Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File:                     f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier:          pKVk1sOQTuwFzRcWkLGAVfe9jqoSfzWl5SbARw9nE8Y=
Subject key identifier:   3E:B0:13:62:7D:B9:66:DA:2A:92:8E:21:F6:A9:5D:30:60:E5:93:65
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer:       /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number:          83
Signing time:             Sat 23 Aug 2025 06:57:13 +0000
Manifest this update:     Sat 23 Aug 2025 06:57:13 +0000
Manifest next update:     Sat 30 Aug 2025 06:57:13 +0000
Files and hashes:         1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: rk3sfvQwGQZHVuoQSka8kUNayXHtUOM50TWDJ6/DMig=)
                          2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: 6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=)
                          3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: qhXg7OZORCQmwfeMjxBNXmP6ZMvJvKn0GRTuJzNo35M=)
                          4: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: m2+w3MuoT8jahcLbP8IymDcYrHQo98+RI8vF7vbfRjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
                          rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
        Validity
            Not Before: Aug 23 06:57:13 2025 GMT
            Not After : Aug 30 06:57:13 2025 GMT
        Subject: CN=68a96649-a7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:47:2e:82:d2:bb:60:94:67:6c:df:40:6e:
                    65:ac:d2:a5:5b:4d:46:6d:3c:d2:8e:73:da:be:8a:
                    f7:22:42:d2:92:1f:fc:b0:e1:5c:3a:15:8d:eb:7d:
                    82:25:42:c6:d4:65:29:cc:a0:ba:a3:37:d4:b8:b8:
                    a1:74:68:57:88:0c:d6:24:df:d5:94:e8:0b:b1:7e:
                    61:bd:43:7f:a4:cb:ab:b6:ae:91:06:40:72:46:e2:
                    95:1c:fb:d8:8c:47:20:4c:e3:8c:e3:11:34:8a:fc:
                    6f:e8:1a:a9:4f:a5:45:af:92:83:d4:8a:15:c8:42:
                    62:a9:2c:c2:93:17:8d:35:46:dd:49:09:b2:8b:72:
                    2a:9d:c8:0f:31:1f:df:1d:68:16:5d:ac:e8:f7:06:
                    5d:a2:cc:14:ba:49:51:cc:a1:f1:79:1f:4c:94:3e:
                    0e:6b:5d:20:87:e5:ba:e2:26:a1:95:82:30:b2:50:
                    d7:c1:f6:5a:18:d8:3b:d8:34:65:4d:f3:16:18:d7:
                    95:91:cc:67:e1:47:a6:7f:6c:00:ab:1b:78:44:b8:
                    e8:a5:c3:1e:7b:73:35:6a:6d:47:8c:83:fb:7c:c3:
                    07:26:90:a6:80:a4:37:93:d6:91:f3:18:5e:62:8e:
                    47:b2:a6:98:62:a6:45:9e:32:ad:05:8a:6b:9f:fb:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:13:62:7D:B9:66:DA:2A:92:8E:21:F6:A9:5D:30:60:E5:93:65
            X509v3 Authority Key Identifier:
                keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:6d:1e:e9:80:44:aa:dd:62:28:56:e5:b3:38:34:5d:d3:
         54:2e:67:e9:a0:b9:c0:24:26:0f:df:cd:4c:33:d8:1a:c7:8b:
         02:45:a1:9c:d7:5e:12:a0:01:60:af:dc:cd:b8:aa:71:15:b9:
         4f:a8:57:aa:06:79:90:94:b6:b8:d2:d0:c2:18:d6:e1:18:d5:
         c5:47:77:e8:33:50:71:e8:77:a8:c0:48:c2:f2:c1:c1:13:66:
         24:69:8a:a0:c1:b1:32:72:a8:b2:43:fd:46:75:29:d2:14:07:
         d0:25:56:21:e6:9e:33:43:ac:ff:16:7d:85:e3:9d:99:f2:04:
         e8:f1:e5:8d:e5:f5:b1:db:38:0f:27:90:88:c2:7c:d0:d0:fc:
         17:62:4d:fa:a2:99:66:81:de:fb:5d:36:95:89:99:4a:f1:77:
         ca:ef:28:9a:d0:28:11:50:93:52:0b:22:d9:d9:ed:13:a5:46:
         99:ed:e4:98:65:b1:14:a3:8f:36:50:9e:d2:35:ea:c9:59:59:
         74:5b:4c:c6:03:77:b4:37:0c:d1:76:7b:cc:5c:ef:3e:1a:22:
         cd:c0:1f:f6:b9:dd:21:7c:aa:a2:78:b6:1d:da:a3:63:ab:a3:
         c6:72:83:39:e2:fc:94:d2:c3:27:d1:94:5b:45:c9:da:cc:8a:
         84:03:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:11 2025 by rpki-client