Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File:                     7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier:          Eb0CJJhU87rLGhnpFYgsulXU2ocP2mfVGRJ9Vd2mViU=
Subject key identifier:   D1:8A:36:D2:EB:4B:DD:06:96:BC:5E:C6:F5:94:C4:68:D5:B3:2B:7D
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer:       /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial:       1933
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number:          191E
Signing time:             Fri 16 May 2025 16:39:16 +0000
Manifest this update:     Fri 16 May 2025 16:39:15 +0000
Manifest next update:     Fri 23 May 2025 16:39:15 +0000
Files and hashes:         1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: WnKNB+jQT9TKdj8NgUKAbGEOVGGE+vahkSyFlQao8g4=)
                          2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: WkaE0CXeXaRttmyFDWWMPFZDaH+bNjuHUToZw9FrDRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 16:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6451 (0x1933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
        Validity
            Not Before: May 16 16:39:15 2025 GMT
            Not After : May 23 16:39:15 2025 GMT
        Subject: CN=68276a33-67d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:b8:92:f4:77:9b:95:96:8e:66:e7:76:7b:
                    a0:65:75:78:9a:da:a5:19:03:2e:17:68:f1:eb:8e:
                    1b:c3:59:fe:ef:79:b1:b3:92:7f:b1:87:5c:35:60:
                    e2:84:a5:73:35:cf:34:3a:ec:89:5e:8a:90:a8:3f:
                    da:b2:1c:90:08:53:29:b0:32:85:f2:b9:ba:00:da:
                    bd:7f:4c:87:bf:5b:ec:44:ec:c7:59:b3:90:c9:0f:
                    1b:29:32:40:00:01:e9:f4:bc:b3:b3:81:d6:73:44:
                    2b:75:64:a5:b3:5e:c5:c8:52:8a:51:f6:85:59:3c:
                    23:03:9d:f2:5a:5a:c3:10:5f:f6:6f:c6:87:3a:58:
                    16:2b:1f:39:1b:7e:bb:08:c0:ad:d0:c9:87:3f:03:
                    45:71:05:78:57:50:d1:5c:f0:23:f2:52:8b:c9:a7:
                    86:72:1d:5e:9a:7e:50:36:ff:2f:9f:0c:3b:99:59:
                    92:5d:97:7c:b9:11:02:b5:9d:bb:18:8b:76:92:7f:
                    de:e4:3f:87:24:b4:50:0a:4d:4e:9b:b8:20:6c:c7:
                    b9:e3:b9:b7:92:23:95:94:eb:a5:45:29:0b:2b:6d:
                    3b:92:6d:d1:e4:16:25:f5:82:1c:36:28:45:54:88:
                    3b:de:1e:dd:94:3b:3e:bc:3d:1f:3a:60:ab:43:60:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:36:D2:EB:4B:DD:06:96:BC:5E:C6:F5:94:C4:68:D5:B3:2B:7D
            X509v3 Authority Key Identifier:
                keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:3d:65:3f:c9:7b:81:b9:30:c9:f5:a6:11:76:73:35:90:
         c6:85:ee:b9:a9:ea:a6:31:5e:79:80:df:aa:73:a1:39:67:2b:
         02:75:d5:7f:5f:4e:ca:fb:e8:5d:32:6f:60:23:ea:87:1d:33:
         db:da:1a:21:8d:0f:26:bc:d8:2b:96:ff:3a:16:25:3f:40:c0:
         fd:b5:c9:3e:00:f8:c4:be:b7:10:02:0e:d0:8d:4e:c4:63:01:
         e6:cc:3c:0a:d7:d5:4f:88:99:8c:a6:86:3f:ed:5b:24:6a:1e:
         98:a7:87:15:89:a2:d8:68:9a:82:0a:56:3b:ba:1d:53:d9:18:
         d3:ac:dc:73:98:43:28:4a:83:40:70:c2:b1:76:81:53:e9:f0:
         94:c9:ef:45:0d:1c:c7:51:03:79:4b:c1:00:3b:23:be:de:95:
         3c:85:19:33:90:95:b6:14:a8:f2:21:71:67:58:91:a5:a4:37:
         34:92:f1:0c:d8:a1:54:f9:39:68:2e:52:ab:34:e6:c4:71:9b:
         fa:98:87:de:9c:7b:3d:40:8e:5b:57:18:4b:1b:90:9b:31:da:
         96:ee:88:12:82:eb:78:6b:6f:dd:5d:5f:8d:cf:76:78:fe:01:
         5b:4e:f2:2c:9d:04:2f:90:26:6e:df:21:f6:49:0c:84:a3:29:
         d1:ee:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:07:42 2025 by rpki-client