Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File:                     f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier:          0TUSmqzRsH7SNuNRnDj8Om6MXVHS+uaW5DbDVo3VvUA=
Subject key identifier:   35:46:54:6C:A4:C5:2C:EF:38:E4:BA:C5:0B:55:52:60:22:0A:58:5A
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer:       /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number:          51
Signing time:             Thu 15 May 2025 06:37:47 +0000
Manifest this update:     Thu 15 May 2025 06:37:47 +0000
Manifest next update:     Thu 22 May 2025 06:37:47 +0000
Files and hashes:         1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: fbxlnAvYOxnRFqGbBpIAbxzw1JG6P1rV/OdlHxUpfh0=)
                          2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: 6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=)
                          3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: qhXg7OZORCQmwfeMjxBNXmP6ZMvJvKn0GRTuJzNo35M=)
                          4: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: m2+w3MuoT8jahcLbP8IymDcYrHQo98+RI8vF7vbfRjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
                          rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
        Validity
            Not Before: May 15 06:37:47 2025 GMT
            Not After : May 22 06:37:47 2025 GMT
        Subject: CN=68258bbb-8050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:71:1b:21:ef:c6:12:67:b9:90:cf:89:1d:
                    61:c4:41:1f:c9:94:94:8c:bb:7b:73:a1:98:f2:45:
                    ec:ab:34:e2:cf:0d:30:d9:0c:b0:42:e4:f0:f0:a4:
                    2d:ea:52:58:22:52:e8:a5:b6:0d:7a:05:52:1a:5b:
                    d6:58:f4:42:78:84:67:c7:8b:e7:03:1d:a6:e2:e4:
                    19:ec:89:94:bf:ee:31:aa:95:f6:54:89:1e:ac:ff:
                    39:3d:da:07:9a:14:e8:b8:a2:3f:a2:14:c1:e6:20:
                    31:e8:80:2d:8d:5a:dc:84:76:6c:35:55:ad:6a:13:
                    50:59:27:1e:5a:1e:2f:f1:f7:6f:4e:7c:04:bf:6b:
                    35:3c:08:c7:fb:31:3a:8e:62:71:5a:4a:ed:14:e9:
                    2e:a6:e8:6a:8e:34:98:6e:75:f3:19:14:f0:dc:02:
                    8d:bc:27:21:6a:c6:2b:ed:20:64:71:40:95:7d:e8:
                    36:7a:97:9c:70:0b:4b:6e:88:06:70:4e:73:0b:5c:
                    9f:4e:dc:df:8b:b4:06:ea:ef:2e:99:76:0d:f3:60:
                    72:37:14:81:52:9d:4c:ee:48:d5:2a:d0:27:c9:4e:
                    de:2b:b1:1d:66:44:3b:63:2f:92:73:25:4f:55:0c:
                    b9:7a:e0:d7:8b:31:7a:9b:10:2f:17:88:33:a2:cd:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:46:54:6C:A4:C5:2C:EF:38:E4:BA:C5:0B:55:52:60:22:0A:58:5A
            X509v3 Authority Key Identifier:
                keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:37:f9:8a:56:d1:2f:48:88:86:b8:a6:91:3c:49:b7:bc:
         d3:13:56:01:d3:ef:4e:dd:16:c1:d0:ed:b6:15:e2:ac:fb:10:
         a1:29:12:3a:a3:87:da:28:a5:a8:84:9d:9d:5c:76:55:eb:5f:
         0b:e2:50:bb:5c:70:22:6e:0f:1f:16:66:15:89:e3:07:6a:6a:
         9b:76:17:23:6d:3a:52:9d:19:86:a1:fd:3a:79:f4:81:f3:38:
         cb:a8:97:2e:56:ba:69:06:52:7f:f6:8e:bb:af:b2:5f:0d:9d:
         68:98:10:db:21:52:1c:ed:a8:b2:20:c0:f4:ec:99:9f:a6:75:
         8a:e2:c3:1d:9d:8d:27:df:70:3d:29:d2:6b:02:52:7e:5e:ca:
         16:10:71:7f:21:d3:d0:fc:a3:1d:77:df:51:c1:b4:40:55:04:
         cf:ad:3f:75:39:20:e3:ff:2e:1d:b0:e0:d0:13:bb:89:7d:9e:
         fa:c6:31:ed:d6:8c:88:ab:36:5a:e4:7e:7a:a2:66:e2:12:22:
         49:f6:c2:52:1e:40:af:2b:d4:2d:5c:78:27:5a:86:ad:0c:7b:
         f7:1a:62:70:86:fe:be:7c:3c:b6:ec:04:81:84:47:41:71:1f:
         ad:3d:8c:c9:fb:cf:8b:ba:77:65:95:8c:0b:f7:61:27:6d:58:
         8a:ee:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:55:55 2025 by rpki-client