Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
File:                     cIahuzAxFoOubaYN35fN9zN8tm8.mft (raw, json)
Hash identifier:          od+Z/EYQsKZqDPNjrJPw9TEmTmp7ng16FaB7hELDxbU=
Subject key identifier:   31:B2:F2:77:64:CA:77:F1:EE:6E:C0:6D:86:3C:6C:D0:F2:F3:DC:AB
Authority key identifier: 70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F
Certificate issuer:       /CN=A915E077/serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
Certificate serial:       07A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
Manifest number:          07A2
Signing time:             Wed 02 Jul 2025 21:31:03 +0000
Manifest this update:     Wed 02 Jul 2025 21:31:02 +0000
Manifest next update:     Wed 09 Jul 2025 21:31:02 +0000
Files and hashes:         1: cIahuzAxFoOubaYN35fN9zN8tm8.crl (hash: jSoFlr3Et6g+TL8ND9M63/nrvaSfW5zghx7sRh1rCZg=)
                          2: 736816B806CB11EBB9A51287C4F9AE02.roa (hash: mnRywCOvlKSMzMEwT6a/uyPxhXI/A+zzNgPeDhshPxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl
                          rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E077, serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
        Validity
            Not Before: Jul  2 21:31:02 2025 GMT
            Not After : Jul  9 21:31:02 2025 GMT
        Subject: CN=6865a516-83c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:1a:15:01:a0:9a:fa:e2:7c:de:3a:b6:e6:
                    1f:1d:21:c3:e6:3c:b5:00:56:98:37:12:9f:3e:8b:
                    4f:36:36:a6:ae:77:ea:8c:0a:2b:b8:64:4e:f6:ea:
                    a0:a8:77:19:c9:19:0b:34:94:02:6a:a0:47:31:76:
                    79:1f:5c:2e:2f:7f:2a:8f:68:ee:13:ce:ee:c9:38:
                    96:44:db:ee:d1:d5:81:08:48:65:d0:91:06:7f:1b:
                    87:56:2a:17:7e:73:16:55:ea:5f:29:67:20:da:cc:
                    55:84:ce:ad:4e:9a:44:92:d0:d3:6b:f7:57:9e:15:
                    9e:3f:05:a8:11:78:b8:27:80:31:31:7b:10:79:1d:
                    35:f2:63:2f:67:7a:a3:fb:eb:d9:9d:30:3e:3f:ea:
                    d3:a9:d4:b8:71:88:18:f1:04:38:6b:f6:11:ce:d4:
                    6f:db:11:ce:b0:bd:ab:4e:34:1d:8a:e4:eb:08:5f:
                    95:57:60:2b:5b:b3:0b:e4:7b:82:2b:8b:b1:f3:a1:
                    6f:45:f4:f9:09:e8:d8:67:a3:f9:48:07:cc:df:db:
                    8e:e6:6a:47:07:d8:db:fc:87:3e:1b:a1:77:79:26:
                    78:c5:74:c3:da:45:6b:fb:bb:fa:09:2f:6e:88:11:
                    a0:dd:76:98:90:d5:18:0d:1c:a1:e7:3a:aa:88:7a:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:F2:77:64:CA:77:F1:EE:6E:C0:6D:86:3C:6C:D0:F2:F3:DC:AB
            X509v3 Authority Key Identifier:
                keyid:70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:66:d0:e1:bd:fc:3b:5c:4c:08:9a:77:e3:69:ac:a2:9e:
         56:cc:41:b7:f1:68:2f:2a:27:0a:78:f5:70:de:61:77:d2:8e:
         50:72:38:48:36:64:8e:55:cb:6b:ed:24:1b:c3:17:79:74:8c:
         62:00:3c:72:4b:dc:6a:7e:11:9b:4e:68:c8:b0:02:83:71:0e:
         dc:72:c6:cc:c0:98:4a:ba:4e:58:84:cc:69:f0:94:e1:92:8c:
         91:c0:99:fa:16:40:bc:20:ec:0a:d8:1e:4c:d8:5a:eb:76:d5:
         26:78:7d:55:19:6b:28:c1:ad:4f:55:6c:94:56:33:ad:93:31:
         3b:3c:f0:fd:67:06:f1:88:24:8a:b7:36:4c:60:8d:77:74:a6:
         83:ba:0a:b0:9f:30:5c:ef:7c:25:25:f5:9c:88:21:b9:0c:9d:
         d3:ec:5b:12:1c:6c:c8:35:89:4e:02:f5:53:9d:01:98:42:5e:
         27:0c:b6:3e:c2:c0:89:00:8f:92:60:2a:c8:d1:60:e4:93:90:
         22:3a:fe:74:85:76:79:e2:28:88:38:86:58:bc:67:5a:38:3d:
         53:a8:ce:46:77:2e:0b:11:1a:b0:15:97:36:1d:69:79:e3:3d:
         84:a9:10:e8:1a:5a:c9:56:bd:a9:f3:25:39:5c:c4:84:3c:13:
         08:8f:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:44:46 2025 by rpki-client