Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          gzpJ1Md7nt+XsD6NvAx0QaSqsZ2wguccqnXSUW6vswA=
Subject key identifier:   82:16:B2:3F:CC:2A:F6:F5:65:A4:F8:F6:BD:D6:CF:EB:CE:00:80:23
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          A7
Signing time:             Sun 19 Oct 2025 09:25:42 +0000
Manifest this update:     Sun 19 Oct 2025 09:25:41 +0000
Manifest next update:     Sun 26 Oct 2025 09:25:41 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: o84peY6stk6Hw5yFFhOe7sXifmI9izpraQsynxbqcQo=)
                          2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=)
                          3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=)
                          4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Oct 19 09:25:41 2025 GMT
            Not After : Oct 26 09:25:41 2025 GMT
        Subject: CN=68f4ae95-2f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:ce:37:4b:2e:67:ad:2d:5c:7c:9a:28:fa:
                    10:99:3c:7e:da:49:72:b7:51:45:c9:0e:a4:22:40:
                    fc:3b:b2:bc:a9:ae:6f:87:e9:8b:7f:7e:47:30:78:
                    45:a9:ec:6f:23:b1:58:c0:73:9a:78:c1:bb:45:2a:
                    09:87:fb:0a:a8:2c:11:f1:84:b5:a7:60:06:36:8a:
                    73:f4:1c:20:32:10:72:ca:33:7f:87:38:2d:68:18:
                    e1:f5:1c:99:11:24:ca:ab:a6:c2:2b:ba:17:01:6b:
                    7e:c1:2c:99:b0:5f:57:53:12:70:d0:b4:b2:01:cf:
                    27:c7:a0:cc:5b:98:bb:b4:14:9c:39:59:e1:50:c2:
                    40:e3:03:23:91:b6:2e:fc:d5:8e:fa:bb:ce:1b:50:
                    73:24:d0:f0:d6:fe:7b:4b:84:55:71:48:07:2e:ac:
                    fb:d5:7d:a9:af:ea:87:67:4c:a2:29:a7:85:82:be:
                    1b:3a:ec:ec:2b:ad:13:cf:ca:3b:cd:50:70:85:b9:
                    1d:05:9b:3f:a0:8b:4f:2c:46:f8:6b:3f:11:a6:1a:
                    7c:ef:c1:af:16:c1:2d:db:7a:91:32:8c:71:8f:ec:
                    bc:2b:3d:ae:25:2d:ce:1b:9b:c2:4d:5a:67:6b:39:
                    9a:c9:6b:d2:f3:3a:c0:09:d8:56:4c:a5:2e:53:f5:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:B2:3F:CC:2A:F6:F5:65:A4:F8:F6:BD:D6:CF:EB:CE:00:80:23
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:23:bf:70:ef:dd:9b:89:6f:47:7b:8d:34:98:84:16:9b:1c:
         a3:99:74:b2:ef:69:5a:29:95:a7:e2:ea:18:ac:72:68:55:c0:
         23:e4:82:5a:e4:ed:ee:70:18:68:68:4e:6c:7c:94:9b:7a:83:
         92:45:5f:f1:40:11:74:f5:ea:63:1a:de:cf:5a:96:f5:6c:81:
         0e:8c:a0:17:db:e7:80:40:6d:4a:dc:89:3b:5b:23:82:04:6d:
         14:a5:40:f6:b3:ac:3f:1a:48:d9:04:a4:4e:fc:21:b6:68:c3:
         9e:31:6a:22:d2:9d:e7:11:9a:af:ef:de:64:ba:c9:17:97:1d:
         1c:03:a9:ac:68:90:d8:da:77:43:11:d7:7c:1a:21:4f:b2:c6:
         e0:0c:db:f2:49:64:dc:87:df:24:5b:31:5d:9e:cb:33:3d:5c:
         3f:74:e1:2f:59:1e:70:78:b2:e1:cd:f1:a8:d0:98:c8:e1:d2:
         ae:b8:4b:a6:d2:6f:c1:88:b9:b5:b5:be:7f:6d:6d:46:bf:f2:
         4c:1d:1e:b1:30:9f:e2:e9:87:ad:c5:e6:2e:4a:93:c7:68:dd:
         01:eb:8f:05:93:6d:eb:80:b6:63:bf:29:dd:fc:79:38:85:ac:
         40:37:b2:fc:81:58:76:5b:9c:24:e6:c5:55:8b:98:70:92:79:
         ab:e0:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:39 2025 by rpki-client