee:f4:2d:33:3b:8a:35:41:85:0d:4f:e6:eb:3a:88:
         45:54:2b:2c:a0:52:8b:76:08:03:9e:d6:3e:25:83:ae:49:e7:
         d9:55:95:ef:04:fb:39:89:66:48:4c:89:89:75:e6:99:0c:8e:
         da:82:7e:52:d1:52:e8:2d:eb:08:e1:78:83:c4:1b:2d:8c:c2:
         26:b6:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:14 2025 by rpki-client