Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          ES58NqxEdEJazHcuExUeUR09mFj5XJ8SVz1Fp+R/gJU=
Subject key identifier:   AC:19:08:8A:4D:06:AD:09:09:B1:C7:CB:9B:FB:61:E2:63:B8:24:79
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          E7
Signing time:             Sat 23 Aug 2025 05:32:24 +0000
Manifest this update:     Sat 23 Aug 2025 05:32:23 +0000
Manifest next update:     Sat 30 Aug 2025 05:32:23 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: xacdSQq1Sk0hvnY4RZNCXwQ4LK0NvTeggKnfH12hP6o=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Aug 23 05:32:23 2025 GMT
            Not After : Aug 30 05:32:23 2025 GMT
        Subject: CN=68a95267-6203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f2:18:dc:4f:dd:95:ae:dc:82:df:ca:9e:15:
                    35:71:b0:68:28:a2:2b:57:ca:ea:39:ce:dd:7e:0b:
                    c7:f5:ff:87:5c:7a:6a:67:ac:7e:73:a6:34:ba:2a:
                    d6:3a:eb:41:b9:59:dd:6f:45:c1:8b:8f:e2:20:76:
                    bf:f6:3d:b1:96:29:67:cc:ce:a7:b2:fb:0f:b8:3d:
                    95:aa:39:e9:ad:f4:59:7b:4e:e8:5f:82:da:82:fa:
                    1d:ff:22:c6:90:07:44:7f:5d:69:7c:d8:16:07:c2:
                    bb:77:90:86:dd:95:1f:31:ae:80:bb:1e:f0:c0:4c:
                    20:29:f7:8b:93:7e:b5:0a:97:30:cd:e7:74:f8:3e:
                    77:78:af:8e:ed:97:94:e7:aa:eb:96:bb:3a:3b:45:
                    65:82:ae:2e:e7:05:d9:dd:a2:8d:f4:c7:e2:4f:2e:
                    38:1e:0b:ba:cb:bf:31:5f:1b:68:e2:bd:80:c2:53:
                    d4:f4:63:1e:24:13:9e:0a:1b:5f:18:58:85:0d:fc:
                    c4:d5:6e:32:0e:1a:f0:f4:b6:6b:c2:93:26:0c:4b:
                    ad:c8:c7:25:03:21:5d:38:2f:56:8a:aa:85:b4:c8:
                    06:99:e3:21:13:9b:51:f9:c4:11:49:1e:c2:58:5c:
                    6c:f7:02:a1:12:a5:9b:3a:60:62:91:08:e9:e8:d7:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:08:8A:4D:06:AD:09:09:B1:C7:CB:9B:FB:61:E2:63:B8:24:79
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:25:64:64:32:f1:c1:f0:93:13:c1:89:ae:9c:7d:a4:61:
         dd:a0:62:a1:aa:45:05:8f:53:e7:50:cd:79:15:71:0f:c0:30:
         44:42:4d:6e:2d:63:ed:ea:fa:59:d2:cb:f3:75:2e:92:6c:0f:
         c7:84:6f:13:65:e5:dc:ce:cd:07:14:76:81:60:27:8c:37:33:
         b9:57:e3:14:ea:bf:13:23:8f:78:19:32:9a:ce:ec:77:f8:7d:
         b1:a6:1c:35:71:1f:96:53:d8:f1:90:cb:05:1b:9d:e2:61:f6:
         98:f1:c5:09:76:0c:05:67:f8:0b:2e:d3:57:9d:76:d2:38:ee:
         8e:1e:10:59:5e:b1:15:ab:70:4f:07:00:31:ef:a1:6f:0f:bc:
         0c:34:65:1a:1b:98:c0:98:e7:ef:88:78:59:33:26:d7:be:f6:
         ab:b6:84:16:d0:1a:21:cf:7c:20:aa:7f:89:c4:61:bd:6e:b1:
         e1:27:cb:5e:e8:37:d4:b6:4c:c7:d2:8c:ad:aa:b3:d4:d8:56:
         c9:af:8c:c6:38:a9:8c:7b:e1:22:f2:46:21:36:5f:96:04:e6:
         72:80:d9:54:12:be:c4:f3:b9:33:7a:0c:c2:c1:f3:59:93:02:
         33:8b:09:a6:d9:e0:66:16:d9:01:ef:21:fb:10:6a:31:12:29:
         84:7d:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:15:08 2025 by rpki-client