Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          4YKgTzPsePBP46MoSmK3z7LXHnTcHbvePFMbqdXjcRc=
Subject key identifier:   0B:8E:AC:F0:75:F1:E7:BF:19:ED:3A:38:BD:5D:1B:34:27:89:73:20
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       07CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          07C8
Signing time:             Fri 22 Aug 2025 21:17:40 +0000
Manifest this update:     Fri 22 Aug 2025 21:17:39 +0000
Manifest next update:     Fri 29 Aug 2025 21:17:39 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: kWta8AP6ocec8QnCCFpWC7nTKGWVMjCRw7w3fx/Ab/I=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: U97kR7RcsCigK2e8XjTe4vPaz//2MFlJM/gHaNAYSkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Aug 22 21:17:39 2025 GMT
            Not After : Aug 29 21:17:39 2025 GMT
        Subject: CN=68a8de74-c4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:01:bb:d3:80:f9:4e:a3:38:72:cb:6f:27:
                    00:0a:ad:cb:8c:d8:3f:b2:bc:ca:6a:bc:db:a1:83:
                    60:19:6a:34:f0:e9:9e:87:49:cd:d1:4d:91:ae:a7:
                    8f:70:c4:6c:91:6a:31:e7:17:00:e0:ed:4e:b8:03:
                    96:f9:02:a4:84:27:a0:25:59:33:59:28:79:b7:3f:
                    7f:7b:11:4c:ae:51:7d:26:7b:19:f4:db:21:29:8d:
                    1a:f0:ac:b8:c6:4a:90:65:f1:e8:a3:9a:9f:cb:f1:
                    f9:c3:be:55:31:c0:28:b7:a4:ae:4c:97:ea:27:62:
                    f2:7d:a6:19:fc:ae:45:ad:35:93:64:8a:af:3c:10:
                    71:80:07:86:ab:df:e4:4e:14:0e:c1:a3:19:7d:55:
                    b5:28:92:37:b1:9f:47:3b:62:91:d7:bf:9c:7a:86:
                    c4:f3:a8:97:50:5f:d5:84:31:79:76:18:25:01:97:
                    4f:ce:25:33:51:53:32:8d:8b:fb:6d:4b:e1:02:3d:
                    e4:83:26:41:d5:58:a7:5e:c7:c9:c1:c3:9d:1a:c2:
                    00:53:6d:e7:f9:fa:93:f6:7b:46:c4:ed:31:3d:ba:
                    23:bf:dc:e3:67:76:70:83:fa:a3:ba:7e:9c:52:b6:
                    02:7b:69:07:c7:b7:52:95:61:84:a7:6b:bb:81:2b:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:AC:F0:75:F1:E7:BF:19:ED:3A:38:BD:5D:1B:34:27:89:73:20
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:e0:37:fb:fd:ab:77:61:be:78:0d:f9:12:c8:bd:c9:79:
         2b:d3:bf:48:f5:3d:b3:0c:cc:46:63:c7:b7:58:ae:b6:49:16:
         2e:1e:a6:18:d5:02:74:1c:80:99:01:c6:df:dc:c7:29:81:fc:
         18:f3:04:18:6d:86:3b:45:30:43:73:68:27:03:e7:66:eb:36:
         e8:c5:6a:ba:d4:1e:b8:7a:fd:43:41:fe:4a:40:f2:e2:bc:44:
         66:44:43:28:50:ea:ff:3d:32:01:68:b7:ec:fa:90:e6:9e:fe:
         6e:11:78:23:a9:f9:a7:47:e1:ef:e9:cb:e4:25:94:fd:97:e2:
         eb:1e:62:23:64:e5:5d:05:a4:eb:7d:4f:50:70:84:fc:38:48:
         56:fc:88:02:c4:d1:83:63:6a:12:e8:32:8e:2a:40:2b:6a:50:
         de:b4:8e:1f:0f:ed:40:c6:49:16:a6:30:9a:f2:83:0a:a6:86:
         cb:15:ef:cc:6a:fd:48:5b:9a:33:db:d2:93:10:19:3c:e8:9c:
         5f:c2:28:98:7a:16:79:81:ce:2e:b7:20:0c:fd:a8:01:ff:67:
         46:c3:c1:d7:bc:33:9a:41:17:65:e9:dc:9f:02:47:f1:7c:82:
         dc:b5:47:e6:f8:fa:8b:bc:36:96:41:47:b2:17:2d:60:f1:7a:
         e3:2a:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:17 2025 by rpki-client