Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
File:                     S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json)
Hash identifier:          G2Jt49V0IScwaPOui+F+RyFOZQZoCb/EjpxaGmehBH0=
Subject key identifier:   D1:AA:98:7F:D0:9B:C1:4C:1D:1A:0B:63:25:E0:5F:89:56:8E:66:A5
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
Manifest number:          012D
Signing time:             Tue 01 Jul 2025 05:06:47 +0000
Manifest this update:     Tue 01 Jul 2025 05:06:46 +0000
Manifest next update:     Tue 08 Jul 2025 05:06:46 +0000
Files and hashes:         1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: loSvRD16n+acGP2DEwLacy3w2+WIBwXHOE+PjMr/Dag=)
                          2: 950812A4C5FE11EFA76A3266C4F9AE02.roa (hash: GtV0FeTeVluX/XanCeN+2QewCWE0y4Wr5uEweqnsLBI=)
                          3: 2B752026906B11EE8F088143C4F9AE02.roa (hash: i5nUZW342vifNZFiCtQR4fCIygdGR2eDt7BNl5170G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077, serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: Jul  1 05:06:46 2025 GMT
            Not After : Jul  8 05:06:46 2025 GMT
        Subject: CN=68636ce6-470d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:b9:77:80:4d:90:5b:57:ba:fd:d4:88:d1:
                    4b:cc:61:18:c7:64:16:ed:c3:fb:b4:15:8b:63:5b:
                    15:a0:c1:55:17:15:2b:cd:a4:dc:e1:01:04:31:8d:
                    e9:df:c3:a8:c5:68:7f:d2:be:37:2b:e5:ad:50:37:
                    d0:ef:36:a6:3d:2f:df:1b:68:bf:51:7e:da:76:30:
                    ca:05:03:d4:ac:df:42:f1:62:21:2d:0f:7f:eb:c3:
                    91:19:e9:11:82:51:bc:c3:f8:5d:27:79:c2:12:74:
                    7a:a9:5e:de:e8:3b:08:42:4f:59:f0:75:11:28:fb:
                    b2:1c:40:5d:2d:11:cc:82:52:36:b5:64:0a:7a:a7:
                    b6:d7:9f:c2:c2:2b:53:4e:80:30:81:6a:a7:c1:4e:
                    43:00:83:a2:ca:b9:21:38:0b:d4:14:bf:d7:6b:7e:
                    cd:99:c7:57:d7:e0:18:54:28:ec:ef:4a:ab:0b:f7:
                    82:93:02:ef:47:b1:9e:da:96:bd:a6:ec:32:35:0e:
                    33:36:66:19:99:24:c6:20:79:58:d1:48:33:a1:6e:
                    e2:0e:3d:3a:b3:24:db:83:df:a4:71:01:d3:91:8f:
                    55:cd:e8:bb:f1:f7:1d:d2:8e:f9:7d:b3:0a:ec:8e:
                    91:1d:9f:ac:07:c8:22:0d:bc:33:19:5f:b9:3e:97:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:98:7F:D0:9B:C1:4C:1D:1A:0B:63:25:E0:5F:89:56:8E:66:A5
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:82:71:90:e6:b1:da:45:c1:24:e8:38:1f:15:69:26:d4:
         63:11:32:fd:5a:7a:7d:6e:8e:54:70:c9:23:66:82:e5:90:e2:
         ad:c2:1b:74:fc:d0:e4:d9:9e:ae:89:b1:0d:6b:0b:63:0d:97:
         39:52:80:7f:2f:d2:52:80:56:56:40:a8:fa:b3:91:cd:3d:11:
         da:96:bd:23:cf:e6:94:b6:d2:dc:eb:97:42:1d:83:cc:0c:61:
         92:66:eb:77:21:62:94:59:ce:5a:80:1b:b3:72:8d:05:a9:af:
         ff:2a:1f:18:8d:8d:46:50:61:11:ee:5c:04:bc:96:a7:1d:81:
         eb:cd:b3:62:2a:11:7a:fa:cd:ea:bf:0e:f6:c6:76:67:36:9b:
         90:ff:18:6f:f0:98:b6:cc:14:0c:f1:fb:65:cb:f6:37:d3:16:
         36:dd:56:1b:ca:43:b7:32:7e:4c:17:0d:b0:8a:fa:a4:99:f1:
         b2:55:20:03:50:33:39:a2:a6:37:f2:27:75:30:cd:26:e3:11:
         a4:c0:a9:05:b0:ff:97:66:73:f1:79:2a:c7:e8:3e:31:2a:8a:
         3f:ee:48:3c:1b:61:24:c9:31:b6:1b:6d:71:fb:33:1d:c0:bc:
         d4:a8:0d:29:3d:23:8c:60:8c:8f:5d:e0:ec:59:cc:c6:ea:7d:
         d0:8b:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:49:31 2025 by rpki-client