Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
File:                     tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json)
Hash identifier:          3NWVdpbtXVYqF9AQoB8U+fBEnZP1AL1/07d2SVbRYlE=
Subject key identifier:   C8:0D:D9:80:62:43:2C:AC:B4:97:85:73:7A:88:D1:96:AC:92:30:49
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       07BF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
Manifest number:          07AB
Signing time:             Wed 02 Jul 2025 21:33:59 +0000
Manifest this update:     Wed 02 Jul 2025 21:33:59 +0000
Manifest next update:     Wed 09 Jul 2025 21:33:59 +0000
Files and hashes:         1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: BaAiXOyrpjc4v9zxxhZrl5PQzShlwH/eiIz5OojsxqA=)
                          2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: uazG73UaMnx6WsXKrRFqrUld6ba1Rwlrt5W45/vO4zY=)
                          3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: HLeHhf7z+DQd8E9vrX8KAr3EM5GCzgmJjqLeg2zSKbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983 (0x7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Jul  2 21:33:59 2025 GMT
            Not After : Jul  9 21:33:59 2025 GMT
        Subject: CN=6865a5c7-56da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:43:8a:d8:8e:65:f9:37:ec:61:aa:86:0d:
                    d7:96:10:7d:21:b4:16:cb:d5:b9:19:93:52:c3:ae:
                    81:b5:17:4a:7c:83:63:6f:b1:7c:ba:dd:36:00:06:
                    cd:16:25:9d:b3:94:9e:70:4c:75:b4:4d:02:29:56:
                    d2:0a:81:2e:e4:2f:35:45:1f:03:9e:13:8b:df:09:
                    5a:2b:0d:cf:62:60:5c:75:4a:0b:22:8f:61:48:6a:
                    f4:cb:90:c5:a7:80:b8:2e:07:7a:c7:dd:87:7a:db:
                    8a:d8:30:47:ca:0f:3b:a7:7c:80:fc:6f:8f:57:31:
                    32:67:b0:08:97:e9:4c:6b:aa:31:62:62:42:13:6f:
                    8a:c8:27:cb:c9:03:fe:06:6b:97:c5:de:a4:3b:7d:
                    41:b8:3e:1c:d7:47:49:e0:d2:16:03:f6:7b:56:8c:
                    1b:e4:e9:d6:90:14:d7:c9:ca:dc:84:df:31:5a:07:
                    61:f3:7d:eb:f2:e0:d6:ac:87:71:3d:46:a2:70:54:
                    9d:a9:c3:bc:1e:e7:34:45:e0:02:1e:a1:47:8a:fe:
                    db:46:58:7e:65:64:a9:8e:b1:fd:16:fa:04:6c:15:
                    17:2f:6c:77:e4:4c:e6:b5:9d:f3:f9:a0:e0:ae:a3:
                    65:5d:64:89:dd:f0:87:f4:35:05:33:48:ff:78:5f:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:D9:80:62:43:2C:AC:B4:97:85:73:7A:88:D1:96:AC:92:30:49
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2b:fb:a7:69:1b:6d:62:d9:0a:c8:a2:43:ad:8b:35:e0:0c:
         a6:5b:ee:4c:0a:9b:f4:13:3f:a1:5c:c6:5b:f7:56:d3:e7:33:
         ec:f8:65:a6:de:fa:a4:a2:b9:39:70:43:57:13:b0:6a:d4:11:
         73:0f:b0:6a:43:c2:c4:58:c2:72:98:11:61:69:08:e1:54:5f:
         a5:73:95:1f:e2:e5:4f:0a:c7:27:b4:06:3b:80:aa:5d:c9:a4:
         14:93:0a:b5:e1:dc:60:b1:6e:22:c5:25:eb:f0:8a:30:10:80:
         90:0d:53:62:da:ca:0c:12:43:5b:0b:71:85:a1:37:1d:7d:e7:
         d6:0c:00:22:fc:c7:28:4d:2a:cb:74:ab:92:43:a1:01:16:8e:
         b0:70:01:f6:be:84:b9:14:d8:7e:28:55:f2:fa:4c:ce:66:17:
         d9:8c:b3:c5:dd:06:cf:d6:98:55:d3:93:d0:38:94:26:56:93:
         92:1f:4f:3b:2e:06:ea:50:04:00:30:0f:76:99:62:df:91:2a:
         e7:a0:c4:92:51:c7:d7:51:b3:57:3b:c4:ee:6d:12:25:cf:da:
         41:69:79:cc:5b:34:61:63:99:89:80:16:cf:5e:9c:12:5e:4f:
         bd:ff:0b:08:35:bf:cb:d5:e5:f6:13:78:0b:65:ed:bc:20:7d:
         5f:98:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:34:27 2025 by rpki-client