Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          ZgnTI6wqRlHEen18g6V2ZNPiftGEHSIIDznRNKQJeHI=
Subject key identifier:   4C:0A:E6:AE:04:AF:93:5C:2C:9F:19:F3:95:F4:E5:2C:EE:C1:CF:1C
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       0758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          0752
Signing time:             Mon 30 Jun 2025 21:57:49 +0000
Manifest this update:     Mon 30 Jun 2025 21:57:48 +0000
Manifest next update:     Mon 07 Jul 2025 21:57:48 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: bKkFzI63Dg8R+acIcPkRAYeWfefGgKuvv242UJ2x+5w=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: /eGyMyfZrwg+tW0iicICs4kHkYiGhwJp9BCaRgreCno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 21:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Jun 30 21:57:48 2025 GMT
            Not After : Jul  7 21:57:48 2025 GMT
        Subject: CN=6863085d-ac2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:0f:60:74:38:4f:af:3a:3b:fe:b6:4f:4e:
                    b6:91:dd:30:eb:cb:d9:86:ac:27:85:2b:19:5a:fc:
                    9c:08:ca:4f:70:50:55:49:d4:a5:7b:b9:03:11:6c:
                    e6:7e:71:97:09:1b:85:42:0f:e5:47:07:fc:87:60:
                    ff:8e:32:c8:a0:2d:ae:0b:97:a9:55:7c:2c:b8:30:
                    d5:90:7b:8e:aa:ab:87:2f:cf:19:78:d4:1e:6e:af:
                    fd:62:3c:32:07:bd:c0:aa:d0:bc:01:10:26:0b:7c:
                    04:47:a4:55:55:53:05:c6:fd:2e:e1:a5:7b:7f:36:
                    f8:03:02:c4:2a:d9:2b:13:55:2d:fe:66:c1:12:71:
                    b3:a0:ea:9b:9b:4d:a0:e5:95:e4:36:79:92:12:6a:
                    c6:e2:d0:e7:56:55:b4:75:4e:ce:1b:2f:bf:c3:72:
                    91:82:86:18:ce:81:e6:fa:b0:0e:70:62:03:9a:87:
                    87:15:35:62:94:07:2b:d2:07:c8:6c:62:12:b3:e1:
                    78:1c:32:62:f1:30:76:ab:92:96:d6:e7:7b:f6:24:
                    4c:79:1c:c5:cb:23:26:b5:f8:17:f2:ed:d0:5b:62:
                    02:50:eb:f6:c8:45:0a:76:30:b9:be:54:98:dd:78:
                    05:12:9d:5f:18:f8:0a:4e:a5:87:2f:d1:8c:37:29:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0A:E6:AE:04:AF:93:5C:2C:9F:19:F3:95:F4:E5:2C:EE:C1:CF:1C
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:f9:8a:7e:f1:72:6f:66:53:e3:97:ca:fe:48:16:a0:c6:
         8c:90:97:4f:f1:9c:e6:7d:09:f4:a9:9f:ad:09:d2:a9:79:0a:
         3e:a6:db:6b:77:00:dd:39:b7:79:67:86:91:40:49:e1:6b:5f:
         fe:1f:29:13:c4:34:92:03:bf:ae:f2:6d:18:bb:1b:96:90:b2:
         98:25:c4:c7:85:69:6f:3f:f8:6b:8e:b6:6b:95:35:84:74:a8:
         8e:31:c0:92:4f:a8:50:fd:03:38:42:4f:65:ae:3e:fd:66:21:
         56:82:5c:51:36:02:33:7f:b7:f8:db:de:f2:a2:2a:16:a0:3d:
         f4:ca:9d:e4:5d:75:a7:3d:c2:17:2d:85:5f:e7:20:83:7e:9c:
         46:f2:9b:57:1a:eb:27:aa:f7:2f:18:aa:d6:42:f2:a0:3d:ed:
         f0:55:b8:56:e1:fb:f3:d9:80:64:6e:a9:28:99:a4:10:8d:f7:
         e2:a8:ec:b0:90:fc:0d:7b:3c:8b:84:df:ff:cc:d9:69:30:ee:
         07:d3:07:ed:cc:35:0c:c9:82:06:f1:bc:18:11:94:24:2a:e9:
         ca:27:bb:d0:59:2b:df:67:c7:7c:b0:f5:ae:9d:cd:10:c8:5f:
         2a:6f:98:2b:32:9a:3f:7c:72:ae:e0:3c:b0:35:4b:f5:cf:06:
         e7:d6:01:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M5MjgxMTAvBgNVBAUTKDZCQjIyOUI1MDY0NDJGQTA0OEE0Rjc5RDNDQjQ0RkEw
RTAwNDc5NDEwHhcNMjUwNjMwMjE1NzQ4WhcNMjUwNzA3MjE1NzQ4WjAYMRYwFAYD
VQQDEw02ODYzMDg1ZC1hYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA48APYHQ4T686O/62T062kd0w68vZhqwnhSsZWvycCMpPcFBVSdSle7kDEWzm
fnGXCRuFQg/lRwf8h2D/jjLIoC2uC5epVXwsuDDVkHuOqquHL88ZeNQebq/9Yjwy
B73AqtC8ARAmC3wER6RVVVMFxv0u4aV7fzb4AwLEKtkrE1Ut/mbBEnGzoOqbm02g
5ZXkNnmSEmrG4tDnVlW0dU7OGy+/w3KRgoYYzoHm+rAOcGIDmoeHFTVilAcr0gfI
bGISs+F4HDJi8TB2q5KW1ud79iRMeRzFyyMmtfgX8u3QW2ICUOv2yEUKdjC5vlSY
3XgFEp1fGPgKTqWHL9GMNykaNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwK5q4E
r5NcLJ8Z85X05Szuwc8cMB8GA1UdIwQYMBaAFGuyKbUGRC+gSKT3nTy0T6DgBHlB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkyOC83N0Y1NDZFQzJB
NDMxMUVCODk5MjM3NTNDNEY5QUUwMi9hN0lwdFFaRUw2QklwUGVkUExSUG9PQUVl
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E3SXB0UVpFTDZCSXBQZWRQTFJQb09BRWVVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzkyOC83N0Y1NDZFQzJBNDMxMUVCODk5MjM3NTNDNEY5QUUwMi9hN0lwdFFaRUw2
QklwUGVkUExSUG9PQUVlVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdxPmKfvFyb2ZT45fK/kgWoMaMkJdP8ZzmfQn0qZ+tCdKpeQo+pttr
dwDdObd5Z4aRQEnha1/+HykTxDSSA7+u8m0YuxuWkLKYJcTHhWlvP/hrjrZrlTWE
dKiOMcCST6hQ/QM4Qk9lrj79ZiFWglxRNgIzf7f4297yoioWoD30yp3kXXWnPcIX
LYVf5yCDfpxG8ptXGusnqvcvGKrWQvKgPe3wVbhW4fvz2YBkbqkomaQQjffiqOyw
kPwNezyLhN//zNlpMO4H0wftzDUMyYIG8bwYEZQkKunKJ7vQWSvfZ8d8sPWunc0Q
yF8qb5grMpo/fHKu4DywNUv1zwbn1gHB
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:36:32 2025 by rpki-client