Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File:                     Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier:          p5Ehy+/5XkdTwYaQnsvwmfo9VpRF3QxAluhmo2eYq8o=
Subject key identifier:   47:7E:F4:11:B2:8A:4A:9D:FD:4A:51:E2:A3:6C:56:CC:F2:16:9E:C7
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number:          C6
Signing time:             Thu 03 Jul 2025 06:00:14 +0000
Manifest this update:     Thu 03 Jul 2025 06:00:14 +0000
Manifest next update:     Thu 10 Jul 2025 06:00:14 +0000
Files and hashes:         1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: 1X2J+dhgoB1vbK25OkZlZyaRvdbQZkw1FDRoymxthbs=)
                          2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: dMGUJzn8JEaLVtlahCfI1tJWzgz3MatxC3huyiMpG8U=)
                          3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: Lj7oe1PG2x11wd3w8JgQmVhkgZC0GIoGb3aNynIb3Ac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Jul  3 06:00:14 2025 GMT
            Not After : Jul 10 06:00:14 2025 GMT
        Subject: CN=68661c6e-faa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:06:db:d9:96:01:13:e8:c5:16:b8:e6:3e:
                    ae:00:a4:4b:e4:fc:dd:14:4a:c3:f8:00:eb:85:d7:
                    90:c9:35:51:71:9d:32:7c:ba:58:61:f8:fb:a9:29:
                    e3:69:4a:72:b1:3e:db:81:41:38:39:3c:f0:96:00:
                    d6:79:0c:d9:9c:ab:2e:8e:15:d3:10:db:78:53:bc:
                    57:b5:b9:29:1e:93:41:a9:e0:8a:90:ff:66:c0:ba:
                    51:df:18:3f:e8:e5:5d:ef:19:a4:6f:c5:06:9b:19:
                    04:7d:b7:9a:1b:e1:ad:06:68:7d:d1:33:dc:98:34:
                    e9:8f:bd:e7:3f:be:f3:aa:ea:0e:92:28:63:ad:b9:
                    40:a3:9b:29:7c:cd:a8:a4:11:89:38:75:76:a4:bd:
                    d3:b5:07:a5:6c:f7:bf:81:78:b3:e6:45:ba:a9:55:
                    c0:95:7e:e5:8a:69:f9:a9:66:01:35:c2:95:76:04:
                    96:9d:9e:fe:a6:17:96:56:32:89:4b:25:ff:92:6f:
                    8c:b5:9d:2a:a8:f3:aa:cb:ea:83:b0:7c:17:2c:0b:
                    5b:10:65:aa:23:6b:0e:e9:70:1a:c2:fc:02:11:2d:
                    9e:48:b5:fc:9d:b4:da:8c:76:a4:75:85:57:10:d4:
                    ea:63:75:3f:85:a5:c3:5d:c9:0d:f1:35:1f:51:93:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7E:F4:11:B2:8A:4A:9D:FD:4A:51:E2:A3:6C:56:CC:F2:16:9E:C7
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:66:3b:1d:cb:9b:b7:e8:f2:e8:20:30:3b:a0:08:a8:0b:c0:
         6d:a1:7a:f2:cd:cf:39:02:4a:30:eb:c8:fb:b5:56:6d:46:21:
         da:26:de:86:26:e5:91:61:fb:35:e6:5e:43:db:f1:f4:7f:7c:
         e6:14:d6:68:a8:14:e6:f9:16:91:ea:f2:9c:2c:f0:84:39:d8:
         8e:09:db:97:03:2b:df:64:ff:5d:bb:06:57:fc:3e:ad:46:d5:
         d1:4d:15:7d:45:04:b4:82:be:0f:ed:fa:ce:31:bf:26:c9:f6:
         09:38:30:77:d3:df:a6:7e:2a:9a:43:18:9c:d7:a0:24:17:d6:
         7e:84:35:13:c6:b6:eb:52:b5:c9:1d:fe:e1:3d:81:ed:7b:3a:
         d6:c6:a7:70:e2:29:c1:e6:b6:22:84:01:b7:10:d7:cc:88:d4:
         ee:ce:13:27:43:dc:be:a2:ca:0e:ca:12:92:df:a5:a4:1e:30:
         5e:47:6e:89:a2:65:a7:93:c1:11:ee:7d:66:53:75:4a:5c:76:
         62:1f:88:98:e2:94:30:92:d3:14:8d:ac:48:0f:c3:c3:8e:a6:
         15:75:1a:16:8d:33:b2:f3:95:2b:b0:22:73:c6:79:34:47:98:
         e8:49:86:ba:30:52:c8:a7:36:c4:78:d5:9e:06:c8:dc:b1:10:
         dd:de:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:46:25 2025 by rpki-client